PT-2023-35693 · Git +1 · Croaring

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a heap-buffer-overflow WRITE 4 crash type. The crash state involves several functions: array container to uint32 array, ra to...

Exploit for CVE-2021-3129

CVE-2021-3129 Laravel RCE CVE-2021-3129 Vulnerability O...

ReaperVaultERC4626.sol is not EIP-4626 compliant

Lines of code Vulnerability details Impact Other protocols integrated with Ethos Reserve may mistakenly assume that its function complies with EIP-4626. Therefore, this may lead to integration issues in the future, which could result in various problems for both parties. Proof of Concept All...

The design defect of the ActivePool rehypothecation mechanism, ReaperVaultV2 administrators have too much authority and have the conditions and motives to do evil, so make users lack trust in the ETHOS system (crisis of trust)

Lines of code Vulnerability details Impact In the design logic of the current system, ActivePool holds all the collaterals of active troves and deposits part of them in ReaperVaultV2 for re-mortgaging. If the deposit and withdraw functions of ReaperVaultV2 revert, Core functions such as borrowing...

[NAZ-M2] ReaperVaultERC4626.sol doesn't fully conform to EIP4626 implementation

Lines of code Vulnerability details Impact Specifically the two function maxDeposit && maxMint don't fully conform to EIP4626 implementation. Proof of Concept Looking at the following from EIP4626: This assumes that the user has infinite assets, i.e. MUST NOT rely on balanceOf of asset. This goes...

PT-2023-35684 · Git +1 · Wireshark

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: A crash occurred due to an unknown read issue. The crash state involves several functions: dissect oran c section, dissect oran, and call dissector work...

Medium: ImageMagick

Issue Overview: An integer overflow issue was discovered in ImageMagick's ExportIndexQuantum function in MagickCore/quantum-export.c. Function calls to GetPixelIndex could result in values outside the range of representable for the 'unsigned char'. When ImageMagick processes a crafted pdf file,...

PT-2023-35683 · Git +1 · Mruby

Name of the Vulnerable Software and Affected Versions: No specific software or versions mentioned. Description: A crash occurs due to an unknown read issue. The crash involves the mrb vm find method, mrb vm exec, and mrb vm run functions. No information is available about the estimated number of...

X-force - IBM Security Utilitary Library In Python. Search And Query All Sources: Threat_Activities And Groups, Malware_Analysis, Industries

IBM Security X-FORCE Exchange library in Python 3. Search: threatactivities, threatgroups, malwareanalysis, collector and industries. Install pip3 install XForce Use Using you APIKEY make a basic authentication. After make a base64 code → Key + : + Password: printf...

@datatitian/vega (5.17.0), @ekyc_qoobiss/qbs-cid-cmp (>=1.0.5, <=1.5.9) +52 more potentially affected by CVE-2023-26486 via vega-functions (>=5.5.0, <=5.12.1)

vega-functions NPM version =5.5.0, =1.0.5, =1.2.0, =0.0.2, =0.0.4, =0.1.2, =1.0.7, =0.6.2, =1.0.1, =1.4.2-pre.1, =1.5.1 and more Source cves: CVE-2023-26486 Source advisory: MEND:CVE-2023-26486...

@datatitian/vega (5.17.0), @ekyc_qoobiss/qbs-cid-cmp (>=1.0.5, <=1.5.9) +52 more potentially affected by CVE-2023-26487 via vega-functions (>=5.5.0, <=5.12.1)

vega-functions NPM version =5.5.0, =1.0.5, =1.2.0, =0.0.2, =0.0.4, =0.1.2, =1.0.7, =0.6.2, =1.0.1, =1.4.2-pre.1, =1.5.1 and more Source cves: CVE-2023-26487 Source advisory: MEND:CVE-2023-26487...

PT-2023-35675 · Git +1 · Harfbuzz

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: A heap-buffer-overflow read issue is reported, with a crash type indicating a heap-buffer-overflow READ 1. The crash state involves several functions,...

@datatitian/vega (5.17.0), @ekyc_qoobiss/qbs-cid-cmp (>=1.0.5, <=1.5.9) +52 more potentially affected by CVE-2023-26486 via vega-functions (>=5.5.0, <=5.12.1)

vega-functions NPM version =5.5.0, =1.0.5, =1.2.0, =0.0.2, =0.0.4, =0.1.2, =1.0.7, =0.6.2, =1.0.1, =1.4.2-pre.1, =1.5.1 and more Source cves: CVE-2023-26486 Source advisory: OSV:GHSA-4VQ7-882G-WCG4...

@datatitian/vega (5.17.0), @ekyc_qoobiss/qbs-cid-cmp (>=1.0.5, <=1.5.9) +52 more potentially affected by CVE-2023-26486 via vega-functions (>=5.5.0, <=5.12.1)

vega-functions NPM version =5.5.0, =1.0.5, =1.2.0, =0.0.2, =0.0.4, =0.1.2, =1.0.7, =0.6.2, =1.0.1, =1.4.2-pre.1, =1.5.1 and more Source cves: CVE-2023-26486 Source advisory: GHSA-4VQ7-882G-WCG4...

Vega Expression Language `scale` expression function Cross Site Scripting

Summary The Vega scale expression function has the ability to call arbitrary functions with a single controlled argument. This can be exploited to escape the Vega expression sandbox in order to execute arbitrary JavaScript. Details The scale expression function passes a user supplied argument gro...

@datatitian/vega (5.17.0), @ekyc_qoobiss/qbs-cid-cmp (>=1.0.5, <=1.5.9) +52 more potentially affected by CVE-2023-26487 via vega-functions (>=5.5.0, <=5.12.1)

vega-functions NPM version =5.5.0, =1.0.5, =1.2.0, =0.0.2, =0.0.4, =0.1.2, =1.0.7, =0.6.2, =1.0.1, =1.4.2-pre.1, =1.5.1 and more Source cves: CVE-2023-26487 Source advisory: GHSA-W5M3-XH75-MP55...

@datatitian/vega (5.17.0), @ekyc_qoobiss/qbs-cid-cmp (>=1.0.5, <=1.5.9) +52 more potentially affected by CVE-2023-26487 via vega-functions (>=5.5.0, <=5.12.1)

vega-functions NPM version =5.5.0, =1.0.5, =1.2.0, =0.0.2, =0.0.4, =0.1.2, =1.0.7, =0.6.2, =1.0.1, =1.4.2-pre.1, =1.5.1 and more Source cves: CVE-2023-26487 Source advisory: OSV:GHSA-W5M3-XH75-MP55...

Spring Cloud Function for Azure Function

What is the Spring Cloud Function? Spring Cloud Function is a SpringBoot-based framework allowing users to concentrate on their business logic by implementing them as Java Functions i.e., Supplier, Function, Consumer. In turn the framework provides necessary abstraction to enable execution of the...

PT-2023-35592 · Git +1 · Libavc

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: A heap-buffer-overflow WRITE 4 crash has been reported. The crash involves the following functions: isvcd nal byte swap emulation, isvcd nal parse non vc...

openssl security and bug fix update

3.0.1-47.0.1 - Replace upstream references Orabug: 34340177 1:3.0.1-47 - Fixed X.509 Name Constraints Read Buffer Overflow Resolves: CVE-2022-4203 - Fixed Timing Oracle in RSA Decryption Resolves: CVE-2022-4304 - Fixed Double free after calling PEMreadbioex Resolves: CVE-2022-4450 - Fixed...