GHSA-X825-RJWW-2245 Apache Storm it is possible for the owner of a topology to trick the supervisor to launch a worker as a different, non-root, user

It was found that under some situations and configurations of Apache Storm 1.x before 1.0.4 and 1.1.x before 1.1.1, it is theoretically possible for the owner of a topology to trick the supervisor to launch a worker as a different, non-root, user. In the worst case this could lead to secure...

Apache Storm it is possible for the owner of a topology to trick the supervisor to launch a worker as a different, non-root, user

It was found that under some situations and configurations of Apache Storm 1.x before 1.0.4 and 1.1.x before 1.1.1, it is theoretically possible for the owner of a topology to trick the supervisor to launch a worker as a different, non-root, user. In the worst case this could lead to secure...

CVE-2018-9511

In ipSecSetEncapSocketOwner of XfrmController.cpp, there is a possible failure to initialize a security feature due to uninitialized data. This could lead to local denial of service of IPsec on sockets with no additional execution privileges needed. User interaction is not needed for exploitation...

Demonoid goes offline with owner missing in action for last two months

By Waqas It has been many days since a popular, semi-private BitTorrent tracker Demonoid has remained offline. The employees working for this website are also clueless about what’s happening and claim that the owner of Demonoid, Deimos, is also missing. None of them have had any contact with him...

Fail to add second storefront to server group due to users right assignment

The second storefront cannot be added to server group. Reinstallation and Reset Storefront cannot solve the issue. StoreFront verbose log has the error below: 00000953 11:29:50 AM 5444 SetFolderOwnerStep Setting: NT Service\CitrixSubscriptionsStore as owner of folder:...

Integer overflow

An integer overflow in the distributeBTR function of a smart contract implementation for Bitcoin Red BTCR, an Ethereum ERC20 token, allows the owner to accomplish an unauthorized increase of digital assets by providing a large address array, as exploited in the wild in May 2018, aka the...

VulnCheck KEV: CVE-2018-11687

An integer overflow in the distributeBTR function of a smart contract implementation for Bitcoin Red BTCR, an Ethereum ERC20 token, allows the owner to accomplish an unauthorized increase of digital assets by providing a large address array, as exploited in the wild in May 2018, aka the...

Integer overflow

An issue was discovered in a smart contract implementation for EUC EUC, an Ethereum token. The contract has an integer overflow. If the owner sets the value of buyPrice to a large number in setPrices then the "msg.value buyPrice" will cause an integer overflow in the fallback function...

Authorization

RSA Identity Lifecycle and Governance versions 7.0.1, 7.0.2 and 7.1.0 contains an authorization bypass vulnerability within the workflow architect component ACM. A remote authenticated malicious user with non-admin privileges could potentially bypass the Java Security Policies. Once bypassed, a...

CoquinhoERC20 Integer Overflow Vulnerability

CoquinhoERC20 is a tradable Ether ERC20 token. An integer overflow vulnerability exists in the mintToken function of CoquinhoERC20's smart contract implementation. The vulnerability can be exploited by the contract owner to set the balance of any user to any value...

UTCT Integer Overflow Vulnerability

UTCT is a tradable Ether ERC20 token. An integer overflow vulnerability exists in the mintToken function of UTCT's smart contract implementation. The vulnerability can be exploited by the contract owner to set the balance of any user to any value...

Bgamecoin Integer Overflow Vulnerability

Bgamecoin is a tradable Ether ERC20 token. An integer overflow vulnerability exists in the mintToken function of Bgamecoin's smart contract implementation. The vulnerability can be exploited by the contract owner to set the balance of any user to any value...

NeuroToken Integer Overflow Vulnerability

NeuroToken is a tradable Ether ERC20 token. An integer overflow vulnerability exists in the mintToken function of NeuroToken's smart contract implementation. The vulnerability can be exploited by the contract owner to set the balance of any user to any value...

Trabet_Coin_PreICO Integer Overflow Vulnerability

TrabetCoinPreICO is a tradable Ether ERC20 token. An integer overflow vulnerability exists in the mintToken function of TrabetCoinPreICO's smart contract implementation. The vulnerability can be exploited by the contract owner to set the balance of any user to any value...

JaxBox Integer Overflow Vulnerability

JaxBox is a tradable Ether ERC20 token. An integer overflow vulnerability exists in the mintToken function of JaxBox's smart contract implementation. The vulnerability can be exploited by the contract owner to set the balance of any user to any value...

Micro BTC Integer Overflow Vulnerability

Micro BTC is a tradable Ether ERC20 token. An integer overflow vulnerability exists in the mintToken function of Micro BTC's smart contract implementation. The vulnerability can be exploited by the contract owner to set the balance of any user to any value...

Eastcoin Integer Overflow Vulnerability

Eastcoin is a tradable Ether ERC20 token. An integer overflow vulnerability exists in the mintToken function of Eastcoin's smart contract implementation. The vulnerability can be exploited by the contract owner to set the balance of any user to any value...

BiteduToken Integer Overflow Vulnerability

BiteduToken is a tradable Ether ERC20 token. An integer overflow vulnerability exists in the mintToken function of BiteduToken's smart contract implementation. The vulnerability can be exploited by the contract owner to set the balance of any user to any value...

ABLGenesisToken Integer Overflow Vulnerability

ABLGenesisToken is a tradable Ether ERC20 token. An integer overflow vulnerability exists in the mintToken function of ABLGenesisToken's smart contract implementation. The vulnerability can be exploited by the contract owner to set the balance of any user to any value...

STCToken Integer Overflow Vulnerability

STCToken is a tradable Ether ERC20 token. An integer overflow vulnerability exists in the mintToken function of STCToken's smart contract implementation. The vulnerability can be exploited by the contract owner to set the balance of any user to any value...