Important state updates are made after the callback in the mint() function

Handle jayjonah8 Vulnerability details Impact In TimeswapPair.sol, the mint function has a callback in the middle of the function while there are still updates to state that take place after the callback. The lock modifier guards against reentrancy but not against cross function reentrancy. Since...

Apache Log4Shell RCE detection via callback correlation (Direct Check UPnP)

Binary data apachelog4shellupnp.nbin...

Apache Log4Shell RCE detection via callback correlation (Direct Check SNMP)

Binary data apachelog4shellsnmp.nbin...

Apache Log4Shell RCE detection via callback correlation (Direct Check NTP)

Binary data log4jlog4shellntp.nbin...

Apache Log4Shell RCE detection via callback correlation (Direct Check DNS)

Binary data apachelog4shelldns.nbin...

Apache Log4Shell RCE detection via callback correlation (Direct Check SMB)

Binary data log4jlog4shellsmb.nbin...

Apache Log4Shell RCE detection via callback correlation (Direct Check NetBIOS)

Binary data apachelog4shellnetbios.nbin...

Apache Log4Shell RCE detection via callback correlation (Direct Check Telnet)

Binary data apachelog4jjdnildapgenerictelnet.nbin...

Apache Log4Shell RCE detection via callback correlation (Direct Check POP3)

Binary data apachelog4shellpop3.nbin...

Apache Log4Shell RCE detection via callback correlation (Direct Check IMAP)

Binary data apachelog4shellimap.nbin...

Apache Log4Shell RCE detection via callback correlation (Direct Check SMTP)

Binary data apachelog4shellsmtp.nbin...

Apache Log4Shell RCE detection via callback correlation (Direct Check SSH)

Binary data apachelog4shellssh.nbin...

pcl:ply_reader_fuzzer: Heap-buffer-overflow in void pcl::PLYReader::vertexListPropertyContentCallback<unsigned short>

Detailed Report: https://oss-fuzz.com/testcase?key=5756458652794880 Project: pcl Fuzzing Engine: afl Fuzz Target: plyreaderfuzzer Job Type: aflasanpcl Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 2 Crash Address: 0x61500569fe8c Crash State: void...

Apache Log4Shell RCE detection via callback correlation (Direct Check FTP)

Binary data log4jlog4shellftp.nbin...

Exploit for Uncontrolled Resource Consumption in Siemens 6Bk1602-0Aa12-0Tp0_Firmware

LogMePwn LogMePwn is a fully automated, multi-protocol, reliab...

Exploit for Deserialization of Untrusted Data in Siemens 6Bk1602-0Aa12-0Tp0_Firmware

PoC exploit for CVE-2021-44228, a vulnerability in the Log4j Java library. The target product/service is Log4j, a Java logging library, and the vulnerability class/vector is a Remote Code Execution RCE vulnerability. The probable entry point is the "sendDetectionRequest" function in the...

Exploit for Uncontrolled Resource Consumption in Siemens 6Bk1602-0Aa12-0Tp0_Firmware

CVE-2021-44228: Log4j / Log4Shell Security Research Summary...

Apache Log4Shell RCE detection via callback correlation (Direct Check HTTP)

Binary data apachelog4jjdnildapgenerichttpheaders.nbin...

CVE-2021-36760

In accountrecoveryendpoint/recoverpassword.do in WSO2 Identity Server 5.7.0, it is possible to perform a DOM-Based XSS attack affecting the callback parameter modifying the URL that precedes the callback parameter. Once the username or password reset procedure is completed, the JavaScript code wi...

RUSTSEC-2021-0128 Incorrect Lifetime Bounds on Closures in `rusqlite`

The lifetime bound on several closure-accepting rusqlite functions specifically, functions which register a callback to be later invoked by SQLite was too relaxed. If a closure referencing borrowed values on the stack is was passed to one of these functions, it could allow Rust code to access...