Rust rocket crate 竞争条件问题漏洞

Rust is a general-purpose, compiled programming language from the Mozilla Foundation. A contention condition issue vulnerability exists in rocket crate in versions of Mozilla Rust prior to 0.4.5, which stems from LocalRequest::clone creating multiple mutable references to the same object, which c...

How Tesla and HyperLoop accelerations help people with rocket flights

We don’t need that crazy acceleration for Tesla cars and Hyperloop for daily life in a few words. It’s a lot of fun, for sure, and some marketing feature that puts electric cars in supercars bucket. At the same time, that crazy acceleration train people to take overloads. In my personal experienc...

VulnCheck KEV: CVE-2014-3914

Directory traversal vulnerability in the Admin Center for Tivoli Storage Manager TSM in Rocket ServerGraph 1.2 allows remote attackers to 1 create arbitrary files via a .. dot dot in the query parameter in a writeDataFile action to the fileRequestor servlet, execute arbitrary files via a .. dot d...

DLL Hijacking Vulnerability in Rocket Accelerator of Hubei Shengtian Network Technology Co.

Rocket Accelerator is an online game gas pedal. Rocket Accelerator by Hubei Shengtian Network Technology Co. Ltd. has a DLL hijacking vulnerability that can be exploited by an attacker to gain server control privileges...

WordPress Social Rocket Plugin < 1.2.10 CSRF Vulnerability

The WordPress plugin Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can redistribute it and/or modify it...

WordPress Social Rocket plugin <= 1.2.9 - Cross-Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability discovered by Akio Furui in WordPress Social Rocket plugin versions = 1.2.9. Solution Update the WordPress Social Rocket plugin to the latest available version 1.2.10...

`LocalRequest::clone` creates multiple mutable references to the same object

The affected version of rocket contains a Clone trait implementation of LocalRequest that reuses the pointer to inner Request object. This causes data race in rare combinations of APIs if the original and the cloned objects are modified at the same time...

RUSTSEC-2020-0028 `LocalRequest::clone` creates multiple mutable references to the same object

The affected version of rocket contains a Clone trait implementation of LocalRequest that reuses the pointer to inner Request object. This causes data race in rare combinations of APIs if the original and the cloned objects are modified at the same time...

Rocket Coin Digital Error Vulnerability

Rocket Coin XRC is an Ether-based digital currency.An integer overflow vulnerability exists in the 'multiTransfer' function in XRC. An attacker can use this vulnerability to set the balance of any user...

rocket-backlinks.com Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1146748 Security Researcher geeknik Helped patch 8815 vulnerabilities Received 8 Coordinated Disclosure badges Received 20 recommendations , a holder of 8 badges for responsible and coordinated disclosure, found a security vulnerability affecting rocket-backlinks.com websi...

Lock and Code S1Ep2: On the challenges of managed service providers

This week on Lock and Code, we discuss the top security headlines generated right here on Labs and around the Internet. In addition, we talk to two representatives from an Atlanta-based managed service provider—a manager of engineering services and a data center architect—about the daily challeng...

Israel Neutralizes Cyber Attack by Blowing Up A Building With Hackers

The Israel Defense Force IDF claims to have neutralized an "attempted" cyber attack by launching airstrikes on a building in Gaza Strip from where it says the attack was originated. As shown in a video tweeted by IDF, the building in the Gaza Strip, which Israeli fighter drones have now destroyed...

Rocket.Chat Cross-Site Scripting Vulnerability

Rocket.Chat is an open source built in JavaScript using the Meteor fullstack framework developed by the Web chat server . A cross-site scripting vulnerability exists in the registration form of Rocket.Chat versions prior to 0.66. A remote attacker can exploit this vulnerability to inject arbitrar...

Rocket.Chat Cross-Site Scripting Vulnerability

Rocket.Chat is an open source built in JavaScript using the Meteor fullstack framework developed by the Web chat server . A cross-site scripting vulnerability exists in the packages/rocketchat-mentions/Mentions.js file in versions of Rocket.Chat prior to 0.65, which stems from the program's failu...

CVE-2018-13836

An integer overflow vulnerability exists in the function multiTransfer of Rocket Coin XRC, an Ethereum token smart contract. An attacker could use it to set any user's balance...

Integer overflow

An integer overflow vulnerability exists in the function multiTransfer of Rocket Coin XRC, an Ethereum token smart contract. An attacker could use it to set any user's balance...

CVE-2018-13836

CVE-2018-13836 affects Rocket Coin (XRC), a Ethereum token smart contract. The issue is an integer overflow in the multiTransfer function, which could allow an attacker to set any user’s balance (as per NVD/NVD-derived records). The reports do not provide exploit details or in-wild activity. A re...

CVE-2018-13836: Integer Overflow or Wraparound

An integer overflow vulnerability exists in the function multiTransfer of Rocket Coin XRC, an Ethereum token smart contract. An attacker could use it to set any user's balance...

Rocket.Chat Server SQL Injection Vulnerability

Rocket.Chat Server is a Web-based open source online chat platform. A security vulnerability exists in Rocket.Chat Server 0.59 and earlier versions. An attacker can exploit the vulnerability to take control of the administrator account...

members.rocketlanguages.com XSS vulnerability

Open Bug Bounty ID: OBB-439933 Description| Value ---|--- Affected Website:| members.rocketlanguages.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS...