PT-2022-33528 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.19.2 Description: The issue is related to a refcount leak in the ap flash init function. It was introduced in version v4.7 and fixed in version v5.19.2. The actual impact and attack plausibility have not yet...

an attacker can take out flash loan and cause users not to be able to redeem their tokens because of undflow or divsion by zero

Lines of code Vulnerability details Impact An attacker can take out a flash loan and cause the state variable redeemBase=1 causing users who call this function to get dosed and since users can't call this function after the attacker makes the reedem function unuseable which can cause funds to be...

mbDrive Lite WiFi Flash Disk 1.4.0 Cross Site Scripting Vulnerability

Exploit Title: mbDrive Lite - WiFi flash disk 1.4.0 Reflected XSS Exploit Author: Chokri Hammedi Vendor Homepage: https://apps.apple.com/us/developer/haw-yuan-yang/id291212805 Software Link: https://apps.apple.com/us/app/mbdrive-lite-wifi-flash-disk/id343254033 Version: 1.4.0 Tested on: iPhone io...

CVE-2022-36552

Tenda AC6AC1200 v5.0 Firmware v02.03.01.114 and below contains an issue in the component /cgi-bin/DownloadFlash which allows attackers to steal all data such as source code and system files via a crafted GET request...

CVE-2022-36552

Tenda AC6AC1200 v5.0 Firmware v02.03.01.114 and below contains an issue in the component /cgi-bin/DownloadFlash which allows attackers to steal all data such as source code and system files via a crafted GET request...

CVE-2021-4122

It was found that a specially crafted LUKS header could trick cryptsetup into disabling encryption during the recovery of the device. An attacker with physical access to the medium, such as a flash disk, could use this flaw to force a user into permanently disabling the encryption layer of that...

CVE-2021-4122

It was found that a specially crafted LUKS header could trick cryptsetup into disabling encryption during the recovery of the device. An attacker with physical access to the medium, such as a flash disk, could use this flaw to force a user into permanently disabling the encryption layer of that...

Code injection

It was found that a specially crafted LUKS header could trick cryptsetup into disabling encryption during the recovery of the device. An attacker with physical access to the medium, such as a flash disk, could use this flaw to force a user into permanently disabling the encryption layer of that...

CVE-2021-4122

It was found that a specially crafted LUKS header could trick cryptsetup into disabling encryption during the recovery of the device. An attacker with physical access to the medium, such as a flash disk, could use this flaw to force a user into permanently disabling the encryption layer of that...

LinearInterestRate mode has the risk of drastic fluctuation of interestRate by flash borrow attack, make borrower pay more interest

Lines of code Vulnerability details Impact In LinearInterestRate mode, the minInterest can be as low as MININT=0, and the maxInterest can be as high as MAXINT=146248508681. In getNewRate function, the newRate is determined by utilization. If utilization=1e5, the interestRate can be MAXINT. There...

interest rate calculate vulnerability

Lines of code Vulnerability details Impact function addinterst uses the interest rate immediately generated by the current block first transaction calculated,it will cause some interest lose. Proof of Concepmt function addinterst uses the interest rate immediately generated by the current block t...

CVE-2022-36141

SWFMill commit 53d7690 was discovered to contain a segmentation violation via SWF::MethodBody::writeSWF::Writer, SWF::Context...

DEBIAN-CVE-2022-36140

SWFMill commit 53d7690 was discovered to contain a segmentation violation via SWF::DeclareFunction2::writeSWF::Writer, SWF::Context...

CVE-2022-35114

SWFTools commit 772e55a2 was discovered to contain a segmentation violation via extractFrame at /readers/swf.c...

CVE-2022-30264

The Emerson ROC and FloBoss RTU product lines through 2022-05-02 perform insecure filesystem operations. They utilize the ROC protocol 4000/TCP, 5000/TCP for communications between a master terminal and RTUs. Opcode 203 of this protocol allows a master terminal to transfer files to and from the...

CVE-2022-30264

The Emerson ROC and FloBoss RTU product lines through 2022-05-02 perform insecure filesystem operations. They utilize the ROC protocol 4000/TCP, 5000/TCP for communications between a master terminal and RTUs. Opcode 203 of this protocol allows a master terminal to transfer files to and from the...

SWFTools 安全漏洞

SWFTools is a set of utilities for working with Adobe Flash files SWF files from the individual developer Matthias Kramm. A security vulnerability exists in SWFTools, which stems from sanitizer::StackDepotNode::hashsanitizer::StackTrace const& in file /sanitizercommon/sanitizerstackdepot.cpp. A...

SWFMill 代码问题漏洞

SWFMill is a tool for working with Adobe Flash SWF files by Daniel Cassidy, a personal developer in the UK. A code issue vulnerability exists in SWFMill commit number: 53d7690 that stems from a memory segment exception in its SWF::Reader::getWord function...

SWFMill 代码问题漏洞

SWFMill is a tool for working with Adobe Flash SWF files by Daniel Cassidy, a personal developer in the UK. A code issue vulnerability exists in SWFMill commit number: 53d7690 that stems from a memory segment exception in its SWF::MethodBody::writeSWF::Writer, SWF::Context function...

SWFMill 代码问题漏洞

SWFMill is a tool for working with Adobe Flash SWF files by Daniel Cassidy, a personal developer in the UK. A security vulnerability exists in SWFMill commit number: 53d7690 that stems from a memory segment exception in its SWF::DeclareFunction2::writeSWF::Writer, SWF::Context function...