624 matches found
Linux Distros Unpatched Vulnerability : CVE-2018-10187
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In radare2 2.5.0, there is a heap-based buffer over-read in the dalvikop function libr/anal/p/analdalvik.c. Remote attackers could leverage this vulnerability t...
Linux Distros Unpatched Vulnerability : CVE-2018-8808
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In radare2 2.4.0, there is a heap-based buffer over-read in the rasmdisassemble function of asm.c. Remote attackers could leverage this vulnerability to cause a...
Linux Distros Unpatched Vulnerability : CVE-2018-10186
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In radare2 2.5.0, there is a heap-based buffer over-read in the rhexbin2str function libr/util/hex.c. Remote attackers could leverage this vulnerability to caus...
Linux Distros Unpatched Vulnerability : CVE-2017-6415
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The dexparsedebugitem function in libr/bin/p/bindex.c in radare2 1.2.1 allows remote attackers to cause a denial of service NULL pointer dereference and...
Linux Distros Unpatched Vulnerability : CVE-2017-6387
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The dexloadcode function in libr/bin/p/bindex.c in radare2 1.2.1 allows remote attackers to cause a denial of service out-of-bounds read and application crash v...
Linux Distros Unpatched Vulnerability : CVE-2018-8809
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In radare2 2.4.0, there is a heap-based buffer over-read in the dalvikop function of analdalvik.c. Remote attackers could leverage this vulnerability to cause a...
Malicious code in @zalastax/nolb-dex (npm)
The package @zalastax/nolb-dex was found to contain malicious code...
MAL-2025-11150 Malicious code in @zalastax/nolb-dex (npm)
The package @zalastax/nolb-dex was found to contain malicious code...
MAL-2025-9922 Malicious code in @zalastax/nolb-_dex (npm)
The package @zalastax/nolb-dex was found to contain malicious code...
Malicious code in okx-dex (npm)
The package communicates with a domain associated with malicious activity...
MAL-2025-6111 Malicious code in okx-dex (npm)
The package communicates with a domain associated with malicious activity...
Measuring CEX-DEX Extracted Value and Searcher Profitability: the Darkest of the MEV Dark Forest
This paper provides a comprehensive empirical analysis of the economics and dynamics behind arbitrages between centralized and decentralized exchanges CEX-DEX on Ethereum. We refine heuristics to identify arbitrage transactions from on-chain data and introduce a robust empirical framework to...
Malicious code in dex-sample-app (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a5833f372bb58f2c3d63ada7d769c410b4464de4c9a0084d3e8f8ecbee863f4f Any computer that has this package installed or running should be considered...
MAL-2025-5997 Malicious code in dex-sample-app (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a5833f372bb58f2c3d63ada7d769c410b4464de4c9a0084d3e8f8ecbee863f4f Any computer that has this package installed or running should be considered...
MAL-2025-5770 Malicious code in dex-core-v2 (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 43ea4e0d3d0e8d1d1bedac44fc35d275146740cdf21e51a4328174bc6304e064 Any computer that has this package installed or running should be considered...
Malicious code in dex-core-v2 (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 43ea4e0d3d0e8d1d1bedac44fc35d275146740cdf21e51a4328174bc6304e064 Any computer that has this package installed or running should be considered...
CVE-2024-20802
Improper access control vulnerability in Samsung DeX prior to SMR Jan-2024 Release 1 allows owner to access other users' notification in a multi-user environment...
CVE-2024-49414
Authentication Bypass Using an Alternate Path in Dex Mode prior to SMR Dec-2024 Release 1 allows physical attackers to temporarily access to recent app list...