lock-security.be Cross Site Scripting vulnerability OBB-3306320

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Mitigation of M-08: Issue NOT mitigated

Mitigated issue M-08: Possible DoS on unstake The issue is that a potential time-lock in Rocket Pool may cause RocketTokenRETHInterfacerethAddress.burnamount to revert, which prevents frequent withdrawals and unstakes. Mitigation review Reth.withdraw still calls...

CLSA-2023-1683146027 kernel: Fix of 23 CVEs

media: rc: Fix use-after-free bugs caused by enetxirqsim CVE-2023-1118 - net: mpls: fix stale pointer if allocation fails during device rename CVE-2023-26545 - net/ulp: prevent ULP without clone op from entering the LISTEN status CVE-2023-0461 - Bluetooth: L2CAP: Fix u8 overflow CVE-2022-45934 -...

SAMSUNG Mobile devices 授权问题漏洞

SAMSUNG Mobile devices are a range of Samsung mobile devices, including cell phones, tablets, etc. from the South Korean company Samsung SAMSUNG. A security vulnerability previously existed in SAMSUNG Mobile devices SMR May-2023 Release 1 version, which originated in AppLock and allowed a local...

NULL Pointer Dereference

linux-azure is vulnerable to NULL Pointer Dereference. A missing lock when clearing 'skuserdata' can lead to the vulnerability causing a potential denial of service...

CVE-2023-2430

A vulnerability was found due to a missing lock for the IOPOLL in iocqringeventoverflow in iouring.c in the Linux kernel. This flaw allows a local attacker with user privileges to trigger a denial of service. Mitigation Mitigation for this issue is either not available or the currently available...

Ping Identity PingID Desktop 访问控制错误漏洞

Ping Identity PingID Desktop is a software from Ping Identity. You can view the OTP or generate a new password for authentication. A security vulnerability exists in Ping Identity PingID Desktop prior to version 1.7.4 that stems from bypassing the maximum number of PIN attempts allowed before...

PT-2023-2680

Name of the Vulnerable Software and Affected Versions Linux kernel version 6.2 Description An issue was discovered in drivers/tty/n gsm.c in the Linux kernel, where a sleeping function is called from an invalid context in gsmld write, which will block the kernel. This issue is related to the use ...

Google Android 资源管理错误漏洞

Google Android is a Linux-based open source operating system from Google. A code execution vulnerability exists in Google Android, which stems from a mix-up in the OnWakelockReleased instruction responsible for freeing memory in the attributeprocessor.cc component, and can be exploited by an...

Mozilla Firefox 安全漏洞

Mozilla Firefox is an open source web browser from the Mozilla Foundation in the United States. A security vulnerability exists in Mozilla Firefox versions prior to 112, which stems from a Mozilla Maintenance Service write-lock bypass, where a local attacker can trick the Mozilla Maintenance...

CVE-2023-27647

An issue found in DUALSPACE Lock Master v.2.2.4 allows a local attacker to cause a denial of service or gain sensitive information via the com.ludashi.superlock.util.pref.SharedPrefProviderEntryMethod: insert of the android.net.Uri.insert method...

CVE-2023-27647

An issue found in DUALSPACE Lock Master v.2.2.4 allows a local attacker to cause a denial of service or gain sensitive information via the com.ludashi.superlock.util.pref.SharedPrefProviderEntryMethod: insert of the android.net.Uri.insert method...

ETHCrowdfundBase._finalize() calculates the total voting power wrongly.

Lines of code Vulnerability details Impact After the crowdfund is finalized, the party wouldn't work properly because total voting power is greater than the sum of all voters' voting power. In the worst case, any proposal including the distribution one wouldn't be executed because it doesn't meet...

CVE-2023-27647

CVE-2023-27647 affects DUALSPACE Lock Master v2.2.4. The issue allows a local attacker to cause a denial of service or leak sensitive information via com.ludashi.superlock.util.pref.SharedPrefProviderEntryMethod: insert of android.net.Uri.insert. Root cause is the insertion pathway in SharedPrefP...

CVE-2023-27647

An issue found in DUALSPACE Lock Master v.2.2.4 allows a local attacker to cause a denial of service or gain sensitive information via the com.ludashi.superlock.util.pref.SharedPrefProviderEntryMethod: insert of the android.net.Uri.insert method...

VetoProposal#voteToVeto can be called repeatedly by same voter and be used to lock party

Lines of code Vulnerability details Impact Party can be locked due to not being able to pass and proposals Proof of Concept VetoProposal.solL37-L59 uint96 votingPower = party.getVotingPowerAt msg.sender, proposalValues.proposedTime - 1, snapIndex ; uint96 newVotes = votes + votingPower; // Check ...

PT-2023-21280 · Dualspace · Dualspace Lock Master

Name of the Vulnerable Software and Affected Versions: DUALSPACE Lock Master version 2.2.4 Description: An issue in DUALSPACE Lock Master allows a local attacker to cause a denial of service or gain sensitive information via the com.ludashi.superlock.util.pref.SharedPrefProviderEntryMethod: inser...

CVE-2023-27647

An issue found in DUALSPACE Lock Master v.2.2.4 allows a local attacker to cause a denial of service or gain sensitive information via the com.ludashi.superlock.util.pref.SharedPrefProviderEntryMethod: insert of the android.net.Uri.insert method...

The vulnerability of the Windows operating system’s lock screen allows a hacker to bypass security restrictions.

The vulnerability of the Windows operating system’s lock screen is related to security configuration errors. Exploiting this vulnerability can allow a hacker to bypass security restrictions...

DUALSPACE Lock Master 安全漏洞

DUALSPACE Lock Master is a smart and secure Android app lock from DUALSPACE. A security vulnerability exists in DUALSPACE Lock Master version 2.2.4, which stems from the presence of a denial of service and disclosure of sensitive information...