CVE-2018-13383

creationtimestamp| type| source ---|---|--- 2023-06-14 21:10:03+00:00| seen| MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123 2023-12-04 05:34:39+00:00| seen| https://t.me/arpsyndicate/1125 2024-12-24 20:25:48+00:00| seen| https://feedsin.space/feed/CISAKevBot/items/2971202 2025-02-23 02:10:18+00:00|...

CVE-2019-1064

creationtimestamp| type| source ---|---|--- 2023-06-14 21:10:03+00:00| seen| MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123 2023-12-04 10:00:27+00:00| seen| https://t.me/arpsyndicate/1174 2024-03-15 08:58:02+00:00| seen| https://t.me/ptsoft/243 2024-05-03 09:04:40+00:00| published-proof-of-concept|...

CVE-2019-0903

creationtimestamp| type| source ---|---|--- 2023-06-14 21:10:03+00:00| seen| MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123 2023-12-04 08:41:57+00:00| seen| https://t.me/arpsyndicate/1159 2024-12-24 20:29:13+00:00| seen| https://feedsin.space/feed/CISAKevBot/items/2971431 2025-02-23 02:10:22+00:00|...

CVE-2017-12238

creationtimestamp| type| source ---|---|--- 2023-06-14 21:10:03+00:00| seen| MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123 2024-12-24 20:27:36+00:00| seen| https://feedsin.space/feed/CISAKevBot/items/2971323 2025-02-23 02:10:14+00:00| seen| MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123 2026-02-02...

CVE-2017-6737

creationtimestamp| type| source ---|---|--- 2023-06-14 21:10:03+00:00| seen| MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123 2024-12-24 20:27:41+00:00| seen| https://feedsin.space/feed/CISAKevBot/items/2971329 2025-02-23 02:10:16+00:00| seen| MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123 2026-02-02...

CVE-2018-0159

creationtimestamp| type| source ---|---|--- 2023-06-14 21:10:03+00:00| seen| MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123 2023-12-05 08:55:06+00:00| seen| https://t.me/arpsyndicate/1437 2024-12-24 20:27:52+00:00| seen| https://feedsin.space/feed/CISAKevBot/items/2971341 2025-02-23 02:10:17+00:00|...

CVE-2018-0172

creationtimestamp| type| source ---|---|--- 2023-06-14 21:10:03+00:00| seen| MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123 2024-12-24 20:27:55+00:00| seen| https://feedsin.space/feed/CISAKevBot/items/2971344 2025-02-23 02:10:17+00:00| seen| MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123 2026-02-02...

CVE-2018-5430

creationtimestamp| type| source ---|---|--- 2023-06-14 21:10:03+00:00| seen| MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123 2024-12-24 20:33:38+00:00| seen| https://feedsin.space/feed/CISAKevBot/items/2971752 2025-01-28 03:22:55+00:00| seen| Telegram/xSIUXY7PzwmAJUFN3oeafRoZJBVpH7HnY6pdz8Z5YoQooM...

CVE-2018-0161

creationtimestamp| type| source ---|---|--- 2023-06-14 21:10:03+00:00| seen| MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123 2024-12-24 20:27:53+00:00| seen| https://feedsin.space/feed/CISAKevBot/items/2971342 2025-02-23 02:10:17+00:00| seen| MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123 2026-02-02...

CVE-2013-0631

creationtimestamp| type| source ---|---|--- 2023-06-14 21:10:03+00:00| seen| MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123 2023-12-04 16:42:35+00:00| exploited| https://t.me/arpsyndicate/1253 2024-12-24 20:28:16+00:00| seen| https://feedsin.space/feed/CISAKevBot/items/2971366 2025-02-06 02:43:26+00:0...

CVE-2018-0156

creationtimestamp| type| source ---|---|--- 2023-06-14 21:10:03+00:00| seen| MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123 2023-12-04 08:08:04+00:00| seen| https://t.me/arpsyndicate/1154 2024-12-24 20:27:51+00:00| seen| https://feedsin.space/feed/CISAKevBot/items/2971339 2025-02-23 02:10:17+00:00|...

CVE-2014-2817

creationtimestamp| type| source ---|---|--- 2023-06-14 21:10:03+00:00| seen| MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123 2023-12-04 07:54:18+00:00| seen| https://t.me/arpsyndicate/1151 2024-12-24 20:31:42+00:00| seen| https://feedsin.space/feed/CISAKevBot/items/2971601 2025-02-14 10:00:29+00:00|...

CVE-2009-0557

creationtimestamp| type| source ---|---|--- 2023-06-14 21:10:02+00:00| seen| MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123 2023-12-05 03:21:11+00:00| seen| https://t.me/arpsyndicate/1378 2024-12-24 20:32:01+00:00| seen| https://feedsin.space/feed/CISAKevBot/items/2971626 2025-02-23 02:09:59+00:00|...

CVE-2004-0210

creationtimestamp| type| source ---|---|--- 2023-06-14 21:10:02+00:00| seen| MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123 2023-12-03 14:48:09+00:00| seen| https://t.me/arpsyndicate/958 2024-12-24 20:26:47+00:00| seen| https://feedsin.space/feed/CISAKevBot/items/2971269 2025-02-23 02:09:58+00:00| see...

CVE-2004-1464

creationtimestamp| type| source ---|---|--- 2023-06-14 21:10:02+00:00| seen| MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123 2023-12-03 14:06:52+00:00| seen| https://t.me/arpsyndicate/950 2024-12-24 20:34:28+00:00| seen| https://feedsin.space/feed/CISAKevBot/items/2971820 2025-02-23 02:09:58+00:00| see...

No stale data check on data being read from POR feed

Lines of code Vulnerability details Impact Stale data of exchange rate data being used protocol, resulting in loss in terms of ETHX being minted at stale exchange rate which won't have accounted for new reward Recommended Mitigation Steps Check lastUpdatedAt timestamp and that it is within...

getPORFeedData() doesn't validate price feed answers (totalETHBalanceInInt and totalETHXSupplyInInt) before casting to uint256

Lines of code Vulnerability details Impact If a negative value is returned 0 from chainlink oracle and the value is cast to type uint256, the resulting value will be the unsigned representation of that value which will be an inaccurate price. Also, cases where sdprice can't be less than 0 will...

Oracle data is not sufficiently validated

Lines of code Vulnerability details Impact The retrieved price from the oracle can be stale value or outdated and used anyways as a valid data. The usage of such data can impact on how the further logics of that price are implemented. Proof of Concept File: StaderOracle.sol function getPORFeedDat...

CVE-2023-2503

CVE-2023-2503 affects the 10Web Social Post Feed WordPress plugin (pre-1.2.9). Root cause: the plugin does not sanitize/escape certain parameters before output, enabling a Reflected XSS under admin contexts. Impact per sources: MEDIUM (CVSS 3.1 base 6.1). Remediation: upgrade to plugin version 1....

CVE-2023-2503 10WebSocial < 1.2.9 - Reflected XSS

The 10Web Social Post Feed WordPress plugin before 1.2.9 does not sanitise and escape some parameter before outputting it back in a page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin...