1521 matches found
Sweat Economy Gives Power to Community over 2 Billion SWEAT Tokens
By Waqas These 2 billion SWEAT tokens, which make up around 13% of the total supply, have been locked in… This is a post from HackRead.com Read the original post: Sweat Economy Gives Power to Community over 2 Billion SWEAT Tokens...
MALICIOUS USER CAN USE LOCKED ETH OF THE CONTRACT TO MINT HIGHER NUMBER OF TOKENS OR SWAP AND RECIEVE MORE TOKENS THAN HE IS ELIGIBLE
Lines of code Vulnerability details Impact In the JBXBuybackDelegate contract, the terminal token is considered to be ETH as of now according to documentation. Hence both the mint and swap functionality uses the data.amount.value as the ETH amount for new token minting or swapping. In the...
PT-2023-23781 · Apple · Watchos +1
Name of the Vulnerable Software and Affected Versions: watchOS versions prior to 9.5 Description: This issue allows an attacker with physical access to a locked Apple Watch to potentially view user photos or contacts via accessibility features. The issue was addressed by restricting options offer...
UBUNTU-CVE-2023-32784
In KeePass 2.x before 2.54, it is possible to recover the cleartext master password from a memory dump, even when a workspace is locked or no longer running. The memory dump can be a KeePass process dump, swap file pagefile.sys, hibernation file hiberfil.sys, or RAM dump of the entire system. The...
Bad debt bidders’ funds are locked forever when Shortfall address is changed during ongoing debt auction
Lines of code Vulnerability details Vulnerability Details When the protocol accrues bad debt, it can be auctioned off to anyone who is willing to pay. Each user wanting to participate in the auction has to lock their bid in Shortfall contract: function placeBidaddress comptroller, uint256 bidBps...
CVE-2023-24899: Sensitive Data Storage in Improperly Locked Memory
Windows Graphics Component Elevation of Privilege Vulnerability...
CVE-2023-28283: Sensitive Data Storage in Improperly Locked Memory
Windows Lightweight Directory Access Protocol LDAP Remote Code Execution Vulnerability...
If a label for a domain gets locked once, the domain will never be able to be claimed in DNSRegistrar.sol, since there's no method to unlock a label
Lines of code Vulnerability details Proof of Concept When claiming a domain in DNSRegistrar.sol either through proveAndClaim or proveAndClaimWithResolver, the internal function enableNode will be called. The snippet bellow shows that when owner == address0 or owner == previousRegistrar and...
CVE-2023-2257
Authentication Bypass in Hub Business integration in Devolutions Workspace Desktop 2023.1.1.3 and earlier on Windows and macOS allows an attacker with access to the user interface to unlock a Hub Business space without being prompted to enter the password via an unimplemented "Force Login" securi...
PT-2023-18560 · Devolutions · Devolutions Workspace Desktop
Name of the Vulnerable Software and Affected Versions: Devolutions Workspace Desktop versions 2023.1.1.3 and earlier Description: The issue allows an attacker with access to the user interface to unlock a Hub Business space without being prompted to enter the password via an unimplemented "Force...
Contributors wouldn't claim their party cards from the finalized ReraiseETHCrowdfund by a malicious crowdfund creator.
Lines of code Vulnerability details Impact With the custom min/maxContributions settings, contributors wouldn't claim their part cards after the ReraiseETHCrowdfund was finalized. As a result, their funds will be locked inside the party forever because they can't claim from TokenDistributor witho...
CVE-2023-28238: Sensitive Data Storage in Improperly Locked Memory
Windows Internet Key Exchange IKE Protocol Extensions Remote Code Execution Vulnerability...
CVE-2023-28219: Sensitive Data Storage in Improperly Locked Memory
Layer 2 Tunneling Protocol Remote Code Execution Vulnerability...
CVE-2023-28224: Sensitive Data Storage in Improperly Locked Memory
Windows Point-to-Point Protocol over Ethernet PPPoE Remote Code Execution Vulnerability...
CVE-2023-28255: Sensitive Data Storage in Improperly Locked Memory
Windows DNS Server Remote Code Execution Vulnerability...
CVE-2023-28229: Sensitive Data Storage in Improperly Locked Memory
Windows CNG Key Isolation Service Elevation of Privilege Vulnerability...
CVE-2023-28278: Sensitive Data Storage in Improperly Locked Memory
Windows DNS Server Remote Code Execution Vulnerability...
CVE-2023-28273: Sensitive Data Storage in Improperly Locked Memory
Windows Clip Service Elevation of Privilege Vulnerability...