19450 matches found
No proper validation of Singleton
Lines of code Vulnerability details Bug Description Operators, executors, or the Main Console account can execute transactions on behalf of a SubAccount. SubAccounts must have an enabled SafeModerator guard, which checks whether the guard and handler have not been disabled or updated, and whether...
No function to remove a subaccount
Lines of code Vulnerability details Impact A subaccount that has been taken over by an attacker can not be removed. Proof of Concept The WalletRegistry.sol contract has a registerSubAccount function but does not have another function that can remove a subAccount in case a subAccount is compromise...
Missing payable modifier in ExecutorPlugin.executeTransaction(): Restricts Use of Native Assets (ETH) with Transactions
Lines of code Vulnerability details Impact A registered executor for a submodule cannot send ETH native assets with a transaction because the payable modifier is missing in the executeTransaction function. It's essential to address this issue to ensure full compatibility and functionality for...
CVE-2023-43986
DM Concept configurator before v4.9.4 was discovered to contain a SQL injection vulnerability via the component ConfiguratorAttachment::getAttachmentByToken...
CVE-2023-43986
DM Concept configurator before v4.9.4 was discovered to contain a SQL injection vulnerability via the component ConfiguratorAttachment::getAttachmentByToken...
CVE-2023-43986
DM Concept configurator before v4.9.4 was discovered to contain a SQL injection vulnerability via the component ConfiguratorAttachment::getAttachmentByToken...
Sql injection
DM Concept configurator before v4.9.4 was discovered to contain a SQL injection vulnerability via the component ConfiguratorAttachment::getAttachmentByToken...
CVE-2023-46227
creationtimestamp| type| source ---|---|--- 2023-10-19 14:34:22+00:00| published-proof-of-concept| https://t.me/cibsecurity/72555...
CVE-2023-36728
creationtimestamp| type| source ---|---|--- 2023-10-19 09:31:44+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/9218 2024-08-16 08:34:05+00:00| published-proof-of-concept| https://t.me/Rootsec2/1407 2026-09-01 17:00:16+00:00| seen| https://t.me/cissp/7273 2026-09-02...
CVE-2023-2729
creationtimestamp| type| source ---|---|--- 2023-10-19 03:53:43+00:00| published-proof-of-concept| https://t.me/hackingbra/47 2023-10-19 11:01:11+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/9224 2024-08-16 08:34:06+00:00| published-proof-of-concept|...
CVE-2023-44227
creationtimestamp| type| source ---|---|--- 2023-10-19 03:32:04+00:00| published-proof-of-concept| https://t.me/codeb0ss/1255 2023-10-24 19:46:01+00:00| published-proof-of-concept| Telegram/nb72YFQ5QLvYkRPL8hdha5XlSlobcBsOGjh68W-TKZhJg...
PT-2023-6318
Name of the Vulnerable Software and Affected Versions VMware Aria Operations for Logs affected versions not specified Description The issue is related to an authentication bypass vulnerability in VMware Aria Operations for Logs. This vulnerability can be exploited by an unauthenticated, malicious...
CVE-2023-43986
CVE-2023-43986 affects DM Concept configurator prior to v4.9.4. The vulnerability is a SQL injection in the ConfiguratorAttachment::getAttachmentByToken component, leading to potential compromise of data confidentiality, integrity, and availability as indicated by the CVSS metrics. Affected versi...
PT-2023-29060 · Unknown · Dm Concept Configurator
Name of the Vulnerable Software and Affected Versions: DM Concept configurator versions prior to 4.9.4 Description: The issue is related to a SQL injection vulnerability via the component ConfiguratorAttachment::getAttachmentByToken. Recommendations: For versions prior to 4.9.4, update to version...
DM Concept configurator SQL Injection Vulnerability
DM Concept configurator is an application from DM Concept, Inc. A security vulnerability exists in DM Concept configurator versions prior to v4.9.4 that stems from a SQL injection vulnerability in the component ConfiguratorAttachment...
Synchrony deobfuscator prototype pollution vulnerability leading to arbitrary code execution
Impact A proto pollution vulnerability exists in synchrony versions before v2.4.4. Successful exploitation could lead to arbitrary code execution. Summary A proto pollution vulnerability exists in the LiteralMap transformer allowing crafted input to modify properties in the Object prototype. When...
Exploit for Out-of-bounds Write in Haxx Libcurl
CVE-2023-38545: Curl Vulnerability Proof of Concept This repos...
CVE-2023-43666
creationtimestamp| type| source ---|---|--- 2023-10-16 12:36:35+00:00| published-proof-of-concept| https://t.me/cibsecurity/72304...
GHSA-J87X-J6MH-MV8V
creationtimestamp| type| source ---|---|--- 2023-10-16 12:20:37+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/9208 2023-10-18 05:13:30+00:00| published-proof-of-concept| https://t.me/apsecurity/196 2023-10-18 05:13:30+00:00| published-proof-of-concept|...