CVE-2023-4252

creationtimestamp| type| source ---|---|--- 2023-11-28 14:00:09+00:00| seen| https://t.me/arpsyndicate/649 2023-12-17 08:36:43+00:00| seen| https://t.me/ctinow/155534...

CVE-2023-41146

Autodesk Customer Support Portal allows cases created by users under an account to see cases created by other users on the same account...

Autodesk Customer Portal Security Vulnerability

Autodesk Customer Portal is a customer portal component from Autodesk, Inc. in the United States. A security vulnerability exists in Autodesk Customer Portal that stems from allowing cases created by a user under one account to view cases created by other users under the same account...

PT-2023-27821 · Autodesk · Autodesk

Name of the Vulnerable Software and Affected Versions: Autodesk affected versions not specified Description: The issue allows Autodesk users who no longer have an active license for an account to still access cases for that account. Recommendations: At the moment, there is no information about a...

kernel: net/sched: cls_u32 component reference counter leak if tcf_change_indev() fails

A double-free flaw was found in u32setparms in net/sched/clsu32.c in the Network Scheduler component in the Linux kernel. This flaw allows a local attacker to use a failure event to mishandle the reference counter, leading to a local privilege escalation threat...

CVE-2022-21317

creationtimestamp| type| source ---|---|--- 2023-11-15 17:01:59+00:00| published-proof-of-concept| https://t.me/BABATATASASA/5994...

Users of ReraiseCrowdfund will potentially not receive appropriate voting power

Lines of code Vulnerability details Bug Description The recent code update introduces the functionality for authorities to reduce the total voting power by invoking the decreaseTotalVotingPower function of the party. However, this functionality can lead to issues when used in the time frame after...

accure interest function is likely failed to accure interest for token with low decimal

Lines of code Vulnerability details Impact loss of precision is too high when accuring interest Proof of Concept When intereste accures, we are calling uint256 interestAmount; uint256 interestRate = IIRMirm.getInterestRateaddressthis, trancheIndex, totalDeposit, totalBorrow; interestAmount =...

CVE-2023-41377

creationtimestamp| type| source ---|---|--- 2023-10-31 23:21:12+00:00| seen| https://t.me/cibsecurity/73275...

jenkins-2-plugins/JUnit: Stored XSS vulnerability in JUnit Plugin

A flaw was found in the Jenkins JUnit plugin. The affected versions of the JUnit Plugin do not escape test case class names in JavaScript expressions, resulting in a stored cross-site scripting XSS vulnerability. This may allow an attacker to control test case class names in the JUnit resources...

jenkins-2-plugins/JUnit: Stored XSS vulnerability in JUnit Plugin

A flaw was found in the Jenkins JUnit plugin. The affected versions of the JUnit Plugin do not escape test case class names in JavaScript expressions, resulting in a stored cross-site scripting XSS vulnerability. This may allow an attacker to control test case class names in the JUnit resources...

Users will retain possession of their USDe after redeeming collateral

Lines of code Vulnerability details Impact Users will retain possession of their USDe after redeeming their collateral this can lead to theft/loss of funds. Proof of Concept See belo for the coded POC. The benefactor and the beneficiary in the Order struct containing order details and confirmatio...

M-07 Unmitigated

Lines of code Vulnerability details Mitigation of M-07: Mitigation Error, see comments Link to Issue: code-423n4/2023-09-asymmetry-findings38 Comments The changes related to this issue are: Access control has been added to AfEth::depositRewards using the onlyVotiumOrRewarder modifier. This functi...

M-05 Unmitigated

Lines of code Vulnerability details Mitigation of M-05: Mitigation Error, see comments Link to Issue: code-423n4/2023-09-asymmetry-findings45 Comments To mitigate M-05, the sponsor has added a delay of one epoch when the available CVX balance is enough to cover the withdrawal: 81: uint256...

1Password reports security incident after breach at Okta

Password manager 1Password says it’s been affected by a breach at Okta, but it reports no user data has been stolen. In a security incident report, 1Password says that a member of its IT team received an unexpected email suggesting they had initiated an Okta report of a list of admins. They hadnt...

CVE-2023-4939

creationtimestamp| type| source ---|---|--- 2023-10-21 12:35:54+00:00| seen| https://t.me/cibsecurity/72732...

CVE-2023-32088

Pega Platform versions 8.1 to Infinity 23.1.0 are affected by an XSS issue with ad-hoc case creation...

CVE-2023-32088

Pega Platform versions 8.1 to Infinity 23.1.0 are affected by an XSS issue with ad-hoc case creation...

Cross site scripting

Pega Platform versions 8.1 to Infinity 23.1.0 are affected by an XSS issue with ad-hoc case creation...

CVE-2023-32088

CVE-2023-32088 affects Pegasystems Pega Platform versions 8.1 to Infinity 23.1.0 and is an XSS issue triggered during ad-hoc case creation. The entry documents the affected component (Pega Platform) and the vulnerability class (XSS) but does not disclose a concrete root cause, exploit details, or...