Changing _treasuryRate can cause lender to lose some interest that it is entitled to

Lines of code Vulnerability details Impact Calling the following ParticleExchange.buyNftFromMarket, ParticleExchange.repayWithNft, ParticleExchange.refinanceLoan, and ParticleExchange.auctionBuyNft functions accrue interestAccrued for the corresponding lender. When calling these functions, the...

GHSA-G2MC-FQQC-HXG3 Pimcore Path Traversal Vulnerability in AdminBundle/Controller/Reports/CustomReportController.php

Impact The impact of this path traversal and arbitrary extension is limited creation of arbitrary files and appending data to existing files but when combined with the SQL Injection, the exported data RESTRICTED DIFFUSION 9 / 9 can be controlled and a webshell can be uploaded. Attackers can use...

CVE-2021-21805

creationtimestamp| type| source ---|---|--- 2023-04-27 09:58:59+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2021/CVE-2021-21805.yaml 2024-09-21 16:07:00+00:00| published-proof-of-concept| Telegram/PFuHmq-kFHJdhlJhe8Rm70ksRgJWMwxLf5kEr4GitGermQ...

CVE-2023-28426

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: GHSA-xrqq-wqh4-5hg2. Reason: Further investigation showed that this CVE was assigned in error. Notes: See https://github.com/darylldoyle/svg-sanitizer/issues/88 for a technical discussion...

Upgraded Q -> 2 from #625 [1677633526031]

Judge has assessed an item in Issue 625 as 2 risk. The relevant finding follows: 4. lastHarvest variable inside AdapterBase will never be updated after a successful harvest,this will create big problems related to all the harvest function inside AdapterBase by making this function unusable,in fac...

CVE-2022-3590

creationtimestamp| type| source ---|---|--- 2022-12-14 12:27:22+00:00| seen| https://t.me/cibsecurity/54496 2025-09-19 05:42:57+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2022/CVE-2022-3590.yaml 2025-09-20 21:02:29+00:00| seen|...

Using SafeTransferLib as a transfer medium has a certain probability of causing problems

Lines of code Vulnerability details Impact Detailed description of the impact of this finding. function exerciseOrder memory order, uint256 calldata floorAssetTokenIds public payable / CHECKS / bytes32 orderHash = hashOrderorder; // check user owns the position requireownerOfuint256orderHash ==...

Short Call Maker Asset Can Be Frozen

Lines of code Vulnerability details Impact The fillOrder function only checks that the floorAssetTokenIds.length must be 0 when a taker fill a short call order. In other words, it does not check whether order.floorTokens.length is 0 or not, which means that if the maker includes any address in...

Attacker can steal all tokens from pools

Lines of code Vulnerability details Attacker can steal all tokens from pool 2 issues 1.On deployment totalsupply is zero and reserve0 and reserve1 is zero called minting 103 to address zero And if tokens have supply in them amount0=1018 amount1=1018 liquidity= sqr1e36 - 103 =1015 which is still...

CVE-2019-17671

creationtimestamp| type| source ---|---|--- 2022-06-18 10:22:36+00:00| published-proof-of-concept| https://t.me/arm1tage/129 2024-01-16 10:36:22+00:00| seen| https://t.me/ctinow/168734 2025-12-04 01:12:40+00:00| confirmed|...

GHSA-673J-QM5F-XPV8

creationtimestamp| type| source ---|---|--- 2022-02-24 11:07:01+00:00| seen| https://t.me/CyberSecurityTechnologies/5483 2025-07-16 16:29:40+00:00| seen| https://gist.github.com/safer-bot/06ba3e736cb2a22693a2da2a15674353...

CVE-2021-46371

creationtimestamp| type| source ---|---|--- 2022-02-14 18:32:47+00:00| seen| https://t.me/cibsecurity/37431 2026-04-09 11:08:42+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2021/CVE-2021-46371.yaml 2026-04-13 21:03:06+00:00| seen|...

CVE-2021-45328

creationtimestamp| type| source ---|---|--- 2022-02-08 18:36:59+00:00| seen| https://t.me/cibsecurity/37014 2026-04-21 17:43:26+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2021/CVE-2021-45328.yaml 2026-04-22 21:02:31+00:00| seen|...

Exploit for Missing Authentication for Critical Function in Apache Apisix_Dashboard

CVE-2021-45232 RCE POC Screenshots !P...

Kubernetes: Broken Github Link Used in deployment docs of "github.com/kubernetes/kompose"

Report Submission Form Summary: Kubernetes have a github project github.com/kubernetes/kompose In the project there is a doc which have installation steps In the steps, doc is referring to another github account repository to clone it and install. But the github account was not registered on...

CVE-2021-24213

creationtimestamp| type| source ---|---|--- 2021-05-22 02:01:46+00:00| seen| https://t.me/pwnwikizhchannel/477 2026-01-06 13:27:39+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2021/CVE-2021-24213.yaml 2026-01-07 21:03:19+00:00| seen|...

Missing nonReentrant in swapTo

Handle adelamo Vulnerability details Here you have more info: --- The text was updated successfully, but these errors were encountered: All reactions...

Modded-Ubuntu - Run Ubuntu GUI On Your Termux With Much Features

Run Ubuntu GUI on your termux with much features. Features Fixed Audio Output Lightweight Requires at least 4GB Storage Katoolin3 tool for installing kali tools 2 Browsers Chromium & Mozilla Firefox Supports Bangla Fonts VLC Media Player Visual Studio Code Easy for Beginners Installation First...

CVE-2020-19363

creationtimestamp| type| source ---|---|--- 2021-01-20 07:26:49+00:00| seen| https://t.me/cibsecurity/22319 2026-01-12 01:55:20+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2020/CVE-2020-19363.yaml 2026-01-13 21:03:02+00:00| seen|...

CVE-2020-29279

creationtimestamp| type| source ---|---|--- 2020-12-03 00:55:26+00:00| seen| https://t.me/cibsecurity/17068 2025-10-13 03:00:05+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2020/CVE-2020-29279.yaml 2025-10-14 21:02:27+00:00| seen|...