CVE-2022-24787 Incorrect Comparison in Vyper

Vyper is a Pythonic Smart Contract Language for the Ethereum Virtual Machine. In version 0.3.1 and prior, bytestrings can have dirty bytes in them, resulting in the word-for-word comparisons giving incorrect results. Even without dirty nonzero bytes, two bytestrings can compare to equal if one en...

CVE-2022-24787: Incorrect Comparison

Vyper is a Pythonic Smart Contract Language for the Ethereum Virtual Machine. In version 0.3.1 and prior, bytestrings can have dirty bytes in them, resulting in the word-for-word comparisons giving incorrect results. Even without dirty nonzero bytes, two bytestrings can compare to equal if one en...

GHSA-5CMW-FHQ9-8FHH Type Confusion in LiveHelperChat

Live Helper Chat provides live support for your website. Loose comparison causes IDOR on multiple endpoints in LiveHelperChat prior to 3.96. There is a fix released in versions 3.96 and 3.97. Currently, there is no known workaround...

Type Confusion in LiveHelperChat

Live Helper Chat provides live support for your website. Loose comparison causes IDOR on multiple endpoints in LiveHelperChat prior to 3.96. There is a fix released in versions 3.96 and 3.97. Currently, there is no known workaround...

CVE-2022-1176

Loose comparison causes IDOR on multiple endpoints in GitHub repository livehelperchat/livehelperchat prior to 3.96...

CVE-2022-1176

LiveHelperChat CGI issue CVE-2022-1176 involves a loose comparison that enables Insecure Direct Object Reference (IDOR) across multiple endpoints in LiveHelperChat prior to version 3.96. Affected software: LiveHelperChat (web-based live support system). Root cause: loose comparison leading to IDO...

CVE-2022-1176

Loose comparison causes IDOR on multiple endpoints in GitHub repository livehelperchat/livehelperchat prior to 3.96...

CVE-2022-1176 Loose comparison causes IDOR on multiple endpoints in livehelperchat/livehelperchat

Loose comparison causes IDOR on multiple endpoints in GitHub repository livehelperchat/livehelperchat prior to 3.96...

CVE-2022-1176: Access of Resource Using Incompatible Type

Loose comparison causes IDOR on multiple endpoints in GitHub repository livehelperchat/livehelperchat prior to 3.96...

CVE-2021-44312

An issue was discovered in Firmware Analysis and Comparison Tool v3.2. Logged in administrators could be targeted by a CSRF attack through visiting a crafted web page...

CVE-2021-44312

An issue was discovered in Firmware Analysis and Comparison Tool v3.2. Logged in administrators could be targeted by a CSRF attack through visiting a crafted web page...

CVE-2021-44312

The CVE-2021-44312 entry affects Firmware Analysis and Comparison Tool (FACT) version 3.2. A cross-site request forgery (CSRF) vulnerability exists in the web application, stemming from insufficient validation that requests originate from trusted users. Consequence: logged-in administrators could...

CVE-2021-44310

Summary: CVE-2021-44310 affects Firmware Analysis and Comparison Tool (FACT) v3.2. With administrator privileges, an attacker can perform stored XSS by injecting JavaScript/HTML through the user creation functionality. The vulnerability arises from insufficient data validation/filtering of user-s...

CVE-2021-44312: Cross-Site Request Forgery (CSRF)

An issue was discovered in Firmware Analysis and Comparison Tool v3.2. Logged in administrators could be targeted by a CSRF attack through visiting a crafted web page...

CVE-2021-44310: Improper Neutralization of Input During Web Page Generation

An issue was discovered in Firmware Analysis and Comparison Tool v3.2. With administrator privileges, the attacker could perform stored XSS attacks by inserting JavaScript and HTML code in user creation functionality...

PT-2022-12039

Name of the Vulnerable Software and Affected Versions Firmware Analysis and Comparison Tool version 3.2 Description The issue allows an attacker with administrator privileges to perform stored XSS attacks by inserting JavaScript and HTML code in the user creation functionality. Recommendations Fo...

PT-2022-12040

Name of the Vulnerable Software and Affected Versions Firmware Analysis and Comparison Tool version 3.2 Description An issue allows logged in administrators to be targeted by a CSRF attack through visiting a crafted web page. Recommendations For Firmware Analysis and Comparison Tool version 3.2,...

openssl security update

1.0.2k-25fips - Change Epoch from 1 to 10 - Fix DH self-test to add shared secret comparison Orabug: 32467026 - Add DH support changes for SP 800-56A rev3 requirements Orabug: 32467059 - Add TLS KDF self-test Orabug: 32467193 - Add EC keys pairwise consistency test Orabug: 32467059 1:1.0.2k-25 -...

GHSA-Q8HG-PF8V-CXRV Symfony Http-Kernel has non-constant time comparison in UriSigner

When checking the signature of an URI an ESI fragment URL for instance, the URISigner did not used a constant time string comparison function, resulting in a potential remote timing attack vulnerability...

imagemagick:encoder_miff_fuzzer: Heap-use-after-free in LocaleCompare

Detailed Report: https://oss-fuzz.com/testcase?key=5152154454720512 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: encodermifffuzzer Job Type: libfuzzerasani386imagemagick Platform Id: linux Crash Type: Heap-use-after-free READ 1 Crash Address: 0xf634c3c0 Crash State: LocaleCompare...