Exploit for CVE-2024-22890

CVE List CVE-2024-22890: My e-Diary App - Cross-Site-Script...

The vulnerability of the eval() function in the ImageMath module of the Pillow library allows a hacker to execute arbitrary code.

The vulnerability of the eval function in the ImageMath module of the Pillow library relates to improper code generation during the processing of the environment parameter. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

CVE-2024-24136

The 'Your Name' field in the Submit Score section of Sourcecodester Math Game with Leaderboard v1.0 is vulnerable to Cross-Site Scripting XSS attacks...

CVE-2024-24136

The 'Your Name' field in the Submit Score section of Sourcecodester Math Game with Leaderboard v1.0 is vulnerable to Cross-Site Scripting XSS attacks...

Cross site scripting

The 'Your Name' field in the Submit Score section of Sourcecodester Math Game with Leaderboard v1.0 is vulnerable to Cross-Site Scripting XSS attacks...

CVE-2024-24136: Improper Neutralization of Input During Web Page Generation

The 'Your Name' field in the Submit Score section of Sourcecodester Math Game with Leaderboard v1.0 is vulnerable to Cross-Site Scripting XSS attacks...

Math Game with Leaderboard Security Breach

Math Game with Leaderboard is a math game with leaderboards by rems personal developer. A security vulnerability exists in Math Game with Leaderboard version 1.0, which originates from a cross-site scripting XSS attack on the Your Name field...

PT-2024-20289 · Unknown · Sourcecodester Math Game With Leaderboard

Name of the Vulnerable Software and Affected Versions: Sourcecodester Math Game with Leaderboard version 1.0 Description: The issue concerns a Cross-Site Scripting XSS attack vulnerability. Specifically, the 'Your Name' field in the Submit Score section is affected. This type of attack occurs whe...

CVE-2024-24136

CVE-2024-24136 affects the Sourcecodester Math Game with Leaderboard (v1.0). The vulnerability is Cross-Site Scripting (XSS) in the Submit Score section, specifically the Your Name field, due to insufficient input sanitization. Public references include PoCs/exploits on GitHub and vendor advisori...

CVE-2024-24136

The 'Your Name' field in the Submit Score section of Sourcecodester Math Game with Leaderboard v1.0 is vulnerable to Cross-Site Scripting XSS attacks...

CVE-2024-24136

The 'Your Name' field in the Submit Score section of Sourcecodester Math Game with Leaderboard v1.0 is vulnerable to Cross-Site Scripting XSS attacks...

SUSE CVE-2023-50447

Pillow through 10.1.0 allows PIL.ImageMath.eval Arbitrary Code Execution via the environment parameter, a different vulnerability than CVE-2022-22817 which was about the expression parameter...

DEBIAN-CVE-2023-50447

Pillow through 10.1.0 allows PIL.ImageMath.eval Arbitrary Code Execution via the environment parameter, a different vulnerability than CVE-2022-22817 which was about the expression parameter...

CVE-2024-0607 Kernel: nf_tables: pointer math issue in nft_byteorder_eval()

A flaw was found in the Netfilter subsystem in the Linux kernel. The issue is in the nftbyteordereval function, where the code iterates through a loop and writes to the dst array. On each iteration, 8 bytes are written, but dst is an array of u32, so each element only has space for 4 bytes. That...

CVE-2024-0607 Kernel: nf_tables: pointer math issue in nft_byteorder_eval()

A flaw was found in the Netfilter subsystem in the Linux kernel. The issue is in the nftbyteordereval function, where the code iterates through a loop and writes to the dst array. On each iteration, 8 bytes are written, but dst is an array of u32, so each element only has space for 4 bytes. That...

Exploit for Cross-site Scripting in Remyandrade Math_Game

CVE-2024-24136 : Math Game Cross-Site-Scripti...

Loss of precision in calculations

Lines of code Vulnerability details The use of regular division can lead to loss of precision. This could enable certain manipulations through precision attacks. Recommendation: Use SafeMath's div for integer division. Division used in parent can lead to loss of precision. Safemath usage is...

CVE-2023-46247 Vyper has incorrect storage layout for contracts containing large arrays

Vyper is a Pythonic Smart Contract Language for the Ethereum Virtual Machine EVM. Contracts containing large arrays might underallocate the number of slots they need by 1. Prior to v0.3.8, the calculation to determine how many slots a storage variable needed used math.ceiltype.sizeinbytes / 32. T...

PT-2023-8447

Name of the Vulnerable Software and Affected Versions Pillow versions prior to 10.2.0 Description The issue is related to the incorrect management of code generation in the eval function of the ImageMath module in the Pillow library when processing the environment parameter. This can allow a remo...

convertedAmount set to zero because of bad math arithmetic

Lines of code Vulnerability details Impact Detailed description of the impact of this finding. The pool will be able to give an outputAmount corresponding to the rawInputAmount = 0 Proof of Concept Provide direct links to all referenced code in GitHub. Add screenshots, logs, or any other relevant...