The variable value uint256 proposalCount is reset when migrating from V1 to V2

Lines of code Vulnerability details Context: NounsDAOInterfaces.sol contract NounsDAOStorageV1 /// The total number of proposals for V1 uint256 public proposalCount; contract NounsDAOStorageV1Adjusted /// The total number of proposals for V2 uint256 public proposalCount; Description: The uint256...

Malicious Package

Overview lusha-ui-components-v2 is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this...

Malicious code in lusha-ui-components-v2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware aa9f9d0ba99666d4d11e0f3fbfc797f53cdc33def310cfb00479955631833669 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious Package

Overview supplier-panel-v2 is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this package...

Design/Logic Flaw

laminas-diactoros is a PHP package containing implementations of the PSR-7 HTTP message interfaces and PSR-17 HTTP message factory interfaces. Applications that use Diactoros, and are either not behind a proxy, or can be accessed via untrusted proxies, can potentially have the host, protocol,...

GO-2022-0503 Denial of service via malformed CAR data in github.com/ipld/go-car and go-car/v2

Decoding malformed CAR data can cause panics or excessive memory usage...

MAL-2022-5206 Malicious code in pancakeswap-v2-subgraph (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f0e92926b45b2dbde728955b8808c67bb42af6d599ed815dcbc7d2dfa9b0d538 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious Package

Overview pancakeswap-v2-subgraph is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this...

Retbleed - arbitrary speculative code execution with return instructions

ISSUE DESCRIPTION Researchers at ETH Zurich have discovered Retbleed, allowing for arbitrary speculative execution in a victim context. For more details, see: https://comsec.ethz.ch/retbleed ETH Zurich have allocated CVE-2022-29900 for AMD and CVE-2022-29901 for Intel. Despite the similar...

PT-2022-21325 · Totolink · Totolink Ex300 V2

Name of the Vulnerable Software and Affected Versions: TOTOLINK EX300 V2 version 4.0.3c.7484 Description: A command injection issue was found via the langType parameter in the setLanguageCfg function. This issue can be exploited through a crafted MQTT data packet. Recommendations: For TOTOLINK...

Malformed CAR panics and excessive memory usage

Impact Versions impacted = [email protected] = [email protected] Description of user-facing changes...

CVE-2022-31806

In CODESYS V2 PLCWinNT and Runtime Toolkit 32 in versions prior to V2.4.7.57 password protection is not enabled by default and there is no information or prompt to enable password protection at login in case no password is set at the controller...

CVE-2022-31806

CVE-2022-31806 affects CODESYS V2 PLCWinNT and Runtime Toolkit 32-bit, prior to version V2.4.7.57, due to insecure/default password protection not enabled and no prompt to enable at login when no password exists. Public sources (CISA ICS advisory ICSA-25-329-05) describe potential consequences as...

CVE-2022-31804

The CVE-2022-31804 vulnerability affects the CODESYS Gateway Server V2 (prior to version 2.3.9.38). It does not verify that the size of a request is within expected limits, allowing an unauthenticated attacker to allocate memory arbitrarily, potentially causing the gateway to crash due to an out-...

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' in github.com/argoproj/argo-cd/v2...

Malicious code in here_lead_generation_v2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ec03749315d8f69bb656557b7de12b552bef9f87fbffe2307897772c23a35b34 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-1729 Malicious code in bunny-v2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fdb56dc2493b19a12946344c0395bfb3851aac9a4b34e57f3b5cdb1ab9653e48 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-5334 Malicious code in pijma-v2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7a0d062249d1376afbf240f8d81230f94dd71f02567ffda1e3c434c4d32b3597 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in pijma-v2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7a0d062249d1376afbf240f8d81230f94dd71f02567ffda1e3c434c4d32b3597 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in react-hackernews-bootcamp-one-v2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware af727e3e671a551601008e1095480a52cee6345828274261bc66504e7d7af843 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...