13895 matches found
Overflow/Underflow in interest calculation caused by lack of timestamp validation in _getInterest() & _getRemainingInterest() function
Lines of code Vulnerability details Impact An attacker could manipulate the last timestamp of a lien in the stack struct to cause an underflow or overflow in the interest calculation. This could result in an incorrect interest amount being calculated, which could lead to incorrect payments being...
Infinite Loop Vulnerability in endIdForWithdraw() Function.
Lines of code Vulnerability details Impact While loop within the endIdForWithdraw function. while left time test = left + right / 2; // left test right because left right - 1 if queuetest.availableAt = time left = test; else right = test; This loop can cause an infinite loop if the loop invariant...
“Payzero” Scams and The Evolution of Asset Theft in Web3
In this entry, we discuss a Web3 fraud scenario where scammers target potential victims via fake smart contracts, and then take over their digital assets, such as NFT tokens, without paying. We named this scam “Payzero”...
smartfarming.nl Cross Site Scripting vulnerability OBB-3156993
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
Deny of service in CCash.sol with "transfer" which can be unusable for smart contract calls
Lines of code Vulnerability details Impact The CCash.doTransferOut method is susceptible to denial of service. Proof of Concept The logic of the doTransferOut method in CCash is as follows: The whole user withdraw is being handled with a token.transfer call. This is unsafe as transfer has hard...
Possiblity of storage collision
Lines of code Vulnerability details Impact There is a possibility of storage collision, when you upgrade the implementation contract in the . This could happen because the storage in the smart contract is stored the storage value from the left to the right, and if you add a new var to the storage...
Use reentrancyGuard for safeTransferFrom
Lines of code Vulnerability details Impact A reentrancy guard is a mechanism used to prevent reentrant calls in smart contracts, which can be a security vulnerability. Reentrancy can happen when a malicious contract calls the "safeTransferFrom" function and then calls it again before the first ca...
Weak Password Vulnerability in SenseNebula-M, an Intelligent Edge Node of Shanghai Shangtang Intelligent Technology Co.
Shanghai Shangtang Intelligent Technology Co., Ltd. is an artificial intelligence software company. A weak password vulnerability exists in SenseNebula-M, an intelligent edge node of Shanghai Shangtang Intelligent Technology Co. that can be exploited by attackers to obtain sensitive information...
CVE-2023-21759
Windows Smart Card Resource Management Server Security Feature Bypass Vulnerability...
CVE-2023-21759
Windows Smart Card Resource Management Server Security Feature Bypass Vulnerability...
CVE-2023-21759
Windows Smart Card Resource Management Server Security Feature Bypass Vulnerability...
Security feature bypass
Windows Smart Card Resource Management Server Security Feature Bypass Vulnerability...
Windows Smart Card Resource Management Server Security Feature Bypass Vulnerability
...
CVE-2023-0023
In SAP Bank Account Management Manage Banks application, when a user clicks a smart link to navigate to another app, personal data is shown directly in the URL. They might get captured in log files, bookmarks, and so on disclosing sensitive data of the application...
CVE-2023-0023
Technical details (affected software, exact versions, root cause, exploit specifics) are not publicly available in the provided connected documents. Monitor SAP notes and related advisories for updates.
PT-2023-1080 · Microsoft · Windows Smart Card Resource Management Server +1
Name of the Vulnerable Software and Affected Versions: Windows Smart Card Resource Management Server affected versions not specified Description: The issue is related to errors in security settings, allowing an attacker to bypass security restrictions and elevate their privileges. It is a...
CVE-2023-21759 Windows Smart Card Resource Management Server Security Feature Bypass Vulnerability
...
Microsoft Windows Smart Card Resource Management Server 安全漏洞
Microsoft Windows is a suite of operating systems used by Microsoft Corporation USA for personal devices. A security vulnerability exists in Microsoft Windows Smart Card Resource Management Server, which stems from a security feature bypass vulnerability...
CVE-2023-21759
CVE-2023-21759 is a Windows Smart Card Resource Management Server security feature bypass (local, low risk, CVSS 3.1 base 3.3). Connected sources confirm this CVE exists and has been cataloged by NVD and MSRC. Microsoft KBs linked to this CVE are KB5022303 (OS 22621.1105) and related January 2023...
