Upgraded Q -> 2 from #633 [1677880427560]

Judge has assessed an item in Issue 633 as 2 risk. The relevant finding follows: Vault contract implementation does not disable initializers The Vault.sol contract should implement disableInitializers in its constructure to prevent implementation contracts from being initialized. As this contract...

Popcorn 1.87 - Remote Heap Overflow (PoC)

!/usr/bin/python xProduct download : http://www.ultrafunk.com/products/popcorn/ +Founder : x.CJP.x +Greeting : His0k4,Sub-Zero,Bibi-info,Aach2006,Youness,Simitch,Halimz,Bibicha.. := -Seni seviyorum, base64decode'TW91bmE='; from socket import import struct buffer="\x41"6000 just random s =...

CVE-2002-1043

CVE-2002-1043 affects Ultrafunk Popcorn 1.20. The vulnerability is a denial-of-service triggered by a malformed Subject ("\t\t"), allowing remote attackers to crash the application. The available documents do not provide exploit code, implicated vectors beyond remote trigger, or concrete mitigati...