9667 matches found
MAL-2022-2252 Malicious code in crypto-standarts (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f685dfa0855f5ffe22e60fd2899c1d19f071cb7b6f232d7e60a79f71d3410244 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in crypto-com-chain-wallet (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 437033f64c41a907ed403850561929fa9e944f2b536a5087c92a76a6bfec6a3b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2022-2251 Malicious code in crypto-com-chain-wallet (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 437033f64c41a907ed403850561929fa9e944f2b536a5087c92a76a6bfec6a3b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Atlassian Confluence Flaw Being Used to Deploy Ransomware and Crypto Miners
A recently patched critical security flaw in Atlassian Confluence Server and Data Center products is being actively weaponized in real-world attacks to drop cryptocurrency miners and ransomware payloads. In at least two of the Windows-related incidents observed by cybersecurity vendor Sophos,...
Upgraded Q -> M from 117 [1655579798819]
Judge has assessed an item in Issue 117 as Medium risk. The relevant finding follows: Don't use send / transfer to send ETH This is low severity but you should avoid these and use call --- The text was updated successfully, but these errors were encountered: All reactions...
abstract-boot (>=0.2.0-beta.4 <=0.2.0-beta.7), ace-test-lib (=0.1.0) +711 more potentially affected by unknown CVE via rust-crypto (=0.2.36)
rust-crypto CARGO version =0.2.36 is affected by a known vulnerability. The following packages have a transitive dependency on rust-crypto and may be impacted: - abstract-boot =0.2.0-beta.4, =0.0.1, =0.0.1, =0.1.0, =0.0.1, =0.1.0, =0.2.0, =0.8.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.3.0 and more...
GHSA-JP3W-3Q88-34CF Miscomputation when performing AES encryption in rust-crypto
The following Rust program demonstrates some strangeness in AES encryption - if you have an immutable key slice and then operate on that slice, you get different encryption output than if you operate on a copy of that key. For these functions, we expect that extending a 16 byte key to a 32 byte k...
Miscomputation when performing AES encryption in rust-crypto
The following Rust program demonstrates some strangeness in AES encryption - if you have an immutable key slice and then operate on that slice, you get different encryption output than if you operate on a copy of that key. For these functions, we expect that extending a 16 byte key to a 32 byte k...
EulerOS 2.0 SP5 : golang (EulerOS-SA-2022-1890)
According to the versions of the golang packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - cmd/go in Go before 1.16.14 and 1.17.x before 1.17.7 can misinterpret branch names that falsely appear to be version tags. This can lead to...
GHSA-PMCV-MGCF-RVXG Non-aligned u32 read in Chacha20 encryption and decryption
The implementation does not enforce alignment requirements on input slices while incorrectly assuming 4-byte alignment through an unsafe call to std::slice::fromrawpartsmut, which breaks the contract and introduces undefined behavior. This affects Chacha20 encryption and decryption in crypto2...
Updated golang packages fix security vulnerability
crypto/tls: session tickets lack random ticketageadd. Session tickets generated by crypto/tls did not contain a randomly generated ticketageadd. This allows an attacker that can observe TLS handshakes to correlate successive connections by comparing ticket ages during session resumption...
CVE-2022-20159
In asn1ecpkeyparse of acropora/crypto/asn1common.c, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android...
Gitignore too low
Lines of code Vulnerability details Impact Detailed description of the impact of this finding. Proof of Concept Provide direct links to all referenced code in GitHub. Add screenshots, logs, or any other relevant proof that illustrates the concept. Too short gitignore Tools Used Recommended...
Upgraded Q -> H from 41 [1655143123011]
Judge has assessed an item in Issue 41 as High risk. The relevant finding follows: StakedCitadelVester.sol Not implemented IVesting interface. The function vest is named incorrectly . Should be setupVesting called from StakedCitadel.sol. --- The text was updated successfully, but these errors wer...
asdf
Lines of code asdfL7-9 Vulnerability details Impact Detailed description of the impact of this finding. Proof of Concept Provide direct links to all referenced code in GitHub. Add screenshots, logs, or any other relevant proof that illustrates the concept. Tools Used Recommended Mitigation Steps...
Upgraded Q -> H from 25 [1655007954017]
Judge has assessed an item in Issue 25 as High risk. The relevant finding follows: Fees should have a boundary of 100% 10000: Otherwise the contract will try to transfer more than possible which will result in reverts: It might also be helpful the have an fixed upper boundary that doesn't allow t...
Upgraded Q -> M from 198 [1654952432267]
Judge has assessed an item in Issue 198 as Medium risk. The relevant finding follows: --- The text was updated successfully, but these errors were encountered: All reactions...
Important: Red Hat Security Advisory: Red Hat Advanced Cluster Management 2.5 security updates, images, and bug fixes
Red Hat Advanced Cluster Management for Kubernetes 2.5.0 is now generally available. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...
Uncontrolled Recursion
Overview std/crypto/rand is a Go standard library package std/crypto/rand Affected versions of this package are vulnerable to Uncontrolled Recursion. Go Vulnerability Report: in the rand.Read function on Windows when a buffer larger than 1 32 - 1 bytes is provided. An attacker can cause the proce...