19450 matches found
Staking functionality temporary blocking due to lack of address zero check
Lines of code Vulnerability details Impact Though lack of zero check issue for the addToBlacklist function is already at the automated findings output, I suppose it is necessary to show the importance of this check here. In case of accidental or malicious the BLACKLISTMANAGERROLE behavior the...
Temporary DOS attack on all the users minting and redeeming.
Lines of code Vulnerability details Impact The users redeeming and minting using EthenaMinting.sol can be DOS'd temporarily for some blocks by an old user having many tokens staked. Proof of Concept The old user having a high staked amount can easily get the order to redeem and mint with the USDe...
There is no check for collateral token in mint matches same in withdraw
Lines of code Vulnerability details Impact While we understand that usde is the base token here, we see that on minting used token you would need to transfer some tokens to the contract and get some used minted to you and on redemption get usde burnt to get a token sent back to you. The implicati...
Command Injection
Overview aaptjs is an A node wraper for aapt Affected versions of this package are vulnerable to Command Injection due to improper input sanitization via the add function when using pipe | after the zip file value. PoC js const pkg = require'aaptjs'; pkg.add'test0.zip | touch exploited.txt',...
Exploit for Code Injection in Apache Cassandra
0day 由于众所周知的原因，原始仓库被删除，但保留了副本，forks和stars 清零 不过请放心，还是原来的配方，原来的味道。 为了避免再次出现这种情况找不到此项目，可以Follow 一下 本仓库所有内容仅限用于学习交流 English | 中文 各种CMS、各种平台、各种系统、各种软件漏洞的EXP、POC ,该项目将持续更新 优秀项目列表 1. Fastjson RCE https://github.com/dbgee/fastjson-rce 2. Log4j RCE https://github.com/dbgee/log4j2rce 3. redis RCE...
CVE-2023-4632
creationtimestamp| type| source ---|---|--- 2023-10-28 12:33:01+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/9277 2024-08-16 08:40:14+00:00| published-proof-of-concept| https://t.me/Rootsec2/1566...
CVE-2023-35794
creationtimestamp| type| source ---|---|--- 2023-10-27 09:57:20+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/5581...
XAMPP 3.3.0 Buffer Overflow
Exploit Title: XAMPP v3.3.0 — '.ini' Buffer Overflow Unicode + SEH Date: 2023-10-26 Author: Talson @Ripp3rdoc Software Link: https://sourceforge.net/projects/xampp/files/XAMPP%20Windows/8.0.28/xampp-windows-x64-8.0.28-0-VS16-installer.exe Version: 3.3.0 Tested on: Windows 11 CVE-2023-46517 \ / \ ...
CVE-2023-46404
creationtimestamp| type| source ---|---|--- 2023-10-26 15:08:38+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/5570...
CVE-2023-45135
creationtimestamp| type| source ---|---|--- 2023-10-26 00:39:13+00:00| published-proof-of-concept| https://t.me/cibsecurity/72905...
closeMarket() can only be called by the market controller but the controller has no function to close a market.
Lines of code Vulnerability details Description Due to the restriction on the closeMarket function, only the controller is able to use it, but the controller contract has no way to call it. Impact Since the borrower becomes unable to close a market once it opened, it becomes a big issue as the...
wrong implementation of rayDiv.
Lines of code Vulnerability details Impact Detailed description of the impact of this finding. Proof of Concept Provide direct links to all referenced code in GitHub. Add screenshots, logs, or any other relevant proof that illustrates the concept. Tools Used Recommended Mitigation Steps function...
wrong implementation of bipDiv.
Lines of code Vulnerability details Impact Detailed description of the impact of this finding. Proof of Concept Provide direct links to all referenced code in GitHub. Add screenshots, logs, or any other relevant proof that illustrates the concept. Tools Used Recommended Mitigation Steps function...
Borrower cannot change the maximum supply
Lines of code Vulnerability details Impact Maximum supply cannot be increased and by extension the max deposit limit too. Proof of Concept WildcatMarketConfig@setMaxTotalSupply is only callable by the WildcatMarketController but is not used anywhere there. WildcatMarketConfig.sol function...
A borrower cannot redeploy a controller if their previous controller was removed
Lines of code Vulnerability details Impact A controller can be removed after it was initially deployed in cases where it was created with wrong parameters. However, in the case that a borrower's controller is removed they would be unable to redeploy another controller constraining them to use the...
Borrower escapes delinquency penalty if no intermittent action happens
Lines of code Vulnerability details Impact Once the market goes below required reserves, it is marked as delinquent only if an updateState action happens. Actions like market.updateState, executeWithdrawal, deposit, etc. have to happen else the protocol remains unaware of the market's delinquency...
potential DOS cause of rounding up at rayMul and rayDiv
Lines of code Vulnerability details Impact In rayMul and rayDiv , there is always rounding up ,cause of that , there will be potential DOS Proof of Concept function normalizeAmount MarketState memory state, uint256 amount internal pure returns uint256 return amount.rayMulstate.scaleFactor; functi...
CVE-2023-22074
creationtimestamp| type| source ---|---|--- 2023-10-25 15:31:35+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/5560...
