6485 matches found
Oracle Linux 5 : kernel (ELSA-2017-2801)
The remote Oracle Linux 5 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2017-2801 advisory. - fs fix bug in loading of PIE binaries Michael Davidson orabug 26916951 CVE-2017-1000253 Tenable has extracted the preceding description block directly from th...
LastRewardRound is sometimes not checkpointed for Delegators
Lines of code Vulnerability details Impact lastRewardRound is not updated/checkpointed for delegators when transcoder changes state. This results in incorrect rewards and votes. It also violates this checkpointing condition specified by the technical specification: Quote: "In practical terms, it...
Users can withdraw token multiple times by calling `withdrawStake' thereby depleting the treasury
Lines of code Vulnerability details The withdrawStake function is used to withdraw tokens for an unbounding lock that has existed through an unbounding period. All it needs is the unbondingLockId to carry out the operation. The associated ID gets deleted & the amount that has been bounded is...
Transfering Bonds would create confusion among delegators because of non-deletion of unbondingLocks & assigning all the new delegators the same unbounding id
Lines of code Vulnerability details transferBond function is used to transfers ownership of a bond to a new delegator using optional hints if needed. Here the old unbound lock is deleted after creating a new one in unbondWithHint function. But the problem lies in the delete operation as it does n...
CVE-2023-21655
Memory corruption in Audio while validating and mapping metadata...
Memory corruption
Memory corruption in Audio while validating and mapping metadata...
CVE-2023-21655 Integer Overflow or Wraparound in Display
Memory corruption in Audio while validating and mapping metadata...
CVE-2023-21655 Integer Overflow or Wraparound in Display
Memory corruption in Audio while validating and mapping metadata...
Qualcomm Chipsets Input Validation Error Vulnerability
Qualcomm Chipsets are a family of chipsets from Qualcomm Incorporated USA. A security vulnerability exists in Qualcomm Chipsets that stems from audio memory corruption when validating and mapping metadata...
WiFi-Pineapple-MK7_REST-Client - WiFi Hacking Workflow With WiFi Pineapple Mark VII API
PINEAPPLE MARK VII REST CLIENT The leading rogue access point and WiFi pentest toolkit for close access operations. Passive and active attacks analyze vulnerable and misconfigured devices. https://hak5.org/collections/sale/products/wifi-pineapple Author :: TW-D Version :: 1.3.7 Copyright ::...
Network Printers not getting mapped
Network Printers not getting mapped...
kernel: unmap_mapping_range() race with munmap() on VM_PFNMAP mappings leads to stale TLB entry
A flaw was found in include/asm-generic/tlb.h in the Linux kernel due to a race condition unmapmappingrange versus munmap. This issue allows a device driver to free a page while it still has stale TLB entries...
kernel: unmap_mapping_range() race with munmap() on VM_PFNMAP mappings leads to stale TLB entry
A flaw was found in include/asm-generic/tlb.h in the Linux kernel due to a race condition unmapmappingrange versus munmap. This issue allows a device driver to free a page while it still has stale TLB entries...
SUSE CVE-2020-19185
Buffer Overflow vulnerability in oneonemapping function in progs/dumpentry.c:1373 in ncurses 6.1 allows remote attackers to cause a denial of service via crafted command...
DEBIAN-CVE-2020-19185
Buffer Overflow vulnerability in oneonemapping function in progs/dumpentry.c:1373 in ncurses 6.1 allows remote attackers to cause a denial of service via crafted command...
PT-2023-11512 · Ncurses +1 · Ncurses +1
Name of the Vulnerable Software and Affected Versions: ncurses version 6.1 Description: The issue is related to a Buffer Overflow vulnerability in the one one mapping function in progs/dump entry.c:1373. This allows remote attackers to cause a denial of service via crafted commands. The...
Linux/x64 - memfd_create ELF loader Shellcode (170 bytes)
Shellcode Title: Linux/x64 - memfdcreate ELF loader 170 bytes Shellcode Author: Ivan Nikolsky enty8080 & Tomas Globis tomasglgg Tested on: Linux x8664 Shellcode Description: This shellcode attempts to establish reverse TCP connection, reads ELF length, reads ELF and maps it into the memory, creat...
Citrix WEM Network drives are not being mapped
Network drive mapping set through WEM doesn't map the drive In the WEM action viewer, it is shown as applied to the required WEM agent No errors related to this in the event viewer or WEM logs...
If gov use removeGauge users who use votingPower for that gauge will lose their votingPower infinetly.
Lines of code Vulnerability details Impact When gov use removeGauge gauge's power changed to the 0, however there is no reset for user votePower which stored in voteuserpower mapping. Because of that users will lose their voting power. For example if a user give his 1000 votingPower to removedGau...
