GHSA-M425-MQ94-257G vulnerabilities

Vulnerabilities for packages: k3d, src, dgraph, kubeflow, scorecard, buildkitd, kubescape, slsa-verifier, up, cortex, spark-operator, aactl, kubevela, terraform-provider-sendgrid...

CVE-2023-39325 vulnerabilities

Vulnerabilities for packages: kube-oidc-proxy, vertical-pod-autoscaler, flux-notification-controller, bank-vaults, metrics-server-fips, prometheus-mongodb-exporter, weaviate, zot, prometheus-pushgateway-fips, stakater-reloader, up, wireguard-go, kots, kubewatch, minio,...

GHSA-4374-P667-P6C8 vulnerabilities

Vulnerabilities for packages: kube-oidc-proxy, vertical-pod-autoscaler, flux-notification-controller, bank-vaults, metrics-server-fips, prometheus-mongodb-exporter, weaviate, zot, prometheus-pushgateway-fips, stakater-reloader, up, wireguard-go, kots, kubewatch, minio,...

GHSA-QPPJ-FM5R-HXR3 vulnerabilities

Vulnerabilities for packages: kube-oidc-proxy, flux-notification-controller, metrics-server-fips, weaviate, stakater-reloader, wireguard-go, kots, grype, kubewatch, ko, minio, kubernetes-csi-livenessprobe-fips, prometheus-adapter-fips, bom, nginx-mainline, gomplate, metrics-server, atlantis,...

GHSA-QPPJ-FM5R-HXR3 vulnerabilities

Vulnerabilities for packages: newrelic-infrastructure-agent, atlantis, metacontroller, kubeflow, ollama, aactl, gobuster, cue, pulumi, skaffold, grpcurl, kubevela, mc, nats, terraform-provider-aws, secrets-store-csi-driver-provider-gcp, slsa-verifier, kubeflow-katib, cortex, spark-operator, helm,...

Existing pools will be bricked due to uninitialized state

Lines of code Vulnerability details Existing pools will be bricked due to uninitialized Summary Pools already present in the exchange will be bricked when crossTicks is called with an uninitialized tickTracking storage, which will trigger an array out of bounds error. Impact New pools in the...

The Liquidity mining callpath sidecar owner can pull native tokens from the Dex

Lines of code Vulnerability details Impact The owner of liquidity mining sidecar can pull the native coins that are stored in the CrocSwapDex to reward the users. Proof of Concept The setConcRewards and setAmbRewards functions doesn't check if the quoted amount of rewards are actually sent by the...

A difference in the rDPX price between the oracle and DEXs used for trading can cause more slippage than expected

Lines of code Vulnerability details Impact The protocol will experience much higher slippage than supposed to due to using the wrong price in calculating the amount after slippage. Proof of Concept The protocol executes swaps on Uniswap and Curve. The issue arises due to the protocol using its ow...

CVE-2023-27648

Directory Traversal vulnerability found in T-ME Studios Change Color of Keypad v.1.275.1.277 allows a remote attacker to execute arbitrary code via the dex file in the internal storage...

Directory traversal

Directory Traversal vulnerability found in T-ME Studios Change Color of Keypad v.1.275.1.277 allows a remote attacker to execute arbitrary code via the dex file in the internal storage...

Timmystudios Fast Typing Keyboard 路径遍历漏洞

Timmystudios Fast Typing Keyboard is an Android app keyboard by Timmystudios. A security vulnerability exists in Timmystudios Fast Typing Keyboard version 1.275.1.277, which stems from a directory traversal vulnerability. The vulnerability can be exploited to execute arbitrary code via a dex file...

CVE-2023-27648: Improper Limitation of a Pathname to a Restricted Directory

Directory Traversal vulnerability found in T-ME Studios Change Color of Keypad v.1.275.1.277 allows a remote attacker to execute arbitrary code via the dex file in the internal storage...

PT-2023-21281 · T Me Studios · T-Me Studios Change Color Of Keypad

Name of the Vulnerable Software and Affected Versions: T-ME Studios Change Color of Keypad version 1.275.1.277 Description: A Directory Traversal issue allows a remote attacker to execute arbitrary code via the dex file in the internal storage. This enables the attacker to potentially access and...

CVE-2023-27648

Directory Traversal vulnerability found in T-ME Studios Change Color of Keypad v.1.275.1.277 allows a remote attacker to execute arbitrary code via the dex file in the internal storage...

PT-2023-10278 · Unknown · Cp Appointment Calendar Plugin

Name of the Vulnerable Software and Affected Versions: CP Appointment Calendar Plugin version 1.1.5 and earlier Description: A critical vulnerability has been found in the CP Appointment Calendar Plugin. This issue affects the dex process ready to go appointment function of the dex appointments.p...

Incorrect validation of the result of the transfer * transferFrom method call. Failure to comply with the ERC20 standard

Lines of code Vulnerability details Impact Inability to use ERC20 standard tokens. As an example of the future LP token Proof of Concept According to the ERC-20 standard, the transfer and transferFrom methods return true or false, but looking at the code we see that:...

Inexistent Slippage Protection

Lines of code Vulnerability details Impact All bond evaluations are dynamic within the KUMASwap::sellBond and KUMASwap::buyBond functions, however, they operate with token IDs as input arguments and do not perform any sanitization on the amount of KIB tokens minted or burned respectively. In turn...

Design/Logic Flaw

jadx is a set of command line and GUI tools for producing Java source code from Android Dex and Apk files. versions prior to 1.4.5 are subject to a Denial of Service when opening zip files with HTML sequences. This issue has been patched in version 1.4.5. There are no known workarounds...

CVE-2022-39259

The CVE refers to Skylot Jadx (Jadx-gui) prior to version 1.4.5, where opening a ZIP containing an HTML sequence can trigger a Denial of Service in the Swing HTML rendering. The underlying issue is a GUI-side DoS vulnerability in Jadx-gui’s HTML rendering path. The vulnerability is patched in ver...

CVE-2022-39222

Dex is an identity service that uses OpenID Connect to drive authentication for other apps. Dex instances with public clients and by extension, clients accepting tokens issued by those Dex instances are affected by this vulnerability if they are running a version prior to 2.35.0. An attacker can...