23893 matches found
CVE-2020-23370
In YzmCMS 5.6, stored XSS exists via the common/static/plugin/ueditor/1.4.3.3/php/controller.php action parameter, which allows remote attackers to upload a swf file. The swf file can be injected with arbitrary web script or HTML...
Microsoft Will Soon Kill Flash on Windows 10 for Good
Plus: A Peloton data leak, Russian hacker details, and more of the week’s top security news...
Catalog Traversal Vulnerability in Flash Flood Monitoring and Early Warning System of Chengdu Wanjiang Gangli Technology Co.
Founded in 2007, Chengdu Wanjiang Gangli Technology Co., Ltd. is positioned as a full chain service provider of water technology under the framework of artificial intelligence. There is a directory traversal vulnerability in the flash flood monitoring and early warning system of Chengdu Wanjiang...
Reward rates can be changed through flash borrows
Handle @cmichelio Vulnerability details Vulnerability Details The rewards per market are proportional to their totalBorrows which can be changed by a large holder who deposits lots of collateral, takes out a huge borrow in the market, updates the rewards, and then unwinds the position. They'll on...
Exploit for Use After Free in Adobe Flash_Player
This is a Python script, CVE-2018-15982EXP.py, which appears to be an exploit for the CVE-2018-15982 vulnerability. The script is designed to exploit a vulnerability in a specific product or service, likely a web application, to achieve remote code execution. The script starts with a logo and the...
Anyone can list anchors / curate tokens
Handle @cmichelio Vulnerability details Vulnerability Details The Router.listAnchor function can be called by anyone and tokens can be added. The only check is that requireiPOOLSPOOLS.isAnchortoken; but this can easily be set by calling Pools.addLiquidityVADER, token, once even without actually...
Anyone can curate pools and steal rewards
Handle @cmichelio Vulnerability details Vulnerability Details The Router.curatePool and replacePool don't have any access restriction. An attacker can get a flash loan of base tokens and replace existing curated pools with their own curated pools. Impact Curated pools determine if a pool receives...
flashProof is not flash-proof
Handle @cmichelio Vulnerability details Vulnerability Details The flashProof modifier is supposed to prevent flash-loan attacks by disallowing performing several sensitive functions in the same block. However, it performs this check on tx.origin and not on an individual user address basis. This...
Swap value can be manipulated allowing under-collateralized loans
Handle @cmichelio Vulnerability details Vulnerability Details When borrowing with synths as collateral the synth collateral value in base tokens is computed as baseValue = calcSwapValueInBaseiSYNTHcollateralAsset.TOKEN, collateralAdjusted;, i.e., the result of a trade of the underlying token to...
File Upload Vulnerability in Flash Flood Monitoring and Early Warning System of Fujian SiChuang Software Co.
Fujian SiChuang Software Co., Ltd. is a technology-based enterprise dedicated to the cause of disaster prevention and mitigation in China. It specializes in providing disaster prevention and mitigation emergency command system solutions for the government, disaster prevention and mitigation...
Unauthorized Access Vulnerability in Flash Flood Monitoring and Early Warning Distribution System of Fujian SiChuang Software Co.
Fujian Siltronic Software Co., Ltd. is a Chinese information service provider dedicated to the cause of disaster risk reduction and profitability, providing comprehensive solutions for governmental disaster risk reduction and profitability informatization; providing disaster risk reduction and...
April 22, 2021—KB5001384 (OS Build 17763.1911) Preview
None None...
April 22, 2021—KB5001396 (OS Build 18363.1533) Preview
None None...
Default slippage value too high
Handle janbro Vulnerability details Summary Default slippage value too high. Risk Rating Medium Vulnerability Details MapleGlobals.sol Line 87: maxSwapSlippage = 1000; // 10 % The default slippage value of 10% is vulnerable to sandwich attackers which would shift larger costs onto stakers and LPs...
CVE-2021-3506
An out-of-bounds OOB memory access flaw was found in fs/f2fs/node.c in the f2fs module in the Linux kernel in versions before 5.12.0-rc4. A bounds check failure allows a local attacker to gain access to out-of-bounds memory leading to a system crash or a leak of internal kernel information. The...
SUSE: Security Advisory (SUSE-SU-2015:0688-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
PT-2024-11139 · Linux +1 · Linux Kernel +1
Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The vulnerability is related to the spi-zynqmp-gqspi controller in the Linux kernel, which supports 44-bit address space on AXI in DMA mode. If the dma map single function fails, it...
Exploit for Use After Free in Adobe Flash_Player
Awesome CobaltStrike 0x00 前言 1. 一部分是近期做RedTeam项目的时候看到的一些关于CobaltStrike不错的文章 2. 目前网上的Aggressor Script种类繁多，大多数资源的聚合都是只给出对应的链接，而不说明是干什么的，以至于在查看时不知道如何选择，要一个一个打开看 3. 关于新特性BOF资源的整合 4. 解决要用的时候找不到合适aggressor script或者BOF的问题 5. 如果有本repo没有涉及的优质内容，欢迎大家提交pr 0x01 相关文章合集 基础知识参考： 1. CobaltStrikewiki 2...