PT-2024-35739 · Pcl +3 · Pcl +3

Name of the Vulnerable Software and Affected Versions: PCL version 1.14.1 Description: The issue occurs when parsing certain malformed PLY files, causing PCL to crash due to an uncaught std::out of range exception in PCLPointCloud2::at. This could potentially be exploited to cause a...

OSV-2024-1241 Heap-buffer-overflow in polygonToCellsExperimental

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=375220555 Crash type: Heap-buffer-overflow WRITE 8 Crash state: polygonToCellsExperimental fuzzerPolygonToCellsExperimentalNoHoles.c...

MAL-2024-9524 Malicious code in boolean-point-in-polygon (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in boolean-point-in-polygon (npm)

--- -= Per source details. Do not edit below this line.=-...

PT-2024-40601 · Git +1 · H3

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: A heap-buffer-overflow WRITE 8 crash has been reported. The crash occurs in the polygonToCellsExperimental function, as indicated by the fuzzer report fr...

Heap Based Buffer Overflow

Assimp is vulnerable to heap-based buffer overflow. The vulnerability is due to improper handling of crafted Polygon File Format ply files within PlyLoader.cpp, which allows a local attacker to execute arbitrary code...

CVE-2021-34964

Foxit PDF Editor Polygon Annotation Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Editor. User interaction is required to exploit this vulnerability in that the target must visit a...

CVE-2021-34964 Foxit PDF Editor Polygon Annotation Use-After-Free Remote Code Execution Vulnerability

Foxit PDF Editor Polygon Annotation Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Editor. User interaction is required to exploit this vulnerability in that the target must visit a...

Friendzone Launches Social Monetization on Polygon PoS for 5,000+ Waitlisted Users

By Owais Sultan British Virgin Islands, 26 February 2024 - Friendzone, the sustainable and scalable Web3 platform redefining Social Finance SocialFi… This is a post from HackRead.com Read the original post: Friendzone Launches Social Monetization on Polygon PoS for 5,000+ Waitlisted Users...

Powerloom to Hold First Ever Node Mint on Polygon Network

By Owais Sultan Powerloom, the composable data network, has just announced a partnership with Polygon Network. In a first-of-its-kind event on… This is a post from HackRead.com Read the original post: Powerloom to Hold First Ever Node Mint on Polygon Network...

Miscalculation of OLAS Amount Due to Inaccurate LP Token Price in Specific Bonding Mechanism Scenarios

Lines of code Vulnerability details Impact Incorrect valuation of the LP Token price can result in either an excess issuance of OLAS Tokens, causing a loss to the protocol, or a lower issuance of OLAS Tokens, leading to losses for the user. Proof of Concept The prototype of the create function in...

Prime.sol currently miscalculates the duration users have already staked, which breaks multiple core functions.

Lines of code Vulnerability details Summary A wrong assumption is currently being made regarding the time taken to mine a block in all chains where the protocol will be deployed this is cause multiple core functions inappropriately equate block per year to seconds per year. Impact The impact is...

Re-org attack in factory LiquidationPairFactory.sol

Lines of code Vulnerability details Impact Allowing creation of new LiquidationPairs by Re-org attack may adversely affect pricing in LiquidationPair.sol contracts. Proof of Concept The LiquidationPairFactory.solcreatePair function deploys a new LiquidationPair using the create, where the address...

A reorg on the origin chain after a proposal has been validated will result in loss of funds for the protocol

Lines of code Vulnerability details Impact The protocol will lose the funds that the user sent to the origin chain InterchainProposalSender contract for the proposal. Proof of Concept When a proposal gets submitted it gets reviewed by validators on the Axelar network and then receives a validatio...

Many create methods are suspicious of the reorg attack

Lines of code Vulnerability details Proof of Concept There are many instance of this, but to understand things better, taking the example of createTalosV3Strategy method. The createTalosV3Strategy function deploys a new TalosStrategyStaked contract using the create, where the address derivation...

Atomic Wallet Hit by $35M Theft in Recent Crypto Breach

By Habiba Rashid The stolen tokens include popular cryptocurrencies such as Bitcoin BTC, ether ETH, tether USDT, dogecoin DOGE, Litecoin LTC, BNB coin BNB, and polygon MATIC. This is a post from HackRead.com Read the original post: Atomic Wallet Hit by $35M Theft in Recent Crypto Breach...

GLSA-202305-34 : CGAL: Multiple Vulnerabilities

The remote host is affected by the vulnerability described in GLSA-202305-34 CGAL: Multiple Vulnerabilities - A code execution vulnerability exists in the Nef polygon-parsing functionality of CGAL libcgal CGAL-5.1.1. An oob read vulnerability exists in Nef2/PMioparser.h PMioparser::readvertex...

PT-2023-35787 · Git +1 · Libheif

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: A heap-buffer-overflow read issue is identified, potentially causing a crash. The crash occurs in the RegionGeometry Polygon::parse function, which is...

createNewPosition/clonePosition/createClone are suspicious of the reorg attack

Lines of code Vulnerability details Description The createNewPosition function creates a new position smart contract and returns its address. The address is determined by create address derivation, that depends on the contract nonce. Later user could use interact with newly created contract. At t...

SUSE CVE-2014-1508

The libxul.so!gfxContext::Polygon function in Mozilla Firefox before 28.0, Firefox ESR 24.x before 24.4, Thunderbird before 24.4, and SeaMonkey before 2.25 allows remote attackers to obtain sensitive information from process memory, cause a denial of service out-of-bounds read and application...