85 matches found
Unchecked redeemUnderlying failure allows burning asD without redeeming NOTE, breaking peg.
Lines of code Vulnerability details Impact The burn function does not validate the return code from redeemUnderlying. This means if redeeming fails, asD tokens could be burned without redeeming the underlying NOTE, breaking 1:1 peg. Attacker burns asD tokens and receives NOTE, but contract fails ...
The owner of the asD contract (i.e. the creator) can not withdraw the accrued interest
Lines of code Vulnerability details Impact The asD.withdrawCarry function will always throw an error for all normal totalSupply values due to inappropriate scale factor. So the creator can withdraw the accrued interest only after all users will burn their asD tokens. Proof of Concept The scale...
asD TOKEN CREATOR CAN PROFIT UNFAIRLY FROM THE cNote TOKENS DIRECLTY TRANSFERRED TO THE asD.sol CONTRACT
Lines of code Vulnerability details Impact The asD.withdrawCarry function is used to withdraw the interest that accrued in the asD contract in the form of NOTE tokens. Only the owner of the asD token is able to withdraw the interest accrued since the withdrawCarry is controlled by the onlyOwner...
asD.sol::mint & asDFactory.sol::create allows an attacker to mint legitimate aSD with counterfeit underlying $NOTE
Lines of code Vulnerability details Impact When creating an aSD token using create from the asDFactory.sol, there's the cNote address reference to specify and set. A malicious user can deploy a counterfeit NOTE underlying token that isn't legit or backed by anything and set/reference it as...
The vulnerability of the ASD service of the IQ Engine wireless access point operating system allows a hacker to escalate their privileges and execute arbitrary code.
The vulnerability of the ASD service of the IQ Engine HiveOS wireless access point operating system is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability can allow a remote attacker to increase their privileges and execute arbitrary code...
NSA, ASD Release Guidance for Mitigating Web Shell Malware
The U.S. National Security Agency NSA and the Australian Signals Directorate ASD have jointly released a Cybersecurity Information Sheet CSI on mitigating web shell malware. Malicious cyber actors are increasingly deploying web shell malware on victim web servers to execute arbitrary system...
Toshiba VFS15S-2007PL-W1 ASD Drive Detection
Binary data 757972.prm...
Toshiba VFS15-4037PL-W1 ASD Drive Detection
Binary data 757988.prm...
Toshiba VFAS3-4370PCE ASD Drive Detection
Binary data 757966.prm...
Toshiba VFS15-4110PL-W1 ASD Drive Detection
Binary data 757991.prm...
Toshiba VFAS3-4750PCE ASD Drive Detection
Binary data 757969.prm...
Toshiba VFAS3-4450PC AS3 ASD Drive Detection
Binary data 757944.prm...
Toshiba VFAS3-4450PCE ASD Drive Detection
Binary data 757967.prm...
Toshiba VFS15-4004PL-W1 ASD Drive Detection
Binary data 757984.prm...
Toshiba VFS15S-2015PL-W1 ASD Drive Detection
Binary data 757973.prm...
Toshiba VFAS3-4150PC AS3 ASD Drive Detection
Binary data 757939.prm...
Toshiba VFAS3-4300PC AS3 ASD Drive Detection
Binary data 757942.prm...
Toshiba VFAS3-4185PCE ASD Drive Detection
Binary data 757963.prm...