CVE-2022-38058

creationtimestamp| type| source ---|---|--- 2022-09-09 18:29:24+00:00| seen| https://t.me/cibsecurity/49505...

Price can be manipulated by flashloan

Lines of code Vulnerability details Impact The last observation of the TWAP can be manipulated by a flashloan, which thus manipulates the price. Proof of Concept The price calculated in getPriceLP is based on the last 8 observations. As the last observation may be in the current block it is...

CVE-2022-25308

creationtimestamp| type| source ---|---|--- 2022-09-06 22:13:30+00:00| seen| https://t.me/cibsecurity/49341...

CVE-2022-26468

creationtimestamp| type| source ---|---|--- 2022-09-06 22:13:22+00:00| seen| https://t.me/cibsecurity/49335...

getLastPrice() return wrong price

Lines of code Vulnerability details Impact operate and addObservation both of them use PRICE.getLastPrice but it will return wrong price. So all the updates are just random prices Proof of Concept 1- keeper invoke beat on Heart.sol 2- this operator.operate; to trigger price range update and marke...

CVE-2022-1355

creationtimestamp| type| source ---|---|--- 2022-08-31 20:37:15+00:00| seen| https://t.me/cibsecurity/49122...

CVE-2022-31232

creationtimestamp| type| source ---|---|--- 2022-08-31 00:36:12+00:00| seen| https://t.me/cibsecurity/49079...

CVE-2022-36709

creationtimestamp| type| source ---|---|--- 2022-08-30 07:34:55+00:00| seen| https://t.me/cibsecurity/49023...

CVE-2022-3014

creationtimestamp| type| source ---|---|--- 2022-08-27 12:31:02+00:00| seen| https://t.me/cibsecurity/48934 2025-04-15 13:54:28+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/11808...

CVE-2021-3856

creationtimestamp| type| source ---|---|--- 2022-08-26 20:30:40+00:00| seen| https://t.me/cibsecurity/48901...

CVE-2022-36485

creationtimestamp| type| source ---|---|--- 2022-08-25 18:29:53+00:00| seen| Telegram/6ciV5K2ZxnJ7dJJOAXN4R0X6Tnu5TSkjKc6Zjs8LXI10s...

CVE-2022-35115

creationtimestamp| type| source ---|---|--- 2022-08-23 22:21:48+00:00| seen| https://t.me/cibsecurity/48624...

CVE-2022-36009

creationtimestamp| type| source ---|---|--- 2022-08-20 00:17:49+00:00| seen| https://t.me/cibsecurity/48463...

CVE-2022-22730

creationtimestamp| type| source ---|---|--- 2022-08-19 00:16:53+00:00| seen| https://t.me/cibsecurity/48392...

CVE-2022-37061

creationtimestamp| type| source ---|---|--- 2022-08-18 22:26:40+00:00| seen| https://t.me/cibsecurity/48367 2022-11-01 18:06:49+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/flirax8unauthrcecve202237061.rb 2023-06-27 15:16:19+00:00| seen|...

CVE-2022-36007

creationtimestamp| type| source ---|---|--- 2022-08-15 14:37:55+00:00| seen| https://t.me/cibsecurity/48139 2025-08-22 21:02:31+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3lwze4vmdvk26...

CVE-2022-34661

creationtimestamp| type| source ---|---|--- 2022-08-10 16:25:51+00:00| seen| https://t.me/cibsecurity/47851...

CVE-2022-34702

creationtimestamp| type| source ---|---|--- 2022-08-10 00:31:05+00:00| seen| https://t.me/cibsecurity/47821...

CVE-2022-33203

creationtimestamp| type| source ---|---|--- 2022-08-04 22:20:04+00:00| seen| https://t.me/cibsecurity/47581...

CVE-2022-2579

creationtimestamp| type| source ---|---|--- 2022-07-29 20:13:44+00:00| seen| https://t.me/cibsecurity/47269...