CVE-2020-21406

An issue was discovered in RK Smart TV Box MAX and V88 SmartTV box that allows attackers to cause a denial of service via the switchNextDisplayInterface service...

Design/Logic Flaw

An issue was discovered in H96 Smart TV Box H96 Pro Plus allows attackers to corrupt files via calls to the saveDeepColorAttr service.unk...

Denial of service

An issue was discovered in RK Smart TV Box MAX and V88 SmartTV box that allows attackers to cause a denial of service via the switchNextDisplayInterface service...

CVE-2020-21406

The CVE-2020-21406 vulnerability affects RK Smart TV Box MAX and V88 SmartTV box. It allows a denial-of-service via the switchNextDisplayInterface service. According to the initial records, the issue has a CVSS v3.1 base score of 7.5 (Network, no authentication, low complexity, high impact on ava...

CVE-2020-21406

An issue was discovered in RK Smart TV Box MAX and V88 SmartTV box that allows attackers to cause a denial of service via the switchNextDisplayInterface service...

CVE-2020-21405

An issue was discovered in H96 Smart TV Box H96 Pro Plus allows attackers to corrupt files via calls to the saveDeepColorAttr service.unk...

CVE-2020-21405

CVE-2020-21405 affects H96 Smart TV Box H96 Pro Plus. The issue allows an attacker to corrupt files via calls to the saveDeepColorAttr service. Root cause details are not provided in the supplied documents. CVSS v3.1 base score 7.5 (HIGH), vector: AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H. Exploitation...

CVE-2022-32961

HICOS’ client-side citizen digital certificate component has a stack-based buffer overflow vulnerability when reading IC card due to insufficient parameter length validation for token information. An unauthenticated physical attacker can exploit this vulnerability to execute arbitrary code,...

CVE-2022-32959

HiCOS’ client-side citizen digital certificate component has a stack-based buffer overflow vulnerability when reading IC card due to insufficient parameter length validation for OS information. An unauthenticated physical attacker can exploit this vulnerability to execute arbitrary code, manipula...

RK Smart TV Box MAX和V88 SmartTV Box 安全漏洞

The Amazon RK Smart TV Box and V88 SmartTV Box are both set-top boxes from Amazon.com, Inc. A security vulnerability exists in the RK Smart TV Box MAX and V88 SmartTV Box that originated from a vulnerability that allows an attacker to cause a denial of service via the switchNextDisplayInterface...

H96 Smart TV Box 资源管理错误漏洞

H96 Smart TV Box is a set-top box from H96. A security vulnerability exists in H96 Smart TV Box where an attacker can corrupt files by calling saveDeepColorAttr service.unk...

call() should be used instead of transfer() on an address payable

Lines of code Vulnerability details Impact The use of the deprecated transfer function for an address will inevitably make the transaction fail when the caller is a smart contract and: 1. Does not implement a payable function. 2. Implements a payable fallback which uses more than 2300 gas unit. 3...

Usage of deprecated transfer to send ETH

Lines of code%20%7B-,payablemsg.sender.transfer,-msg.valueL183 Vulnerability details Impact The use of the deprecated transfer function for an address will inevitably make the transaction fail when: The claimer smart contract does not implement a payable function. The claimer smart contract does...

CALL() should be used instead of TRANSFER() on an address payable

Lines of code Vulnerability details Impact The use of the deprecated transfer function for an address will inevitably make the transaction fail when: 1 The claimer smart contract does not implement a payable function. 2 The claimer smart contract does implement a payable fallback which uses more...

ETHRegistrarController's register and renew use payable.transfer calls with an arbitrary receiver

Lines of code Vulnerability details ETHRegistrarController's register and renew transfer out remainder native tokens via payableto.transfer call. This is unsafe as transfer has hard coded gas budget and can fail when msg.sender is a smart contract. Such transactions will fail for smart contract...

Use Call Instead of Transfer for Address Payable

Lines of code Vulnerability details Impact It is recommended to avoid the usage of payable.transfer, since it can cause the transaction to fail when the user is accessing this function with a smart contract and: 1. does not have payable function 2. have a payable function but spends more than 230...

MAL-2022-5511 Malicious code in ptokens-erc777-smart-contract (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a4fc4905dd4499db04626039e0832f1740c47a94321f71c7e55611e7530ffc08 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ptokens-erc777-smart-contract (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a4fc4905dd4499db04626039e0832f1740c47a94321f71c7e55611e7530ffc08 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Liquidator cut is calculated incorrectly

Lines of code Vulnerability details Impact User can call payBase function to pay debt in return for collateral. But due to incorrect calculation User will obtain lesser collateral than what he should actually receive causing immediate permanent loss Proof of Concept 1. User calls payBase function...

Weak Password Vulnerability in SenseLink Intelligent Internet of Things Platform of Shanghai Shangtang Intelligent Technology Co.

Shanghai Shangtang Intelligent Technology Co., Ltd. currently covers four business segments: Smart Business, Smart City, Smart Life, and Smart Car. Shanghai Shangtang Intelligent Technology Co., Ltd. SenseLink Intelligent IOT platform has a weak password vulnerability, which is utilized by...