85 matches found
asD TOKEN CREATOR CAN PROFIT UNFAIRLY FROM THE cNote TOKENS DIRECLTY TRANSFERRED TO THE asD.sol CONTRACT
Lines of code Vulnerability details Impact The asD.withdrawCarry function is used to withdraw the interest that accrued in the asD contract in the form of NOTE tokens. Only the owner of the asD token is able to withdraw the interest accrued since the withdrawCarry is controlled by the onlyOwner...
asD.sol::mint & asDFactory.sol::create allows an attacker to mint legitimate aSD with counterfeit underlying $NOTE
Lines of code Vulnerability details Impact When creating an aSD token using create from the asDFactory.sol, there's the cNote address reference to specify and set. A malicious user can deploy a counterfeit NOTE underlying token that isn't legit or backed by anything and set/reference it as...
Unchecked redeemUnderlying failure allows burning asD without redeeming NOTE, breaking peg.
Lines of code Vulnerability details Impact The burn function does not validate the return code from redeemUnderlying. This means if redeeming fails, asD tokens could be burned without redeeming the underlying NOTE, breaking 1:1 peg. Attacker burns asD tokens and receives NOTE, but contract fails ...
The owner of the asD contract (i.e. the creator) can not withdraw the accrued interest
Lines of code Vulnerability details Impact The asD.withdrawCarry function will always throw an error for all normal totalSupply values due to inappropriate scale factor. So the creator can withdraw the accrued interest only after all users will burn their asD tokens. Proof of Concept The scale...
The vulnerability of the ASD service of the IQ Engine wireless access point operating system allows a hacker to escalate their privileges and execute arbitrary code.
The vulnerability of the ASD service of the IQ Engine HiveOS wireless access point operating system is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability can allow a remote attacker to increase their privileges and execute arbitrary code...
NSA, ASD Release Guidance for Mitigating Web Shell Malware
The U.S. National Security Agency NSA and the Australian Signals Directorate ASD have jointly released a Cybersecurity Information Sheet CSI on mitigating web shell malware. Malicious cyber actors are increasingly deploying web shell malware on victim web servers to execute arbitrary system...
Toshiba VFS15-4150PL-W1 ASD Drive Detection
Binary data 757992.prm...
Toshiba VFAS3-4200KPC AS3 ASD Drive Detection
Binary data 757951.prm...
Toshiba VFAS3-4110PCE ASD Drive Detection
Binary data 757961.prm...
Toshiba VFAS3-2037P AS3 ASD Drive Detection
Binary data 757920.prm...
Toshiba VFAS3-4750PCE ASD Drive Detection
Binary data 757969.prm...
Toshiba VFAS3-4220PCE ASD Drive Detection
Binary data 757964.prm...
Toshiba VFS15S-2015PL-W1 ASD Drive Detection
Binary data 757973.prm...
Toshiba VFS15-4110PL-W1 ASD Drive Detection
Binary data 757991.prm...
Toshiba VFS15-2075PM-W1 ASD Drive Detection
Binary data 757981.prm...
Toshiba VFAS3-4110KPC AS3 ASD Drive Detection
Binary data 757948.prm...
Toshiba VFS15-4015PL-W1 ASD Drive Detection
Binary data 757986.prm...
Toshiba VFAS3-4185PC AS3 ASD Drive Detection
Binary data 757940.prm...