19449 matches found
Switching to sales model 3 for a collection with pre-existing supply could brick the ' mint() ' function for that collection.
Lines of code Vulnerability details Impact ' Periodic sales' model cannot be used in a collection with Pre-existing supply because of how timeOfLastMint is calculated in mint function. This prevents the system from flexibly combining different sales models in a single collection as intended by th...
Cross-Contract Reentrancy can occur during burnToMint
Lines of code Vulnerability details Impact Cross Contract re-entrancy can occur due to not following CEI Proof of Concept 1. Attacker can call burnToMint, with any of the tokenId he owns! 2. This calls the burnToMint in GenCore, which mints the the new token from the to be minted collection...
AuctionDemo::claimAuction() - L105: Logic bug in the conditional statement where the timestamp check should be > instead of >=.
Lines of code Vulnerability details Impact Would enable the winning bidder/bid to be selected WHILE it's still possible to bid higher in the auction. I.e. current comparison logic makes it possible to select auction winner while the auction isnt over yet. there's the risk of the true/valid highes...
EnBw SENEC Legacy Storage Box Information Disclosure
Advisory ID: Ph0s-2023-002 Product: EnBw - SENEC legacy storage box: V1-V3 Manufacturer: SENEC - a part of EnBw Affected Versions: Firmware: all as of 2023-06-19 Tested Versions: current Vulnerability Type: CWE-200: Exposure of Sensitive Information to an Unauthorized Actor Risk Level: CVSS v3.1...
Missing highBid value update returnHighestBidder would return the wrong HighestBidder causing nft to be minted to the wrong winner
Lines of code Vulnerability details Impact returnHighestBidder is used in checking who the winner is, however the code implemented in doing this was flawed as it missed updating highBid variable for the current higest bid found so far before next iteration. Missing this would cost function to...
Exploit for Injection in Discourse
Table of contents ================= CVE-2023-47119cve...
Exploit for CVE-2005-1125
PoC exploit for CVE-2005-1125. The exploit targets a vulnerability in the Libsafe library, which is a safety net for applications to prevent buffer overflows. The exploit is designed to bypass the Libsafe protection and execute arbitrary code. The repository contains a Makefile that builds the...
CVE-2021-43609
creationtimestamp| type| source ---|---|--- 2023-11-11 07:33:59+00:00| published-proof-of-concept| https://t.me/CNArsenal/1486 2023-11-11 20:38:04+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/9370 2023-11-24 04:36:04+00:00| seen| https://t.me/kasraonecom/601 2024-08-1...
CVE-2023-34836
creationtimestamp| type| source ---|---|--- 2023-11-11 01:56:00+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/8550 2026-07-29 12:00:21+00:00| seen| https://t.me/CVEhub/15694 2026-07-30 00:00:40+00:00| seen| https://t.me/CVEhub/15694 2026-07-31 00:00:35+00:00|...
CVE-2023-47128
creationtimestamp| type| source ---|---|--- 2023-11-10 17:36:32+00:00| published-proof-of-concept| https://github.com/piccolo-orm/piccolo/security/advisories/GHSA-xq59-7jf3-rjc6...
CVE-2019-5587
creationtimestamp| type| source ---|---|--- 2023-11-10 16:54:03+00:00| published-proof-of-concept| https://t.me/apsecurity/253 2023-11-10 16:54:03+00:00| published-proof-of-concept| https://t.me/apsecurity/204...
CVE-2018-3245
creationtimestamp| type| source ---|---|--- 2023-11-10 15:34:11+00:00| published-proof-of-concept| https://t.me/CNArsenal/1479 2023-11-11 07:49:11+00:00| published-proof-of-concept| https://t.me/v3n0mhack/301 2026-09-01 20:02:51+00:00| seen| Telegram/bmrvdoUVbKYhHcKPq0iIh828CTYURalXPIyz2R84tlWwc...
CVE-2018-3181
creationtimestamp| type| source ---|---|--- 2023-11-10 15:34:11+00:00| published-proof-of-concept| https://t.me/CNArsenal/1479 2023-11-11 07:49:11+00:00| published-proof-of-concept| https://t.me/v3n0mhack/301...
CVE-2023-24706
creationtimestamp| type| source ---|---|--- 2023-11-10 05:47:38+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/5740...
Exploit for Code Injection in Craterapp Crater
Crater-CVE-2023-46865-RCE Crater =6.0.6, CVE-2023-46865 Po...
CVE-2023-46446
creationtimestamp| type| source ---|---|--- 2023-11-09 03:17:09+00:00| published-proof-of-concept| https://github.com/ronf/asyncssh/security/advisories/GHSA-c35q-ffpf-5qpm 2023-12-19 20:07:30+00:00| published-proof-of-concept| https://t.me/truesecator/5221 2023-12-20 14:29:56+00:00|...
CVE-2023-46445
creationtimestamp| type| source ---|---|--- 2023-11-09 03:10:30+00:00| published-proof-of-concept| https://github.com/ronf/asyncssh/security/advisories/GHSA-cfc2-wr2v-gxm5 2023-12-19 20:07:30+00:00| published-proof-of-concept| https://t.me/truesecator/5221 2023-12-20 14:29:56+00:00|...
CVE-2023-43791
creationtimestamp| type| source ---|---|--- 2023-11-08 20:48:10+00:00| published-proof-of-concept| https://github.com/HumanSignal/label-studio/security/advisories/GHSA-f475-x83m-rx5m...
GHSA-WJ33-Q7VJ-9FR8
creationtimestamp| type| source ---|---|--- 2023-11-06 20:28:49+00:00| published-proof-of-concept| Telegram/vrYhd9EGO9YMgYE7p-1wX1LQ0PsHTFM-ZHccSrg8msBuxQ...
CVE-2023-46251
creationtimestamp| type| source ---|---|--- 2023-11-06 20:09:30+00:00| published-proof-of-concept| https://t.me/proxybar/1814 2023-11-06 20:25:59+00:00| published-proof-of-concept| https://t.me/cibsecurity/73623 2023-11-06 20:28:49+00:00| published-proof-of-concept|...