Malicious proposal can drain the treasury contract and bypass the gscAllowance[token] check

Lines of code Vulnerability details Impact Malicious proposal can drain the treasury contract and bypass the gscAllowancetoken check Proof of Concept See this two function: function gscSpend address token, uint256 amount, address destination external onlyRoleGSCCOREVOTINGROLE nonReentrant if...

treasury approveSmallSpending, approveMediumSpend and approveLargeSpend and setThreshold and setGSCAllowance can be frontrunned

Lines of code Vulnerability details Line of code: Impact treasury approveSmallSpending, approveMediumSpend and approveLargeSpend can be frontrunned Proof of Concept the AracheTreasury, there are three spending relate function: approveSmallSpend, approveMediumSpend, approveLargeSpend both of these...

PT-2023-26545 · Unknown · Paddlepaddle

Name of the Vulnerable Software and Affected Versions: PaddlePaddle versions prior to 2.5.0 Description: The issue is related to a flaw that can cause a runtime crash and a denial of service. It is associated with FPE in paddle.trace and paddle.linalg.matrix power in PaddlePaddle. Recommendations...

CVE-2022-46901

An issue was discovered in Vocera Report Server and Voice Server 5.x through 5.8. There is an Access Control Violation for Database Operations. The Vocera Report Console contains a websocket interface that allows for the unauthenticated execution of various tasks and database functions. This...

Design/Logic Flaw

An issue was discovered in Vocera Report Server and Voice Server 5.x through 5.8. There is an Access Control Violation for Database Operations. The Vocera Report Console contains a websocket interface that allows for the unauthenticated execution of various tasks and database functions. This...

CVE-2023-35078

An authentication bypass vulnerability in Ivanti EPMM allows unauthorized users to access restricted functionality or resources of the application without proper authentication...

The vulnerability of the Easy!Appointments web application is related to lack of access control, allowing an attacker to gain unauthorized access to limited functions.

The vulnerability of the Easy!Appointments web application is related to lack of access control. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to limited functions of the application...

Lawyer 跨站脚本漏洞

Lawyer is a legal and lawyer website by the phpscriptpoint team. A cross-site scripting vulnerability exists in phpscriptpoint Lawyer version 1.6, which stems from the presence of some unknown functions in search.php that lead to cross-site scripting...

phpscriptpoint Lawyer 跨站脚本漏洞

Lawyer is a legal and attorney website by the phpscriptpoint team. A cross-site scripting vulnerability exists in phpscriptpoint Lawyer version 1.6, which stems from the presence of some unknown functions in page.php that lead to cross-site scripting...

Insurance 跨站脚本漏洞

Insurance is a responsive business and insurance related web content management system CMS from the phpscriptpoint team. A cross-site scripting vulnerability exists in Insurance version 1.2, which stems from the inclusion of unknown functions in the file page.php, resulting in cross-site scriptin...

PT-2023-35919 · Git +1 · Radare2

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: A heap-use-after-free READ 8 crash has been reported. The crash state includes functions such as Elf64 free, destroy, and r bin file free. Recommendation...

PT-2023-26271 · Sourcecodester · Sourcecodester House Rental/Property Listing

Name of the Vulnerable Software and Affected Versions: SourceCodester House Rental and Property Listing System version 1.0 Description: A critical vulnerability was found in the system, affecting an unknown function of the file btn functions.php. This issue leads to unrestricted upload and can be...

The vulnerability of SIMATIC NET PC Software, WinCC, and SINAUT Software lies in the use of outdated functions, which allow an intruder to gain unauthorized access to encrypted data.

The vulnerabilities of SIMATIC NET PC Software, WinCC, and SINAUT Software are related to the use of outdated functions. Exploiting these vulnerabilities can allow an intruder, operating remotely, to gain unauthorized access to encrypted data...

OpenSSL 1.0.2 < 1.0.2zi Multiple Vulnerabilities

The version of OpenSSL installed on the remote host is prior to 1.0.2zi. It is, therefore, affected by multiple vulnerabilities as referenced in the 1.0.2zi advisory. - Issue summary: Checking excessively long DH keys or parameters may be very slow. Impact summary: Applications that use the...

PT-2023-35914 · Git +1 · Opensc

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: A heap-buffer-overflow READ 1 crash has been reported. The crash involves the following functions: setcos create key, sc pkcs15init generate key, and do...

The configuration interface vulnerability of the Hitron CODA-5310 cable switch allows a perpetrator to execute arbitrary commands or cause service failures.

The vulnerability of the Hitron CODA-5310 cable gateway configuration interface is related to the absence of authentication for critical functions. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands or cause service failures...

VX-API - Collection Of Various Malicious Functionality To Aid In Malware Development

The VX-API is a collection of malicious functionality to aid in malware development. It is recommended you clone and/or download this entire repo then open the Visual Studio solution file to easily explore functionality and concepts. Some functions may be dependent on other functions present with...

Inconsistencies When Using Inherited Functions

Lines of code https://github.com/code-423n4/2023-06-lukso/blob/9dbc96410b3052fc0fd9d423249d1fa42958cae8/contracts/LSP0ERC...

PT-2023-7949 · D Link · D-Link G416

Name of the Vulnerable Software and Affected Versions: D-Link G416 affected versions not specified Description: The issue is related to a lack of authentication for a critical function in the httpd daemon of the D-Link G416 router's firmware. This allows a remote attacker to bypass security...

Unused returns on the ds. _withdraw(), NounsDAOLogicV3._withdraw(), and ds.executeFork()

Lines of code Vulnerability details Impact The return value of the external calls are not stores in a local variable or a state variable Proof of Concept The return values do not store the results in a store local or state variable. As a result, the computation have no effect. Code:...