smartfarming.nl Cross Site Scripting vulnerability OBB-3156993

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Deny of service in CCash.sol with "transfer" which can be unusable for smart contract calls

Lines of code Vulnerability details Impact The CCash.doTransferOut method is susceptible to denial of service. Proof of Concept The logic of the doTransferOut method in CCash is as follows: The whole user withdraw is being handled with a token.transfer call. This is unsafe as transfer has hard...

Possiblity of storage collision

Lines of code Vulnerability details Impact There is a possibility of storage collision, when you upgrade the implementation contract in the . This could happen because the storage in the smart contract is stored the storage value from the left to the right, and if you add a new var to the storage...

Use reentrancyGuard for safeTransferFrom

Lines of code Vulnerability details Impact A reentrancy guard is a mechanism used to prevent reentrant calls in smart contracts, which can be a security vulnerability. Reentrancy can happen when a malicious contract calls the "safeTransferFrom" function and then calls it again before the first ca...

Weak Password Vulnerability in SenseNebula-M, an Intelligent Edge Node of Shanghai Shangtang Intelligent Technology Co.

Shanghai Shangtang Intelligent Technology Co., Ltd. is an artificial intelligence software company. A weak password vulnerability exists in SenseNebula-M, an intelligent edge node of Shanghai Shangtang Intelligent Technology Co. that can be exploited by attackers to obtain sensitive information...

CVE-2023-21759

Windows Smart Card Resource Management Server Security Feature Bypass Vulnerability...

CVE-2023-21759

Windows Smart Card Resource Management Server Security Feature Bypass Vulnerability...

CVE-2023-21759

Windows Smart Card Resource Management Server Security Feature Bypass Vulnerability...

Security feature bypass

Windows Smart Card Resource Management Server Security Feature Bypass Vulnerability...

Windows Smart Card Resource Management Server Security Feature Bypass Vulnerability

...

CVE-2023-0023

In SAP Bank Account Management Manage Banks application, when a user clicks a smart link to navigate to another app, personal data is shown directly in the URL. They might get captured in log files, bookmarks, and so on disclosing sensitive data of the application...

CVE-2023-0023

Technical details (affected software, exact versions, root cause, exploit specifics) are not publicly available in the provided connected documents. Monitor SAP notes and related advisories for updates.

PT-2023-1080 · Microsoft · Windows Smart Card Resource Management Server +1

Name of the Vulnerable Software and Affected Versions: Windows Smart Card Resource Management Server affected versions not specified Description: The issue is related to errors in security settings, allowing an attacker to bypass security restrictions and elevate their privileges. It is a...

CVE-2023-21759 Windows Smart Card Resource Management Server Security Feature Bypass Vulnerability

...

Microsoft Windows Smart Card Resource Management Server 安全漏洞

Microsoft Windows is a suite of operating systems used by Microsoft Corporation USA for personal devices. A security vulnerability exists in Microsoft Windows Smart Card Resource Management Server, which stems from a security feature bypass vulnerability...

CVE-2023-21759 Windows Smart Card Resource Management Server Security Feature Bypass Vulnerability

...

CVE-2023-21759

CVE-2023-21759 is a Windows Smart Card Resource Management Server security feature bypass (local, low risk, CVSS 3.1 base 3.3). Connected sources confirm this CVE exists and has been cataloged by NVD and MSRC. Microsoft KBs linked to this CVE are KB5022303 (OS 22621.1105) and related January 2023...

Relayers can steal extra fees from smart contract wallets on every transaction

Lines of code Vulnerability details Impact Relayers can take signed transactions and append zeroes to the signature parameter to artificially increase the gas cost and startGas estimation. This causes additional cost for the signer and increases the relayers reimbursement. The cost/reimbursement...

Citrix ADC: 13.1: error message for smart card access to gateway

Citrix ADC: 13.1: error message for smart card access to the gateway...

An attacker can create a smart contract wallet with a malicious config and the address that the user expects his smart contract to have

Lines of code Vulnerability details Issue A deployCounterFactualWallet function in the SmartAccountFactory.sol uses create2 command to deploy a smart contract wallet with the address that can be computed before a transaction. A problem with the function is that it doesn't include the config...