AN ATTACKER CAN CREATE A SHORT PUT OPTION ORDER ON AN NFT THAT DOES NOT SUPPORT ERC721 (LIKE CRYPTOPUNK), AND THE USER CAN FULFILL THE ORDER, BUT CANNOT EXERCISE THE OPTION

Lines of code Vulnerability details Impact Blur is kind of NFT marketplace where will somehow attracts high value NFT items like cryptopunk. Therefore assuming the platform will handle cryptopunk NFT is a common thing, and this raise an issue. An attacker can create a short put option on...

PT-2022-7257 · Libde265 +3 · Libde265 +3

Name of the Vulnerable Software and Affected Versions: Libde265 version 1.0.8 Description: The issue is related to a stack-buffer-overflow vulnerability via the put qpel fallback function in fallback-motion.cc, which can be exploited by attackers to cause a Denial of Service DoS using a crafted...

PT-2025-53120

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak exists in the multi transaction new function within the AppArmor subsystem. Specifically, the variable t is not freed or passed out if copy from user fails, leading to a...

PT-2022-37758

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=51689 Crash type: Stack-use-after-scope READ Crash state: RefCopyBytes dng stream::Put tag data ptr::Put...

Design/Logic Flaw

A vulnerability in Suprema BioStar aka Bio Star 2 v2.8.16 allows attackers to escalate privileges to System Administrator via a crafted PUT request to the update profile page...

CVE-2022-38351

A vulnerability in Suprema BioStar aka Bio Star 2 v2.8.16 allows attackers to escalate privileges to System Administrator via a crafted PUT request to the update profile page...

CVE-2022-38351

Summary: CVE-2022-38351 affects Suprema BioStar 2 (Bio Star) 2.x, specifically v2.8.16, enabling privilege escalation to System Administrator via a crafted PUT request to the update profile page. What is affected: Suprema BioStar 2, version 2.8.16 (BioStar 2). The vulnerability exists in the API ...

CVE-2022-38351: Improper Privilege Management

A vulnerability in Suprema BioStar aka Bio Star 2 v2.8.16 allows attackers to escalate privileges to System Administrator via a crafted PUT request to the update profile page...

curl: CVE-2022-32221: POST following PUT confusion

Summary: The bug I submitted at https://github.com/curl/curl/issues/9507 can have at least a few unintended security issues: - Information Disclosure: this bug causes an HTTP PUT to occur when the user intends for an HTTP POST to occur. The user, who intended an HTTP POST, expects the POSTed...

PT-2022-34212 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.4.211 Description: The issue is related to a missing of node put in octeon2 usb clocks start, which may potentially lead to security vulnerabilities. However, the actual impact and attack plausibility have no...

PT-2022-33916 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.61 Description: A boundary check issue in the put entry function has been identified. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions prior to...

PT-2022-34302 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.4.211 Description: The issue is related to a missing platform device put in the hisi lpc acpi probe function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux...

PT-2022-34025

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.138 Description The issue is related to a missing of node put in octeon2 usb clocks start, which may potentially lead to security vulnerabilities. However, the actual impact and attack plausibility have not...

PT-2022-34519

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.14.291 Description A boundary check issue exists in the put entry function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior to v4.14.291,...

PT-2022-33906

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.61 Description The issue is related to a missing platform device put in the hisi lpc acpi probe function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...

PT-2022-34356

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.19.256 Description The issue is related to a missing of node put in octeon2 usb clocks start, which may potentially lead to security vulnerabilities. The actual impact and attack plausibility have not yet been...

PT-2022-34147

Name of the Vulnerable Software and Affected Versions Linux Kernel versions 4.18 through 5.10.136 Description The issue is related to a missing platform device put in the hisi lpc acpi probe function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux...

PT-2022-34466

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.14.291 Description The issue is related to a missing of node put in octeon2 usb clocks start, which may potentially lead to security vulnerabilities. However, the actual impact and attack plausibility have not...

PT-2022-34551

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.9.326 Description The issue is related to a missing of node put in octeon2 usb clocks start, which may potentially lead to security vulnerabilities. However, the actual impact and attack plausibility have not...

PT-2022-6645

Name of the Vulnerable Software and Affected Versions Linux Kernel affected versions not specified Description A use after free flaw was found in the hfsplus put super function in the Linux Kernel. This issue could allow a local user to cause a denial of service problem. The flaw is related to th...