Mozilla Firefox < 89.0

The version of Firefox installed on the remote macOS or Mac OS X host is prior to 89.0. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2021-23 advisory. - Mozilla developers Christian Holler, Anny Gakhokidze, Alexandru Michis, Gabriele Svelto reported memory safet...

Code injection

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. In versions prior to 11.10.13, 12.6.7, and 12.10.2, a user disabled on a wiki using email verification for registration canouldre-activate themself by using the activation link provided for hi...

CVE-2021-32620 Users registered with email verification can self re-activate their disabled accounts

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. In versions prior to 11.10.13, 12.6.7, and 12.10.2, a user disabled on a wiki using email verification for registration canouldre-activate themself by using the activation link provided for hi...

CVE-2021-32075

Re-Logic Terraria before 1.4.2.3 performs Insecure Deserialization...

Deserialization of untrusted data

Re-Logic Terraria before 1.4.2.3 performs Insecure Deserialization...

CVE-2021-32075

Re-Logic Terraria before 1.4.2.3 performs Insecure Deserialization...

CVE-2021-32075

Affected software: Re-Logic Terraria (PC/console) pre-1.4.2.3. Vulnerability: Insecure deserialization. Root cause: Deserialization of untrusted/tainted data in the game’s code path. Impact: High (confidentiality, integrity, and availability potentially affected per CVSS metrics). Status: No reme...

CVE-2021-32075: Deserialization of Untrusted Data

Re-Logic Terraria before 1.4.2.3 performs Insecure Deserialization...

PT-2021-19655

Name of the Vulnerable Software and Affected Versions: Re-Logic Terraria versions prior to 1.4.2.3 Description: The issue is related to Insecure Deserialization. There is no information provided about the estimated number of potentially affected devices worldwide or real-world incidents where thi...

XWiki users registered with email verification can self re-activate their disabled accounts

Impact A user disabled on a wiki using email verification for registration can re-activate himself by using the activation link provided for his registration. Patches The problem has been patched in the following versions of XWiki: 11.10.13, 12.6.7, 12.10.2, 13.0. Workarounds It's possible to...

GHSA-76MP-659P-RW65 XWiki users registered with email verification can self re-activate their disabled accounts

Impact A user disabled on a wiki using email verification for registration can re-activate himself by using the activation link provided for his registration. Patches The problem has been patched in the following versions of XWiki: 11.10.13, 12.6.7, 12.10.2, 13.0. Workarounds It's possible to...

function swapTo doesn't have a re-entrancy modifier

Handle paulius.eth Vulnerability details Impact function swap has a nonReentrant modifier but function swapTo doesn't. swapTo is a public function so it can be invoked directly. Recommended Mitigation Steps I guess it was meant to be the opposite as swap just invokes swapTo so it could...

CVE-2021-26077

Broken Authentication in Atlassian Connect Spring Boot ACSB in version 1.1.0 before 2.1.3 and from version 2.1.4 before 2.1.5: Atlassian Connect Spring Boot is a Java Spring Boot package for building Atlassian Connect apps. Authentication between Atlassian products and the Atlassian Connect Sprin...

CVE-2021-26077: Improper Authentication

Broken Authentication in Atlassian Connect Spring Boot ACSB in version 1.1.0 before 2.1.3 and from version 2.1.4 before 2.1.5: Atlassian Connect Spring Boot is a Java Spring Boot package for building Atlassian Connect apps. Authentication between Atlassian products and the Atlassian Connect Sprin...

EIP-721 / EIP-1155 Re-Entrancy Vulnerability

Handle 0xsomeone Vulnerability details Impact The impact of this finding is difficult to estimate as the contract system within scope is limited in how the various components are meant to be utilized. A definitive side-effect of this re-entrancy is the delayed application of the afterRedeemHook...

Fee Distribution Re-Entrancy

Handle 0xsomeone Vulnerability details Impact The distribute function of NFTXFeeDistributor has no access control and will invoke a fallback on the fee receivers, meaning that a fee receiver can re-enter via this function to acquire their allocation repeatedly potentially draining the full balanc...

EIP-721 / EIP-1155 Re-Entrancy Vulnerability (Resubmission)

Handle 0xsomeone Vulnerability details This submission acts as additional material to the original submission. I would like to note that the "Areas of Review" chapter of the contest explicitly states that "Vaults should always maintain 1:1 ratio..." which the re-entrancy breaks. --- The text was...

The Wages of Password Re-use: Your Money or Your Life

When normal computer users fall into the nasty habit of recycling passwords, the result is most often some type of financial loss. When cybercriminals develop the same habit, it can eventually cost them their freedom. Our passwords can say a lot about us, and much of what they have to say is...

CVE-2021-29242

CODESYS Control Runtime system before 3.5.17.0 has improper input validation. Attackers can send crafted communication packets to change the router's addressing scheme and may re-route, add, remove or change low level communication packages...

PT-2021-18138

Name of the Vulnerable Software and Affected Versions: CODESYS Control Runtime system versions prior to 3.5.17.0 Description: The issue is related to improper input validation, allowing attackers to send crafted communication packets. This can lead to changes in the router's addressing scheme,...