Attacker can empty vaults

Lines of code Vulnerability details Impact Both MIMOEmptyVault and MIMOLeverage contracts share same signature/definition, an attacker can gain control of EmptyVault contract, issue a flash loan, and empty the vaults. Proof of Concept See the test below. In below test, EmptyVault contract is...

CVE-2022-2591

A vulnerability classified as critical has been found in TEM FLEX-1085 1.6.0. Affected is an unknown function of the file /sistema/flash/reboot. The manipulation leads to denial of service. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used...

CVE-2022-2591

A vulnerability classified as critical has been found in TEM FLEX-1085 1.6.0. Affected is an unknown function of the file /sistema/flash/reboot. The manipulation leads to denial of service. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used...

PT-2022-17599 · Unknown · Tem Flex-1085

Name of the Vulnerable Software and Affected Versions: TEM FLEX-1085 version 1.6.0 Description: A critical issue has been discovered, affecting an unknown function of the file /sistema/flash/reboot. This issue leads to denial of service and can be exploited remotely. Recommendations: For TEM...

Oracle ZFS Storage Appliance Input Validation Error Vulnerability

Oracle ZFS Storage Appliance is a storage appliance that supports flash memory, petabyte file storage and built-in Oracle database from Oracle USA. A security vulnerability exists in Oracle ZFS Storage Appliance Kit version 8.8, which stems from a vulnerability that allows an elevated-privilege...

[SECURITY] Fedora 35 Update: android-tools-31.0.2-2.fc35

The Android Debug Bridge ADB is used to: - keep track of all Android devices and emulators instances connected to or running on a given host developer machine - implement various control commands e.g. "adb shell", "adb pull", etc. for the benefit of clients command-line users, or helper programs...

percsion error that causes buyoutprice to be very low causing the fractionPrice very low or very high

Lines of code Vulnerability details percsion error that causes buyoutprice to be very low causing the fractionPrice very low detials how does buyout become realy low? because of this percison error in the code if you supply msg.value=1 depsitAmount=1 totalSupply=5 1. also there is a possiblity th...

The vulnerability of the Authplay.dll library (AuthPlayLib.bundle) in the Flash Player software, as well as in programs for viewing and editing PDF files such as Adobe Reader and Adobe Acrobat, allows a perpetrator to execute arbitrary code or cause service interruptions.

The vulnerability of the Authplay.dll library AuthPlayLib.bundle in the Flash Player software, as well as in programs for viewing and editing PDF files like Adobe Reader and Adobe Acrobat, arises due to the execution of operations outside the buffer in memory when incompatible data types are used...

The vulnerability of Adobe Reader and Adobe Acrobat PDF viewer/editor programs, related to the execution of operations beyond the buffer in memory, allows attackers to execute arbitrary code or cause service interruptions.

The vulnerability of the Flash Player software is related to the execution of operations beyond the buffer in memory when processing SWF content. Exploiting this vulnerability allows a remote attacker to execute arbitrary code or cause a service failure using a specially created malware file...

The vulnerability of the copyRawDataTo method in the Matrix3D class of the Adobe Flash Player allows a hacker to execute arbitrary code.

The vulnerability of the copyRawDataTo method in the Matrix3D class of the Adobe Flash Player lies in numerical processing errors. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

TWAV can be attacked by flash loan

Lines of code Vulnerability details Impact updateTWAV can be flash loaned. Hacker may pay the flash loan fee for 4 blocks then execute the attack after that. Proof of Concept function updateTWAVuint256 valuation, uint32 blockTimestamp internal uint32 timeElapsed; unchecked timeElapsed =...

The vulnerability of the Adobe Flash Player relates to the execution of operations beyond the buffer boundaries, allowing an attacker to execute arbitrary code.

The vulnerability of the Adobe Flash Player is related to the execution of operations beyond the buffer boundaries. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of the Adobe Flash Player relates to the execution of operations beyond the buffer in memory, allowing an attacker to execute arbitrary code.

The vulnerability of the Adobe Flash Player is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Vulnerabilities of the Adobe Flash Player player, Adobe Reader and Adobe Acrobat PDF viewing and editing programs, as well as the Adobe AIR software platform—which allows for operations beyond the buffer limit in memory—enable attackers to execute arbitrary code.

The vulnerability of the Adobe Flash Player, the Adobe Reader and Adobe Acrobat PDF viewing and editing programs, as well as the Adobe AIR software platform, is related to the execution of operations beyond the buffer in memory. Exploiting this vulnerability can allow a malicious actor to execute...

The vulnerability of the Adobe Flash Player relates to the execution of operations beyond the buffer boundaries, allowing an attacker to execute arbitrary code.

The vulnerability of the Adobe Flash Player is related to the execution of operations beyond the buffer boundaries. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Lepin EP-KP001 KP001_V19 Authentication Bypass Vulnerability

When analyzing the USB flash drive Lepin EP-KP001, Matthias Deeg found out that it uses an insecure hardware design which allows an attacker to bypass the password-based user authentication. Product: EP-KP001 Manufacturer: Lepin Affected Versions: KP001V19 Tested Versions: KP001V19 Vulnerability...

Lepin EP-KP001 KP001_V19 Authentication Bypass

Advisory ID: SYSS-2022-024 Product: EP-KP001 Manufacturer: Lepin Affected Versions: KP001V19 Tested Versions: KP001V19 Vulnerability Type: Violation of Secure Design Principles CWE-657 Risk Level: High Solution Status: Open Manufacturer Notification: 2022-04-12 Solution Date: - Public Disclosure:...

Yield can be lost due to not specifying limit when transferring WETH to Aura

Lines of code Vulnerability details Impact In the harvest function, when the contract swaps WETH to Aura, limit is set to 0 allowing an attacker to front run the transaction and cause substantional loss of yield. swapSingleSwap singleSwap, FundManagement funds, uint256 limit, uint256 deadline...

Loss of yield can occur due to not specifying minAmountsOut when exiting BAL/ETH pool

Lines of code Vulnerability details Impact When exiting the BAL/ETH pool, due to not specifying anything for minAmountsOut an attacker can frontrun the transaction and cause a large change in price in the pool. This in turn leads to a large impermanent loss which is realised when the strategy bur...

Adobe Animate Out-of-Bounds Write Vulnerability (CNVD-2022-50234)

Adobe Animate is a set of Flash animation software from the American company Audobee Adobe. Adobe Animate suffers from an out-of-bounds write vulnerability. An attacker could use this vulnerability to execute arbitrary code in the context of the current user...