VyperLang Vyper Processing Logic Vulnerability

VyperLang Vyper 0.1.0b10 to 0.2.3 versions have a processing logic error. This bug stems from incorrect code generated by return statements within for loops in internal functions that call other functions at least two levels deep. This results in invalid jump targets stack underflow, causing...

VyperLang Vyper Processing Logic Vulnerability

In versions of Vyper before 0.1.0b17, there were processing logic errors in versions 0.1.0b1 and from 0.4.1 to 0.5.0b1. This issue arose from using str.splitlines to construct a source code line table, where characters such as the page break character and U+2028 were treated as line breaks that...

ATSUMI Electric ADX5004: Processing logic error vulnerability

The ATSUMI Electric ADX5004 has a processing logic vulnerability. This vulnerability stems from a hidden function issue, allowing users with administrator privileges to execute arbitrary operating system commands...

Apache Tomcat processing logic error vulnerability

Versions of Apache Tomcat from 11.0.0-M1 to 11.0.26, from 10.1.0-M1 to 10.1.60, from 9.0.0.M1 to 9.0.122, from 8.5.0 to 8.5.100, and from 7.0.0 to 7.0.109 have a processing logic vulnerability. This vulnerability stems from the “redirect-after-execution EAR” flaw...

ATSUMI Electric ADX5004: Processing logic error vulnerability

The ATSUMI Electric ADX5004 has a processing logic vulnerability, which stems from a hidden function issue. This vulnerability could allow logged-in users with administrative privileges to upgrade affected products to unauthorized firmware...

Bandisoft Bandizip processing logic error vulnerability

Versions of Bandisoft Bandizip prior to 7.47 contain a processing logic vulnerability. This vulnerability arises from the failure to propagate the Mark-of-the-Web to the extracted.ps1 and.psm1 files. As a result, attackers may be able to bypass zone-based execution protection and execute unsigned...

@fastify/middie: Processing logic error vulnerability

The @fastify/middie version from 9.0.0 to 9.3.5 contains a processing logic vulnerability. This vulnerability arises from the use function, which may deviate from the path provided by the Fastify router when concatenating the mount path of the middleware with the plugin scope prefix. As a result,...

tox-dev filelock: Processing logic error vulnerability

The tox-dev filelock version 4.1.0 to 4.2.1 contained a processing logic vulnerability. This vulnerability stemmed from the SoftFileLock component reusing outdated observation results when at least two lock user processes were waiting. An attacker could set and delete their own markers, and use...

Fenrir Sleipnir Mobile for Android: Processing logic error vulnerability

Fenrir Sleipnir Mobile for Android versions prior to 3.9.0 has a processing logic vulnerability. This vulnerability stems from an UI deception issue. A remote attacker can enter full-screen mode through the Fullscreen API without displaying any persistent notifications or indications of trusted...

Thelia processing logic vulnerability

Versions of Thelia prior to 3.1.5 and 3.2.4, as well as 3.2.x versions, have a processing logic vulnerability. This vulnerability arises from the fact that the number of coupon uses is only counted after the order payment is made. Certified customers can circumvent the coupon usage restrictions b...

Dolibarr processing logic error vulnerability

Dolibarr versions 23.0.2 and earlier have a processing logic vulnerability. This vulnerability stems from improper handling of an unknown function in the file htdocs/document.php within the CSP component. As a result, the protection mechanism becomes ineffective, allowing attackers to exploit thi...

Radare2 processing logic error vulnerability

Radare2 versions 6.2.0 and 6.2.2 have a processing logic vulnerability. This vulnerability stems from the operation of the rcorecmdstrpipe function in the libr/core/rtrhttp.inc.c library within the HTTP Sandbox Policy Handler component. This operation causes the protection mechanism to fail,...

Netis EAP930 processing logic error vulnerability

The Netis EAP930 1.250905.115454 version has a processing logic vulnerability. This vulnerability stems from the incorrect handling of the parameter SIGNATURE by the return200 function in the CGI Endpoint component/cgi-bin/debug file. This could potentially lead to the installation of a backdoor...

light0011 CMS processing logic error vulnerability

Light0011 CMS has a processing logic vulnerability. This vulnerability stems from the operation of the parameter X-Requested-With in the file App/Home/Controller/VoteController.class.php within the Vote Handler component. It may lead to logical errors in business operations and can be exploited...

Insufficient Control Flow Management

Overview renovate is a dependency updater. Affected versions of this package are vulnerable to Insufficient Control Flow Management via the branch processing logic in lib/workers/repository/update/branch/index.ts, when a rebase is requested on an open pull request that has pending updates, the...

OpenClaw ClawScan processing logic error vulnerability

OpenClaw ClawScan versions 0.1.6 and earlier have a processing logic vulnerability. This vulnerability stems from improper operation of the shouldSkipTargetPath function in the internal/runner/runner.go file of the Static Scanner component, which may lead to the failure of the protection mechanis...

Siemens RUGGEDCOM CROSSBOW processing logic error vulnerability

Siemens RUGGEDCOM CROSSBOW versions prior to V6.0 have a processing logic vulnerability. This vulnerability stems from the failure to properly execute server-side authorization checks for requests involving special operations. As a result, attackers with extremely low permissions may be able to...

Siemens RUGGEDCOM CROSSBOW processing logic error vulnerability

Siemens RUGGEDCOM CROSSBOW versions prior to V6.0 have a processing logic vulnerability. This vulnerability stems from the failure to properly execute server-side authorization checks for requests that modify the operation status of plans. As a result, authenticated attackers with minimal...

Podman-container-tools: Podman processing logic error vulnerability

The podman-container-tools project has a processing logic error vulnerability in versions of Podman from 4.4.0 to 5.8.8, and from 6.0.0 to 6.1.3. This vulnerability arises because the podman run command treats images with the io.podman.annotations.checkpoint.runtime.name annotation as checkpoints...

Mistral AI Mistral Vibe processing logic error vulnerability

Mistral AI Mistral Vibe versions prior to 2.25.5 have a processing logic vulnerability. This vulnerability stems from differences in the parsing of escaped newline characters by the extractcommands function in bash.py between tree-sitter-bash and bash. As a result, permission verification is...