14047 matches found
M-06 Unmitigated
Lines of code Vulnerability details Original Issue code-423n4/2023-06-angle-findings13 Details This issue shows users may lose a portion of yield when protocolSafetyFee and vestingPeriod are changed. As mitigation, it recommends accruing interests before those parameters are changed. Mitigation P...
CVE-2023-38205: Adobe ColdFusion Access Control Bypass [FIXED]
!CVE-2023-38205: Adobe ColdFusion Access Control Bypass \FIXED\https://blog.rapid7.com/content/images/2023/07/GettyImages-1185282377-3.jpg On July 11, 2023, Rapid7 and Adobe disclosed CVE-2023-29298, an access control bypass vulnerability affecting ColdFusion, which Rapid7 had reported to Adobe i...
How to Send a Test Email Notification Using PowerShell
This article documents a method for sending a simple email via PowerShell...
CVE-2023-38434
xHTTP 72f812d has a double free in closeconnection in xhttp.c via a malformed HTTP request method...
WordPress Advanced USPS Shipping Method Plugin <= 1.0.1 is vulnerable to Cross Site Scripting (XSS)
Software Advanced USPS Shipping Method Type Plugin Vulnerable versions = 1.0.1 Fixed in 1.0.2 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-33999 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID a753901c3acc Credits Rafie Muhammad...
PT-2023-26419
Name of the Vulnerable Software and Affected Versions xHTTP version 72f812d Description The issue is related to a double free in the close connection function in xhttp.c, which can be triggered by a malformed HTTP request method. Recommendations For xHTTP version 72f812d, consider restricting...
CVE-2023-38434
xHTTP 72f812d has a double free in closeconnection in xhttp.c via a malformed HTTP request method...
CVE-2023-38434: Double Free
xHTTP 72f812d has a double free in closeconnection in xhttp.c via a malformed HTTP request method...
CVE-2023-38434
The CVE-2023-38434 issue affects the xHTTP server library (xhttp.c) where a double-free occurs in close_connection when handling a malformed HTTP request method. Root cause: freeing conn->request.public.headers.list twice. Impact: potential crash/denial of service (availability). A publicly do...
WordPress Shipping method for WooCommerce - Use for Conditional shipping + Extra shipping + flat rate shipping method + Table Rate Shipping for WooCommerce Plugin <= 3.0.9 is vulnerable to Cross Site Scripting (XSS)
Software Shipping method for WooCommerce - Use for Conditional shipping + Extra shipping + flat rate shipping method + Table Rate Shipping for WooCommerce Type Plugin Vulnerable versions = 3.0.9 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-33999 Pat...
Remote Code Execution (RCE)
xalpha is vulnerable to Remote Code Execution RCE. The vulnerability exists in the basicinit function of info.py due to the use of the eval method without user input validation, which allows an attacker to execute malicious code in the system...
The exchange rate is decreasing in Vault
Lines of code Vulnerability details Impact The exchange rate of the vaults will be decreasing and this will block core functionalities. Proof of Concept The exchange rate of the Vault is calculated as follows: minwithdrawableAssets, totalSupplyToAssets assetUnit / totalSupplyAmount =...
CVE-2023-29457
Reflected XSS attacks, occur when a malicious script is reflected off a web application to the victim's browser. The script can be activated through Action form fields, which can be sent as request to a website with a vulnerability that enables execution of malicious scripts...
New in Spring 6.1: RestClient
Spring Framework 6.1 M2 introduces the RestClient, a new synchronous HTTP client. As the name suggests, RestClient offers the fluent API of WebClient with the infrastructure of RestTemplate. Fourteen years ago, when RestTemplate was introduced in Spring Framework 3.0, we quickly discovered that...
Tenda FH1203 page parameter stack buffer overflow vulnerability
Tenda FH1203 is a dual-band wireless router from China's Tenda, mainly used for home network coverage and enhancement. The Tenda FH1203 suffers from a stack buffer overflow vulnerability that originates from the page parameter of the fromAddressNat method failing to properly validate the length o...
PT-2023-18025 · Google · Android
Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue is related to a confused deputy in the visitUris method of Notification.java, which could lead to local information disclosure across user...
PYSEC-2023-118
RestrictedPython is a tool that helps to define a subset of the Python language which allows users to provide a program input into a trusted environment. RestrictedPython does not check access to stack frames and their attributes. Stack frames are accessible within at least generators and generat...
Exploit for Race Condition in Qualcomm Apq8053_Firmware
Fork My adaptation for the SM-F926U from the original exploit...
Anyone can call Well.sol skim method and transfer excessive tokens to its address.
Lines of code Vulnerability details Impact Excessive tokens balance of Well.sol more than returned from getReserves can be transferred by anyone to his account. Proof of Concept After getting hold token's instances from Well.sol contract tokens we can check the balances of Contract of Each token...
Tenda FH1203 Buffer Error Vulnerability
The Tenda FH1203 is a wireless router from Tenda China. A security vulnerability exists in the Tenda FH1203 version V2.0.1.6, which is caused by a buffer overflow in the page parameter of the fromVirtualSer method...