67 matches found
Fairness should be denominated in mintedVotingPower rather than totalVotingPower
Lines of code Vulnerability details Impact Rage quitter receives too little. Proof of Concept The rage quitter receives a share votingPowerByTokenIdtokenId 1e18 / totalVotingPower of each token balance. However the sum of votingPowerByTokenIdtokenId over all tokenId, i.e. mintedVotingPower, may b...
Rage quit modifications should be limited to provide stronger guarantees to party members
Lines of code Vulnerability details Rage quit modifications should be limited to provide stronger guarantees to party members Party hosts can arbitrarily change the rage quit settings overriding any existing preset. Impact Rage quit is implemented in the PartyGovernanceNFT contract by using a...
SUSE CVE-2009-3620
The ATI Rage 128 aka r128 driver in the Linux kernel before 2.6.31-git11 does not properly verify Concurrent Command Engine CCE state initialization, which allows local users to cause a denial of service NULL pointer dereference and system crash or possibly gain privileges via unspecified ioctl...
Node operators cannot withdraw their ETH when they rage quit
Lines of code Vulnerability details Node operators can opt for Rage Quit, after the BLS public key is staked. In the current configuration, they will not be able to retrieve their staked ETH: withdrawETHForKnot will revert here if the lifecycle status is not INITIALSREGISTERED. The lifecycle stat...
Command Execution Vulnerability in RG-EW1200G of Riptide Networks
The RG-EW1200G is a dual-band, dual-gigabit wireless router. A command execution vulnerability exists in the RG-EW1200G. An attacker can exploit this vulnerability to gain control of a web server...
Rage Comic Maker - Dangerous filesystem permissions, WebView code execution vulnerabilities
HackApp vulnerability scanner discovered that application Rage Comic Maker published at the 'play' market has multiple vulnerabilities...
Rage Faces Script 1.3 SQL Injection
Exploit Title: Rage Faces Script v1.3 - SQL Injection Google Dork: N/A Date: 01.03.2017 Vendor Homepage: http://www.memesoftware.com/ Software: http://www.memesoftware.com/ragefaces.php Demo: http://ragefaces.memesoftware.com/ Version: 1.3 Tested on: Win7 x64, Kali Linux x64 Exploit Author: Ihsan...
Rage Faces Script 1.3 - SQL Injection
Rage Faces Script 1.3 - SQL Injection Exploit Title: Rage Faces Script v1.3 - SQL Injection Google Dork: N/A Date: 01.03.2017 Vendor Homepage: http://www.memesoftware.com/ Software: http://www.memesoftware.com/ragefaces.php Demo: http://ragefaces.memesoftware.com/ Version: 1.3 Tested on: Win7 x64...
Rage Faces Script 1.3 - SQL Injection
Exploit Title: Rage Faces Script v1.3 - SQL Injection Google Dork: N/A Date: 01.03.2017 Vendor Homepage: http://www.memesoftware.com/ Software: http://www.memesoftware.com/ragefaces.php Demo: http://ragefaces.memesoftware.com/ Version: 1.3 Tested on: Win7 x64, Kali Linux x64 Exploit Author: Ihsan...
Ice Rage: Hockey Free - Customized SSL, Dangerous filesystem permissions, WebView code execution vulnerabilities
HackApp vulnerability scanner discovered that application Ice Rage: Hockey Free published at the 'play' market has multiple vulnerabilities...
Rage Faces - Customized SSL, KeyStore usage, SD-card access vulnerabilities
HackApp vulnerability scanner discovered that application Rage Faces published at the 'play' market has multiple vulnerabilities...
Rage Comics - Dynamic Code Loading, External URLs, SD-card access vulnerabilities
HackApp vulnerability scanner discovered that application Rage Comics published at the 'play' market has multiple vulnerabilities...
Rage Comic Francais Troll Face - Dangerous filesystem permissions, WebView code execution vulnerabilities
HackApp vulnerability scanner discovered that application Rage Comic Francais Troll Face published at the 'play' market has multiple vulnerabilities...
Rage Comic - External URLs, Native code usage, Unsafe deleting vulnerabilities
HackApp vulnerability scanner discovered that application Rage Comic published at the 'play' market has multiple vulnerabilities...
Rage Comic - Dynamic Code Loading, Exported components, External URLs vulnerabilities
HackApp vulnerability scanner discovered that application Rage Comic published at the 'play' market has multiple vulnerabilities...
Rage Meme - Exported ContentProvider, WebView code execution vulnerabilities
HackApp vulnerability scanner discovered that application Rage Meme published at the 'play' market has multiple vulnerabilities...
SuSE 10 Security Update : the Linux Kernel (x86_64) (ZYPP Patch Number 6730)
This update fixes a several security issues and various bugs in the SUSE Linux Enterprise 10 SP 2 kernel. The following security issues were fixed: CVE-2009-3939: A sysctl variable of the megaraidsas driver was worldwriteable, allowing local users to cause a denial of service or potential code...
kernel: r128 IOCTL NULL pointer dereferences when CCE state is uninitialised
The ATI Rage 128 aka r128 driver in the Linux kernel before 2.6.31-git11 does not properly verify Concurrent Command Engine CCE state initialization, which allows local users to cause a denial of service NULL pointer dereference and system crash or possibly gain privileges via unspecified ioctl...
Mandriva Update for kernel MDVSA-2010:198 (kernel)
Check for the Version of kernel OpenVAS Vulnerability Test Mandriva Update for kernel MDVSA-2010:198 kernel Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under t...
SuSE 10 Security Update : Linux Kernel (x86) (ZYPP Patch Number 6694)
This update fixes various bugs and some security issues in the SUSE Linux Enterprise 10 SP 3 kernel. The following security issues were fixed: CVE-2009-3939: A sysctl variable of the megaraidsas driver was worldwriteable, allowing local users to cause a denial of service or potential code...