CVE-2023-1716

creationtimestamp| type| source ---|---|--- 2023-11-06 16:50:46+00:00| published-proof-of-concept| https://t.me/itsecnews/3615...

share update function in OmniToken.sol has accounting issue in transfer

Lines of code Vulnerability details Impact Transfer share function in OmniToken.sol can be abused Proof of Concept there is a function, transfer in OmniToken.sol function transferuint96 subId, bytes32 to, uint8 trancheId, uint256 shares external nonReentrant returns bool requiretrancheId...

Exploit for Use After Free in Google Android

CVE-2019-2215 Android Kernel Vulnerability CVE-2019-2215 tem...

Exploit for OS Command Injection in Vm2_Project Vm2

CVE-2023-37903 Expl...

Exploit for Deserialization of Untrusted Data in Apache Activemq

CVE-2023-46604 This repository contains an exploit script and...

Upgraded Q -> 2 from #165 [1699030252844]

Judge has assessed an item in Issue 165 as 2 risk. The relevant finding follows: Allowed user have too much priviledge Links to affected code Impact Allowed user can revoke approval of other allowed address. Proof of Concept The allowed user can allow other user. If allowed address is compromised...

Upgraded Q -> 2 from #165 [1699030231989]

Judge has assessed an item in Issue 165 as 2 risk. The relevant finding follows: Clear safeCan in transferSAFEOwnership Links to affected code Impact Old approval remains even if user gets SAFE again. Proof of Concept There is no removal safeCan at transferSAFEOwnership . When the user gets SAFE...

Exploit for Integer Overflow or Wraparound in Apple Ipados

PoC A collection of proof-of-concept codes from DARKNAVY. -...

CVE-2023-46501

creationtimestamp| type| source ---|---|--- 2023-11-02 04:45:24+00:00| published-proof-of-concept| Telegram/tf1Z8oVn0IvrXcTEceuD9f4gYCdk2tLMSyNSVRp43tOUcg 2023-11-02 10:59:01+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/9309 2023-11-09 05:43:54+00:00|...

accure interest function is likely failed to accure interest for token with low decimal

Lines of code Vulnerability details Impact loss of precision is too high when accuring interest Proof of Concept When intereste accures, we are calling uint256 interestAmount; uint256 interestRate = IIRMirm.getInterestRateaddressthis, trancheIndex, totalDeposit, totalBorrow; interestAmount =...

testing submission form - IGNORE

Lines of code Vulnerability details Impact Detailed description of the impact of this finding. Proof of Concept Provide direct links to all referenced code in GitHub. Add screenshots, logs, or any other relevant proof that illustrates the concept. Tools Used Recommended Mitigation Steps Assessed...

Suspected Exploitation of Apache ActiveMQ CVE-2023-46604

Tom Elkins, John Fenninger, Evan McCann, Matthew Smith, and Micah Young contributed attacker behavior insights to this blog. Beginning Friday, October 27, Rapid7 Managed Detection and Response MDR identified suspected exploitation of Apache ActiveMQ CVE-2023-46604 in two different customer...

Testing form

Lines of code Vulnerability details Impact Detailed description of the impact of this finding. Proof of Concept Provide direct links to all referenced code in GitHub. Add screenshots, logs, or any other relevant proof that illustrates the concept. Tools Used Recommended Mitigation Steps Assessed...

CVE-2023-5843

creationtimestamp| type| source ---|---|--- 2023-10-31 03:27:09+00:00| published-proof-of-concept| Telegram/hTh9RNPtkDMjXJ18rXYiZkXbKemD1rFdfq1zqonJdhYmpQ 2023-11-01 23:05:21+00:00| published-proof-of-concept| Telegram/f9dX1i2wbWm4FgYMgtQr46bSlQGawBVxQHMf4RnE4h40Q 2024-11-17 03:13:55+00:00|...

CVE-2023-46517

creationtimestamp| type| source ---|---|--- 2023-10-31 00:10:29+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/9287 2024-08-16 08:43:26+00:00| published-proof-of-concept| https://t.me/Rootsec2/1585 2026-09-01 17:00:16+00:00| seen| https://t.me/cissp/7309 2026-09-02...

Exploit for SQL Injection in Tyk

Disclaimer For educational purpose only! Details Proof of...

GHSA-FJHG-96CP-6FCW Kimai (Authenticated) SSTI to RCE by Uploading a Malicious Twig File

Description The laters version of Kimai is found to be vulnerable to a critical Server-Side Template Injection SSTI which can be escalated to Remote Code Execution RCE. The vulnerability arises when a malicious user uploads a specially crafted Twig file, exploiting the software's PDF and HTML...

precision issue EthenaMinting:mint() allows users to steal fund.

Lines of code Vulnerability details Impact In the EthenaMinting:mint function of the contract, a call is made to the transferCollateral function. This function calculates the transfer amount using the formula uint256 amountToTransfer = amount ratiosi / 10000;. However, it does not account for...

Temporary DOS attack on users minting and redeeming big amount using EthenaMinting.sol

Lines of code Vulnerability details Impact The users redeeming and minting using EthenaMinting.sol with a large amount can be vulnerable to DOS attack. Proof of Concept There is a limit on the max amount to redeem and mint in a block. This can be crucial to the users that are minting or redeeming...

Staking functionality temporary blocking due to lack of address zero check

Lines of code Vulnerability details Impact Though lack of zero check issue for the addToBlacklist function is already at the automated findings output, I suppose it is necessary to show the importance of this check here. In case of accidental or malicious the BLACKLISTMANAGERROLE behavior the...