PT-2026-66662

Uint::overflowing shl/overflowing shr returned false-negative overflow flags. overflowing shl missed bits shifted above BITS but within the top limb non-limb-aligned widths such as U160, and limbs wholly discarded by shifts = 64; overflowing shr missed wholly discarded low limbs. Shifted values...

shr-schwirz.de Cross Site Scripting vulnerability OBB-3914712

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2021-41272 SHL, SHR, and SAR operations trigger native exception at key values in besu

Besu is an Ethereum client written in Java. Starting in version 21.10.0, changes in the implementation of the SHL, SHR, and SAR operations resulted in the introduction of a signed type coercion error in values that represent negative values for 32 bit signed integers. Smart contracts that ask for...

CVE-2021-41272

Besu is an Ethereum client written in Java. Starting in version 21.10.0, changes in the implementation of the SHL, SHR, and SAR operations resulted in the introduction of a signed type coercion error in values that represent negative values for 32 bit signed integers. Smart contracts that ask for...

PT-2021-23232

Name of the Vulnerable Software and Affected Versions Besu versions 21.10.0 through 21.10.1 Description The issue is related to a signed type coercion error in the implementation of the SHL, SHR, and SAR operations in Besu, an Ethereum client written in Java. This error occurs when smart contract...

CVE-2021-41272: Incorrect Conversion between Numeric Types

Besu is an Ethereum client written in Java. Starting in version 21.10.0, changes in the implementation of the SHL, SHR, and SAR operations resulted in the introduction of a signed type coercion error in values that represent negative values for 32 bit signed integers. Smart contracts that ask for...

CVE-2019-0298

SAP E-Commerce Business-to-Consumer application does not sufficiently encode user-controlled inputs, resulting in Cross-Site Scripting XSS vulnerability. Fixed in the following components SAP-CRMJAV SAP-CRMWEB SAP-SHRWEB SAP-SHRJAV SAP-CRMAPP SAP-SHRAPP, versions 7.30, 7.31, 7.32, 7.33, 7.54...

UBUNTU-CVE-2018-8882

Netwide Assembler NASM 2.13.02rc2 has a stack-based buffer under-read in the function ieeeshr in asm/float.c via a large shift value...

CVE-2018-8882

Netwide Assembler NASM 2.13.02rc2 has a stack-based buffer under-read in the function ieeeshr in asm/float.c via a large shift value...

DEBIAN-CVE-2018-8882

Netwide Assembler NASM 2.13.02rc2 has a stack-based buffer under-read in the function ieeeshr in asm/float.c via a large shift value...

PT-2018-18688

Name of the Vulnerable Software and Affected Versions Netwide Assembler NASM version 2.13.02rc2 Description The issue is related to a stack-based buffer under-read in the ieee shr function, located in asm/float.c, which occurs when a large shift value is provided. Recommendations For version...

CVE-2013-3964

Cross-site scripting XSS vulnerability in Samsung SHR-5162, SHR-5082, and possibly other models, allows remote attackers to inject arbitrary web script or HTML via the PATHINFO...

CVE-2013-3964

Cross-site scripting XSS vulnerability in Samsung SHR-5162, SHR-5082, and possibly other models, allows remote attackers to inject arbitrary web script or HTML via the PATHINFO...

CVE-2013-3964

CVE-2013-3964 is a reported XSS vulnerability in Samsung SHR-5162 and SHR-5082 (and possibly other SHR models) where an attacker can inject arbitrary web script or HTML via the PATH_INFO. Evidence in multiple sources confirms the issue and affected product family, with the NVD noting a MEDIUM sev...

PT-2013-4764

Name of the Vulnerable Software and Affected Versions Samsung SHR-5162 Samsung SHR-5082 Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via the PATH INFO. This could potentially lead to unauthorized access or control of the affected...

CVE-2013-3964: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in Samsung SHR-5162, SHR-5082, and possibly other models, allows remote attackers to inject arbitrary web script or HTML via the PATHINFO...

Samsung Series Cross Site Scripting

=========================================================================== SAMSUNG ==================================================================== =========================================================================== 1.Advisory Information Title: Samsung Series Vulnerability Date...

Samsung DVR SHR-2040 HTTPD拒绝服务漏洞

BUGTRAQ ID: 31047 CNCAN ID：CNCAN-2008090908 Samsung DVR SHR-2040是一款用于对TV广播，有线电视等传送进行记录的mini-PC。 Samsung DVR SHR-2040 WEB接口不正确处理HTTP请求，远程攻击者可以利用漏洞对设备进行拒绝服务攻击。 用于配置的CGIS文件过滤器存在未明错误，发送特殊构建的HTTP请求可导致应用程序崩溃。 Samsung SHR-2040 目前没有解决方案提供： http://www.samsung.com/ !/usr/bin/perl -w Samsung DVR SHR2040 HTT...