23893 matches found
WordPress Flash Games plugin <= 2.2 - Cross-Site Request Forgery (CSRF) Bypass vulnerability
Cross-Site Request Forgery CSRF Bypass vulnerability discovered by WPScanTeam in WordPress Flash Games plugin versions = 2.2. Solution Deactivate and delete. This plugin has been closed as of December 23, 2018 and is not available for download. Reason: Guideline Violation...
Flash Games <= 2.2 - CSRF Bypass
The plugin does not properly check for CSRF in its cgwpsearchgame AJAX action, however we could not identify a risk associated with it...
July 7, 2021—KB5004956 (Monthly Rollup) Out-of-band
None None...
July 6, 2021—KB5004954 (Monthly Rollup) Out-of-band
None None...
July 6, 2021—KB5004945 (OS Builds 19041.1083, 19042.1083, and 19043.1083) Out-of-band
None None...
July 6, 2021—KB5004947 (OS Build 17763.2029) Out-of-band
None None...
July 7, 2021—KB5004960 (Security-only update) Out-of-band
None None...
avoid paying insurance
Handle gpersoon Vulnerability details Impact It's possible to avoid paying insurance in the following way: once per hour at the right moment, do the following: ----using a flash loan, or with a large amount of tokens, call deposit of Insurance.sol to make sure that the pool is sufficiently filled...
Unauthorized Access Vulnerability in the Flash Flood Monitoring and Early Warning Distribution System of Fujian SiChuang Software Co. Ltd (CNVD-2021-50614)
Fujian SiChuang Software Co., Ltd. is a technology-based enterprise dedicated to the cause of disaster prevention and mitigation in China. An unauthorized access vulnerability exists in the Flash Flood Monitoring and Early Warning Distribution System of Fujian Sichuang Software Co. Ltd, which can...
Unauthorized Access Vulnerability in the Flash Flood Monitoring and Early Warning Distribution System of Fujian SiChuang Software Co. Ltd (CNVD-2021-50615)
Fujian SiChuang Software Co., Ltd. is a technology-based enterprise dedicated to the cause of disaster prevention and mitigation in China. An unauthorized access vulnerability exists in the Flash Flood Monitoring and Early Warning Distribution System of Fujian Sichuang Software Co. Ltd, which can...
June 29, 2021—KB5004760 (OS Builds 19041.1082, 19042.1082, and 19043.1082) Out-of-band
None None...
SQL Injection Vulnerability in Flash Flood Monitoring and Early Warning Information Management System of Sichuang Technology Co. Ltd (CNVD-2021-48908)
Siltronic is a company dedicated to the cause of disaster prevention and mitigation in China, providing the government with comprehensive solutions for disaster prevention and mitigation informatization. A SQL injection vulnerability exists in the Flash Flood Monitoring and Early Warning...
File Upload Vulnerability in Flash Flood Monitoring and Early Warning Distribution System of Siltronic Technology Co.
Siltronic Ltd. is an information service provider for disaster reduction and profitability. An arbitrary file upload vulnerability exists in the Flash Flood Detection and Early Warning Platform of Sicron Technology Limited, which allows an attacker to upload an aspx file to gain access to the...
June 15, 2021—KB5003703 (OS Build 17763.2028) Preview
None None...
June 15, 2021—KB5003698 (OS Build 18363.1645) Preview
None None...
Arbitrary File Read Vulnerability in Flash Flood Monitoring and Early Warning System of Chengdu Wanjiang Gangli Technology Co.
Founded in 2007, Chengdu Wanjiang Gangli Technology Co., Ltd. is positioned as a full chain service provider of water technology under the framework of artificial intelligence. There is an arbitrary file read vulnerability in the flash flood monitoring and warning system of Chengdu Wanjiang Gangl...
Catalog Traversal Vulnerability in Flash Flood Monitoring and Early Warning System of Beijing Puhua Zhishen Science and Technology Co.
Beijing Puhua Zhishen Technology Co., Ltd, business scope includes technology promotion, basic software services, application software services, etc. A directory traversal vulnerability exists in the flash flood monitoring and early warning system of Beijing Puhua Zhishen Technology Co. An attack...
User can redeem more tokens by artificially increasing the chi accrual
Handle shw Vulnerability details Impact A user can artificially increase the chi accrual after maturity by flash borrow on Compound, which affects the exchange rate used by the chi oracle. As a result, the user redeems more underlying tokens with the same amount of fyTokens since the accrual is...
STMicroelectronics STM32L4 Access Control Error Vulnerability
The STMicroelectronics STM32L4 is a series of ultra-low power microcontrollers from STMicroelectronics, an Italian and French company. The STMicroelectronics STM32L4 suffers from an access control error vulnerability that stems from the fact that flash readout protection can be degraded from RDP...
