changing LOAN_TERM changes terms for existing loans

Lines of code Vulnerability details Impact If the protocol updates the loan terms, this will affect existing loans taken under different terms. Proof of Concept LOANTERM is a guarantee for the lender liquidity provider to eventually get their liquidity back. After loan term has passed the lender...

CVE-2022-29063

creationtimestamp| type| source ---|---|--- 2023-12-20 15:45:48+00:00| published-proof-of-concept| https://t.me/arpsyndicate/2050...

Lack of input validation for ClosePositionParams.amountSwap results in theft of fund (premium + protocol fee))

Lines of code Vulnerability details Impact Lack of input validation for ClosePositionParams.amountSwap results in theft of fund Proof of Concept ParticlePositionManager.sol hold two part of fund 1. the contract hold premium added by borrower 2. the contract hold protocol fee before protocol...

CVE-2022-0320

creationtimestamp| type| source ---|---|--- 2023-12-18 10:58:01+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/9608 2024-08-16 08:57:34+00:00| published-proof-of-concept| https://t.me/Rootsec2/2289...

PT-2023-31620 · Unknown · Yii2-Authclient

Name of the Vulnerable Software and Affected Versions: yii2-authclient versions prior to 2.2.15 Description: The Oauth2 PKCE implementation in yii2-authclient is vulnerable in two ways. First, the authCodeVerifier should be removed after usage, similar to authState. Second, there is a risk for a...

CVE-2023-46998

creationtimestamp| type| source ---|---|--- 2023-12-17 12:43:01+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/9604 2024-08-16 08:57:34+00:00| published-proof-of-concept| https://t.me/Rootsec2/2285...

osCommerce 4.13-60075 Shell Upload

Title: osCommerce 4.13-60075 File-Upload-RCE Author: nu11secur1ty Date: 12/14/2023 Vendor: https://www.oscommerce.com/ Software: https://www.oscommerce.com/download-file Reference: https://portswigger.net/web-security/file-upload Description: The parameter "icon-pencil" in the upload-file...

PDF24 Creator 11.15.1 Local Privilege Escalation

SEC Consult Vulnerability Lab Security Advisory ======================================================================= title: Local Privilege Escalation via MSI installer product: PDF24 Creator geek Software GmbH vulnerable version: =11.15.1 fixed version: 11.15.2 CVE number: CVE-2023-49147...

PT-2023-9122 · Qnap · Qts +1

Name of the Vulnerable Software and Affected Versions: QTS versions prior to 5.1.7.2770 build 20240520 QuTS hero versions prior to h5.1.7.2770 build 20240520 Description: The issue is related to a buffer copy without checking the size of the input, which can lead to a stack overflow. This allows...

CVE-2023-33044

creationtimestamp| type| source ---|---|--- 2023-12-11 18:30:06+00:00| published-proof-of-concept| https://t.me/truesecator/5188...

Exploit for Improper Access Control in Joomla Joomla\!

CVE-2023-23752 Joomla! v4.2.8 - Unauthenticated Information Di...

CVE-2023-33042

creationtimestamp| type| source ---|---|--- 2023-12-11 07:00:48+00:00| seen| https://t.me/CyberSachok/1594 2023-12-11 18:30:06+00:00| published-proof-of-concept| https://t.me/truesecator/5188...

CVE-2023-50245

creationtimestamp| type| source ---|---|--- 2023-12-10 17:02:05+00:00| published-proof-of-concept| https://github.com/afichet/openexr-viewer/security/advisories/GHSA-99jg-r3f4-rpxj...

test

Lines of code L14 Vulnerability details Impact Detailed description of the impact of this finding. Proof of Concept Provide direct links to all referenced code in GitHub. Add screenshots, logs, or any other relevant proof that illustrates the concept. Tools Used Recommended Mitigation Steps lemme...

plsss

Lines of code L12 Vulnerability details Impact Detailed description of the impact of this finding. Proof of Concept Provide direct links to all referenced code in GitHub. Add screenshots, logs, or any other relevant proof that illustrates the concept. Tools Used Recommended Mitigation Steps...

Exploit for CVE-2022-21907

CVE-2022-21907 Vulnerability in HTTP Protocol Stack Enabling R...

PortSwigger Web Security: A user with only [MODIFY_SETTINGS] permmision could takeover any user accounts

The vulnerability allowed a user with only the "MODIFYSETTINGS" permission to take over any user accounts. By configuring the email settings to use a public SMTP server, the attacker could capture the email and password reset link whenever an administrator or user with permissions to edit or add...

CVE-2023-49800

creationtimestamp| type| source ---|---|--- 2023-12-08 23:22:29+00:00| published-proof-of-concept| https://github.com/johannschopplich/nuxt-api-party/security/advisories/GHSA-q6hx-3m4p-749h...

CVE-2023-49799

creationtimestamp| type| source ---|---|--- 2023-12-08 23:22:20+00:00| published-proof-of-concept| https://github.com/johannschopplich/nuxt-api-party/security/advisories/GHSA-3wfp-253j-5jxv...

Invalid WETH inclusion for Curve's Tricrypto pools.

Lines of code Vulnerability details Impact For some of Curve's Tricrypto pools, CurveTricryptoAdapter will not be working. Proof of Concept address wethAddress = ICurveTricryptoprimitive.coins2; zToken = calculateOceanIdaddress0x4574686572, 0; // hexadecimalascii"Ether" indexOfzToken = 2;...