398 matches found
Solana Pay Vulnerable to Weakness in Transfer Validation Logic
Description When a Solana Pay transaction is located using a reference key, it may be checked to represent a transfer of the desired amount to the recipient, using the supplied validateTransfer function. An edge case regarding this mechanism could cause the validation logic to validate multiple...
GHSA-J47C-J42C-MWQQ Solana Pay Vulnerable to Weakness in Transfer Validation Logic
Description When a Solana Pay transaction is located using a reference key, it may be checked to represent a transfer of the desired amount to the recipient, using the supplied validateTransfer function. An edge case regarding this mechanism could cause the validation logic to validate multiple...
8,000 Solana Wallets Drained Millions Worth of Crypto in Cyberattack
By Waqas An unknown hacker targeted the Solana ecosystem on Wednesday and drained approx. $5 million worth of SOL and… This is a post from HackRead.com Read the original post: 8,000 Solana Wallets Drained Millions Worth of Crypto in Cyberattack...
Weak Transfer Logic
@solana/pay adopts a weak transfer logic. It doesn't properly check if a transaction is valid Solana Pay transfer, ending up validating multiple transfers...
CVE-2022-35917
Solana Pay is a protocol and set of reference implementations that enable developers to incorporate decentralized payments into their apps and services. When a Solana Pay transaction is located using a reference key, it may be checked to represent a transfer of the desired amount to the recipient...
Design/Logic Flaw
Solana Pay is a protocol and set of reference implementations that enable developers to incorporate decentralized payments into their apps and services. When a Solana Pay transaction is located using a reference key, it may be checked to represent a transfer of the desired amount to the recipient...
CVE-2022-35917 Weakness in Transfer Validation Logic in @solana/pay
Solana Pay is a protocol and set of reference implementations that enable developers to incorporate decentralized payments into their apps and services. When a Solana Pay transaction is located using a reference key, it may be checked to represent a transfer of the desired amount to the recipient...
CVE-2022-35917
CVE-2022-35917 affects Solana Pay’s transfer validation logic (validateTransfer) used when locating a transaction via a reference key. The edge case could cause the validation to approve multiple transfers instead of a single intended transfer. The issue is mitigated by upgrading to version 0.2.1...
CVE-2022-35917 Weakness in Transfer Validation Logic in @solana/pay
Solana Pay is a protocol and set of reference implementations that enable developers to incorporate decentralized payments into their apps and services. When a Solana Pay transaction is located using a reference key, it may be checked to represent a transfer of the desired amount to the recipient...
CVE-2022-35917 Weakness in Transfer Validation Logic in @solana/pay
Solana Pay is a protocol and set of reference implementations that enable developers to incorporate decentralized payments into their apps and services. When a Solana Pay transaction is located using a reference key, it may be checked to represent a transfer of the desired amount to the recipient...
PT-2022-23023 · Solana · Solana Pay
Name of the Vulnerable Software and Affected Versions: Solana Pay versions prior to 0.2.1 Description: Solana Pay is a protocol that enables developers to incorporate decentralized payments into their apps and services. When a Solana Pay transaction is located using a reference key, it may be...
Solana Pay 安全漏洞
Solana Pay is a standard protocol and a set of reference implementations from the Solana Foundation in Switzerland. It enables developers to integrate decentralized payments into their applications and services. A security vulnerability exists in Solana Pay versions prior to 0.2.1 that stems from...
Malicious code in solana-view-function-adapter (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0591a6f900848bb1a6ef65955d72b4096dcd4e6faaaf74cb8025dc2d56e606f1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2022-6205 Malicious code in solana-view-function-adapter (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0591a6f900848bb1a6ef65955d72b4096dcd4e6faaaf74cb8025dc2d56e606f1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2022-3294 Malicious code in gauntlet-solana-contracts (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cf47fab99f01b2065d3cd02b4fdc2bd3fee465e263ab2b02b9e31f94c8ae5a6d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in gauntlet-solana-contracts (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cf47fab99f01b2065d3cd02b4fdc2bd3fee465e263ab2b02b9e31f94c8ae5a6d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in gauntlet-solana (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 58308cb6f179fb1b4b29fd1cfead5d87239a03ff9d72cde786e790f17cda795b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2022-3293 Malicious code in gauntlet-solana (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 58308cb6f179fb1b4b29fd1cfead5d87239a03ff9d72cde786e790f17cda795b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
0xsodium (>=0.2.0 <=0.14.0), 1password-config (=0.0.1) +11415 more potentially affected by CVE-2022-32210 via undici (>=4.9.3 <=5.4.0)
undici NPM version =4.9.3, =0.2.0, =1.0.0, =0.2.0, =0.4.0, =0.1.0, =0.0.1, =1.0.21, =2.1.0, =2.1.0, =2.1.0, =2.1.1 and more Source cves: CVE-2022-32210 Source advisory: OSV:GHSA-PGW7-WX7W-2W33...