4949 matches found
CVE-2022-42401
creationtimestamp| type| source ---|---|--- 2023-01-26 20:39:43+00:00| seen| https://t.me/cibsecurity/56917 2025-03-31 19:31:12+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/9750...
Introducing Microservices Patterns with Spring Integration
Hey Spring Community! I hope you are enjoying Spring One Essentials these days. The most exciting feature for me is an Observability which is spread throughout the Spring portfolio from now on. Nevertheless, today I’d like to share with a project I’m working on since holidays, where the mentioned...
Chrome JSNativeContextSpecialization::BuildElementAccess Bypass
Chrome: Copy-on-write check bypass in JSNativeContextSpecialization::BuildElementAccess VULNERABILITY DETAILS Copy-on-write is one of V8's internal optimization features that allows multiple JavaScript objects to share the same element store. This feature is primarily used to optimize creation of...
CVE-2023-0244
creationtimestamp| type| source ---|---|--- 2023-01-12 18:30:22+00:00| seen| https://t.me/cibsecurity/56422...
An issue was discovered in ksmbd in the Linux kernel 5.15 through 5.18 before 5.18.18. fs/ksmbd/smb2pdu.c lacks length validation in the non-padding case in smb2_write.
...
CVE-2022-46603
creationtimestamp| type| source ---|---|--- 2023-01-10 02:28:13+00:00| seen| https://t.me/cibsecurity/56199...
CVE-2014-125059 sternenseemann sternenblog main.c blog_index file inclusion
A vulnerability, which was classified as problematic, has been found in sternenseemann sternenblog. This issue affects the function blogindex of the file main.c. The manipulation of the argument postpath leads to file inclusion. The attack may be initiated remotely. The complexity of an attack is...
CVE-2022-47943
An issue was discovered in ksmbd in the Linux kernel 5.15 through 5.19 before 5.19.2. There is an out-of-bounds read and OOPS for SMB2WRITE, when there is a large length in the zero DataOffset case...
GHSA-6MV3-WM7J-H4W5 Tauri Filesystem Scope Glob Pattern is too Permissive
Impact The filesystem glob pattern wildcards , ?, and ... match file path literals and leading dots by default, which unintentionally exposes sub folder content of allowed paths. Example: The fs scope $HOME/.key would also allow $HOME/.ssh/secret.key to be read even though it is in a sub director...
CVE-2020-36624
creationtimestamp| type| source ---|---|--- 2022-12-22 12:23:28+00:00| seen| https://t.me/cibsecurity/55108...
CVE-2020-20588
creationtimestamp| type| source ---|---|--- 2022-12-15 22:23:35+00:00| seen| https://t.me/cibsecurity/54608 2025-04-21 20:03:30+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/12755...
Pool calls to toScale can revert
Lines of code Vulnerability details Pool calls to toScale can revert Impact A division by 0 would revert the code. If wrongly assigned value in constructor to tokenAScale or tokenBScale, toScale calls would always revert. Proof of Concept constructor uint256 fee, uint256 tickSpacing, int32...
Downcast can lead to overflow and impact the functionality to remove an asset in NFTFloorOracle
Lines of code Vulnerability details Impact When adding a new asset, the index for the last asset will be saved and downcasted on L284. If the number of assets is bigger than 256, the downcasting operation will lead to a silent overflow. Consequentially, the incorrect index will be stored. This ca...
CVE-2022-42888
creationtimestamp| type| source ---|---|--- 2022-12-07 00:41:08+00:00| seen| https://t.me/cibsecurity/54106...
urijs: Authorization Bypass Through User-Controlled Key
A flaw was found in urijs due to the fix of CVE-2021-3647 not considering case-sensitive protocol schemes in the URL. This issue allows attackers to bypass the patch...
CVE-2022-43332
creationtimestamp| type| source ---|---|--- 2022-11-11 11:00:19+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/7146 2022-11-18 02:18:14+00:00| seen| https://t.me/cibsecurity/53128 2025-04-29 15:11:32+00:00| published-proof-of-concept|...
CVE-2022-3486
creationtimestamp| type| source ---|---|--- 2022-11-10 02:46:57+00:00| seen| https://t.me/cibsecurity/52802...
Borrower can close non-existent credit line positions to effectively force the overall status to REPAID
Lines of code Vulnerability details The LineOfCredit.close function is used to close a credit line position. Both the lender of a specific credit position and the borrower can call this function. However, the function does not check if the given id belongs to a credit line position in the credits...
Borrower can mark his line of credit as repaid by calling line.close(fakeId) repeatedly
Lines of code Vulnerability details Description This vulnerability can be summarized in the following 4 observations: 1. There are no checks to prevent calling line.close with id that doesn’t correspond to any open position. 2. The effect of calling line.close with a fake position id is...
