Attacker can frontrun and reenter this function causing users to get griefed

Lines of code Vulnerability details Impact 1. attacker calls createFor and there is reentracy in safemint and an attacker can reenter and just keep increasing count just a side note 2. but what an attacker can do is when a user wants to call this function or launch a project an attacker frontruns...

Price Feed is not checked for freshness and may report old / incorrect value

Lines of code Vulnerability details Price Feed is not checked for freshness In times of network conjestion, the priceFeed may take longer than expected to update, and the price may take longer than usual to update, in order to ensure the latest price is fresh within update window, you should veri...

Denial Of Service (DoS)

tor is vulnerable to denial of service. The vulnerability exists due to a flaw in congestion control allowing the RTT estimation to be wedged, degrading congestion control performance on all circuits...

Fulfill transactions that are not protected with a deadline may lead to unfavorable trade.

Lines of code Vulnerability details Impact A fulfill transaction of order with descending/ascending amount should be protected by the deadline. The price of an order with a descnding amount is sensitive to the time. Letting users make such a trade without providing the deadline would lead to...

[WP-H3] money-market-contracts/oracle#feed_prices() delayed transaction may disrupt price feeds

Lines of code Vulnerability details The implementation only takes two attributes: asset and price. And the lastupdatedtime of the record will always be set to the current block.time. This makes it possible for the price feeds to be disrupted when the network is congested, or the endpoint is down...

DNS Amplification Attacks Explained

Meaning of DNS Amplification Attacks A Domain Name System DNS enhancement assault is one out of various circulated refusal of administration DDoS assaults. Very much like different assaults of this nature, the objective of aggressors is to keep clients from utilizing a specific organization,...

pricePerShare is only lazily updated

Handle cmichel Vulnerability details The pricePerShare value is cached in updatePricePerShare and this value can be old and not reflect the actual core.pricePerShare value. The same issue exists on the sidechain variant when oracle price updates happen infrequently. This leads to potentially big...

The vulnerability of the dccp_disconnect function (net/dccp/proto.c) in the Linux operating system allows a hacker to execute arbitrary code.

The vulnerability of the dccpdisconnect function net/dccp/proto.c is related to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

UVI-2021-1000225 net: Only allow init netns to set default tcp cong to a restricted algo

net: Only allow init netns to set default tcp cong to a restricted algo This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.12.4 by commit...

GSD-2021-1000225 net: Only allow init netns to set default tcp cong to a restricted algo

net: Only allow init netns to set default tcp cong to a restricted algo This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.12.4 by commit...

UVI-2021-1000341 net: Only allow init netns to set default tcp cong to a restricted algo

net: Only allow init netns to set default tcp cong to a restricted algo This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.37 by commit...

UVI-2021-1000417 net: Only allow init netns to set default tcp cong to a restricted algo

net: Only allow init netns to set default tcp cong to a restricted algo This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.119 by commit...

GSD-2021-1000451 net: Only allow init netns to set default tcp cong to a restricted algo

net: Only allow init netns to set default tcp cong to a restricted algo This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.19.191 by commit...

GSD-2021-1000341 net: Only allow init netns to set default tcp cong to a restricted algo

net: Only allow init netns to set default tcp cong to a restricted algo This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.37 by commit...

PT-2021-24922

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v4.19.191 Description: The issue allows only the init netns to set the default TCP congestion algorithm to a restricted algorithm. The actual impact and attack plausibility have not yet been proven...

PT-2021-24696

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.12.4 Description The issue allows only the init netns to set the default TCP congestion algorithm to a restricted one. This is an automated ID intended to aid in the discovery of potential security...

PT-2021-28806

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.37 Description The issue allows only the init netns to set the default TCP congestion algorithm to a restricted one. The actual impact and attack plausibility have not yet been proven. Recommendations For...

PT-2021-28690

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.12.4 Description The issue allows only the init netns to set the default TCP congestion algorithm to a restricted one. This is an automated ID intended to aid in the discovery of potential security...

PT-2021-28882

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.119 Description The issue allows only the init netns to set the default TCP congestion algorithm to a restricted one. The actual impact and attack plausibility have not yet been proven. Recommendations For...

PT-2021-24812

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.10.37 Description: The issue allows only the init netns to set the default TCP congestion algorithm to a restricted one. The actual impact and attack plausibility have not yet been proven. Recommendations: Fo...