14670 matches found
PT-2023-35713 · Git +1 · P11-Kit
Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a crash type identified as Global-buffer-overflow READ 8. The crash state involves functions such as base C MessageEncryptInit, r...
An attacker can manipulate the call stack of the transaction to impersonate another address and set a different value for the origin variable.
Lines of code Vulnerability details Impact By changing the transaction's call stack, an attacker can use the origin variable to pretend to be another address, as a result, the attacker can be able to enter the system without authorization and carry out evil deeds. Proof of Concept The vulnerabili...
CVE-2023-21449
Improper access control vulnerability in Call application prior to SMR Mar-2023 Release 1 allows local attackers to access sensitive information without proper permission...
CVE-2023-21449
Improper access control vulnerability in Call application prior to SMR Mar-2023 Release 1 allows local attackers to access sensitive information without proper permission...
Improper access control
Improper access control vulnerability in Call application prior to SMR Mar-2023 Release 1 allows local attackers to access sensitive information without proper permission...
CVE-2023-21449
Improper access control vulnerability in Call application prior to SMR Mar-2023 Release 1 allows local attackers to access sensitive information without proper permission...
CVE-2023-21449
Improper access control vulnerability in Call application prior to SMR Mar-2023 Release 1 allows local attackers to access sensitive information without proper permission...
CVE-2023-21449
The CVE-2023-21449 entry concerns the Samsung Call application with improper access control, enabling local attackers to access sensitive information without permission. Affected component is the Call application (prior to SMR Mar-2023 Release 1); root cause is improper access control. Public det...
SAMSUNG Mobile Devices 安全漏洞
SAMSUNG Mobile devices are a range of Samsung mobile devices, including cell phones, tablets, etc., from the South Korean company Samsung SAMSUNG. A security vulnerability exists in the SAMSUNG Mobile Devices Call application SMR Mar-2023 Release 1 version, which stems from an improper access...
Use the _assetTransferFrom function instead of _assetTransfer. This is because the tokens are held in the escrow contract, rather than being in the destination BYTES address, and thus require a transfer from the escrow contract to the recipient's address
Lines of code Vulnerability details Impact The msg.sender lose his stakedBytes From BYTES address not possible to send stakedBytes to msg.sender. The stakedBytes only help in escrow contract not in BYTES address. Proof of Concept function assetTransfer address asset, address to, uint256 amount...
Microsoft Windows Multiple Vulnerabilities (KB5023697)
This host is missing an important security update according to Microsoft KB5023697 SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescriptio...
CLSA-2023-1678820835 samba: Fix of CVE-2022-38023
CVE-2022-38023: avoid weak rc4-hmac encryption algorithm for the Netlogon RPC...
CVE-2023-24908
Remote Procedure Call Runtime Remote Code Execution Vulnerability...
CVE-2023-24908
Remote Procedure Call Runtime Remote Code Execution Vulnerability...
CVE-2023-24908
Remote Procedure Call Runtime Remote Code Execution Vulnerability...
CVE-2023-24869
Remote Procedure Call Runtime Remote Code Execution Vulnerability...
CVE-2023-24869
Remote Procedure Call Runtime Remote Code Execution Vulnerability...
CVE-2023-24869
Remote Procedure Call Runtime Remote Code Execution Vulnerability...