CVE-2022-0212: Improper Neutralization of Input During Web Page Generation

The SpiderCalendar WordPress plugin through 1.5.65 does not sanitise and escape the callback parameter before outputting it back in the page via the window AJAX action available to both unauthenticated and authenticated users, leading to a Reflected Cross-Site Scripting issue...

CVE-2022-21724 Unchecked Class Instantiation when providing Plugin Classes

pgjdbc is the offical PostgreSQL JDBC Driver. A security hole was found in the jdbc driver for postgresql database while doing security research. The system using the postgresql library will be attacked when attacker control the jdbc url or properties. pgjdbc instantiates plugin instances based o...

Mageia: Security Advisory (MGASA-2014-0291)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

PT-2022-2546

Name of the Vulnerable Software and Affected Versions Lenovo Notebook models affected versions not specified Description A potential issue in the SMI callback function used in the Legacy BIOS mode driver may allow an attacker with local access and elevated privileges to execute arbitrary code. Th...

PT-2022-37194

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description A heap-use-after-free READ 8 crash has been reported. The crash involves the pdfi cspace free callback, gs cspace final, and alloc restore step in function...

Possible Re-entrancy in _sendSherRewardsToOwner

Handle static Vulnerability details Vulnerability details Impact If the SHER token performs a callback, such as in ERC-777 tokens, when performing transfers, the sendSherRewardsToOwner function can be run multiple times to extract more rewards than should be available for a single NFT. Proof of...

memory contents disclosure in cli_feat_read_cb

...

PT-2022-7145

Name of the Vulnerable Software and Affected Versions SpiderCalendar WordPress plugin versions 1.5.65 and earlier Description The issue exists due to insufficient protection of the webpage structure, allowing a remote attacker to conduct a cross-site scripting XSS attack. Specifically, the...

SpiderCalendar <= 1.5.65 - Reflected Cross-Site Scripting

The plugin does not sanitise and escape the callback parameter before outputting it back in the page via the window AJAX action available to both unauthenticated and authenticated users, leading to a Reflected Cross-Site Scripting issue. Note: Vendor decided to close the plugin and it won't be...

Apache Log4Shell RCE detection via callback correlation (Direct Check MSRPC)

Binary data apachelog4shellmsrpc.nbin...

GSD-2022-1000045 net/mlx5e: Wrap the tx reporter dump callback to extract the sq

net/mlx5e: Wrap the tx reporter dump callback to extract the sq This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.90 by commit...

PT-2022-28336

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.90 Description The issue is related to the net/mlx5e component, specifically with wrapping the tx reporter dump callback to extract the sq. The actual impact and attack plausibility have not yet been proven...

PT-2022-28348

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.13 Description The issue is related to the net/mlx5e component, specifically with wrapping the tx reporter dump callback to extract the sq. The actual impact and attack plausibility have not yet been proven...

Depositor can reenter contract on claim creation

Handle kenzo Vulnerability details This finding is almost identical to my previous finding "Claimer can reenter contract on claim creation", but in this scenario, the depositor can reenter via Depositors' safeMint function. When depositing, Depositors is minting the token using safeMint, which wi...

Apache Log4Shell RCE detection via callback correlation (Direct Check RPCBIND)

Binary data log4jlog4shellrpcbind.nbin...

Convenience contract fails to function if asset or collateral is an ERC20 token with fees

Handle Ruhum Vulnerability details Impact There are ERC20 tokens that collect fees with each transfer. If the asset or collateral used in a pair is of that type, the Convenience contract fails to function. It always sends the flat amount specified in the function's parameter. If the token collect...

pay() function has callback to msg.sender before important state updates

Handle jayjonah8 Vulnerability details Impact In TimeswapPair.sol, the pay function has a callback to the msg.sender in the middle of the function while there are still updates to state that take place after the callback. The lock modifier guards against reentrancy but not against cross function...

Apache Log4Shell RCE detection via callback correlation (Direct Check PPTP)

Binary data log4jlog4shellpptp.nbin...

In the lend() function state updates are made after the callback

Handle jayjonah8 Vulnerability details Impact In TimeswapPair.sol, the lend function has a callback to the msg.sender in the middle of the function while there are still updates to state that take place after the callback. The lock modifier guards against reentrancy but not against cross function...

Important state updates are made after the callback in the mint() function

Handle jayjonah8 Vulnerability details Impact In TimeswapPair.sol, the mint function has a callback in the middle of the function while there are still updates to state that take place after the callback. The lock modifier guards against reentrancy but not against cross function reentrancy. Since...