18567 matches found
CVE-2023-24389
Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in brandiD Social Proof Testimonial Slider plugin = 2.2.3 versions...
CVE-2023-46196
Missing Authorization vulnerability in Repuso Social proof testimonials and reviews by Repuso social-testimonials-and-reviews-widget allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Social proof testimonials and reviews by Repuso: from n/a through = 4.97...
GHSA-C72G-53HW-82Q7
creationtimestamp| type| source ---|---|--- 2025-05-22 22:50:46+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/17362...
CVE-2025-48371
creationtimestamp| type| source ---|---|--- 2025-05-22 22:50:46+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/17362...
CVE-2022-29566
The Bulletproofs 2017/1066 paper mishandles Fiat-Shamir generation because the hash computation fails to include all of the public values from the Zero Knowledge proof statement as well as all of the public values computed in the proof, aka the Frozen Heart issue...
CVE-2022-1211
A vulnerability classified as critical has been found in tildearrow Furnace dev73. This affects the FUR to VGM converter in console mode which causes stack-based overflows and crashes. It is possible to initiate the attack remotely but it requires user-interaction. A POC has been disclosed to the...
CVE-2022-36111
immudb is a database with built-in cryptographic proof and verification. In versions prior to 1.4.1, a malicious immudb server can provide a falsified proof that will be accepted by the client SDK signing a falsified transaction replacing the genuine one. This situation can not be triggered by a...
CVE-2022-47930
An issue was discovered in IO FinNet tss-lib before 2.0.0. The parameter ssid for defining a session id is not used through the MPC implementation, which makes replaying and spoofing of messages easier. In particular, the Schnorr proof of knowledge implemented in sch.go does not utilize a session...
GHSA-6C48-67XX-VQGC
creationtimestamp| type| source ---|---|--- 2025-05-22 21:38:31+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/17361...
CVE-2021-38194
An issue was discovered in the ark-r1cs-std crate before 0.3.1 for Rust. It does not enforce any constraints in the FieldVar::mulbyinverse method. Thus, a prover can produce a proof that is unsound but is nonetheless verified...
CVE-2021-42766
The Proof-of-Stake PoS Ethereum consensus protocol through 2021-10-19 allows an adversary to cause a denial of service long-range consensus chain reorganizations, even when this adversary has little stake and cannot influence network message propagation. This can cause a protocol stall, or an...
CVE-2021-42764
The Proof-of-Stake PoS Ethereum consensus protocol through 2021-10-19 allows an adversary to cause a denial of service delayed consensus decisions, and also increase the profits of individual validators, via short-range reorganizations of the underlying consensus chain...
CVE-2021-42080
An attacker is able to launch a Reflected XSS attack using a crafted URL. POC: Visit the following URL https://:8153/qstorapi/echo?inputMessage=...
Improper Validation of Array Index
Overview Affected versions of this package are vulnerable to Improper Validation of Array Index through the fiber.Ctx.BodyParser method that panics when trying to parse a negative range index. An attacker can cause the server to crash by sending a specially crafted payload with a negative index f...
CVE-2024-40460
creationtimestamp| type| source ---|---|--- 2025-05-22 19:46:19+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/17359...
CVE-2024-40459
creationtimestamp| type| source ---|---|--- 2025-05-22 19:46:18+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/17358...
CVE-2024-40458
creationtimestamp| type| source ---|---|--- 2025-05-22 19:46:17+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/17357...
CVE-2022-35246
creationtimestamp| type| source ---|---|--- 2025-05-22 19:45:45+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/17341...