Deletion on mapping containing a structure

Lines of code Vulnerability details Impact A deletion in a structure containing a mapping will not delete the mapping. The remaining data may be used to compromise the contract. Proof of Concept BasketHandler.sol: 219: delete config.targetAmtsconfig.erc20si; 220: delete...

Following the LNK metadata trail

Adversaries shift toward Shell Link LNK files, likely sparked by Microsofts decision to block macros, provides the opportunity to capitalize on information that can be provided by LNK metadata. Cisco Talos analyzed metadata in LNK files and correlated it with threat actors tactics techniques and...

PT-2023-33595

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v6.0.17 Description The issue is related to a use-after-free UAF bug in the bfq Budget Fair Queueing block layer of the Linux Kernel. This bug affects the bfqq structure in the bfq exit icq bfqq function. The...

The vulnerability of SAP SQL Anywhere relational database management systems lies in the lack of protective measures for SQL query structures, allowing attackers to trigger service failures.

The vulnerability of SAP SQL Anywhere relational database management systems is related to the lack of measures taken to protect SQL query structures. Exploiting this vulnerability allows a malicious actor to cause service interruptions by using specially crafted queries, utilizing the ARRAY arra...

The vulnerability of the “Popup Anything” plugin in the WordPress content management system allows attackers to compromise the privacy and integrity of the protected information.

The vulnerability of the “Popup Anything” plugin in the WordPress content management system exists due to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality and integrity of the protected...

The vulnerability of the WordPress Metaslider plugin stems from the lack of measures taken to protect the structure of the web page. This allows attackers to gain unauthorized access to the protected information.

The vulnerability of the WordPress Metaslider plugin exists due to the lack of measures taken to protect the website structure. Exploiting this vulnerability can allow attackers to gain unauthorized access to protected information...

The vulnerability of the Portainer container management platform arises from the lack of measures taken to protect the website structure, allowing attackers to perform cross-site scripting attacks.

The vulnerability of the Portainer container management platform exists due to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a remote attacker to perform cross-site scripting attacks...

The vulnerability of the Squid caching proxy server, related to improper access control, allows attackers to gain access to confidential information.

The vulnerability of the Squid caching proxy server relates to the inconsistent processing of internal URIs. Exploiting this vulnerability allows a remote attacker to bypass the ACL firewall protection and gain access to information about the cache controller, including records related to the...

How Debian OVAL content is structured

Hello everyone! As we saw in the last episode, the results of vulnerability detection for one host produced by two different APIs can vary greatly. Therefore, in order to find out the truth, it is necessary to understand what vulnerability data is provided by the Linux distribution vendor and how...

The vulnerability of the Fortinet FortiOS operating system arises from the lack of measures taken to protect the website structure. This allows attackers to carry out XSS attacks.

The vulnerability of the Fortinet FortiOS operating system exists due to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to carry out XSS attacks remotely...

CVE-2022-25715

Memory corruption in display driver due to incorrect type casting while accessing the fence structure fields...

Memory corruption

Memory corruption in display driver due to incorrect type casting while accessing the fence structure fields...

CVE-2022-25715 Incorrect type casting in Display driver

Memory corruption in display driver due to incorrect type casting while accessing the fence structure fields...

CVE-2022-25715 Incorrect type casting in Display driver

Memory corruption in display driver due to incorrect type casting while accessing the fence structure fields...

PT-2023-12798 · Unknown · Display Driver

Name of the Vulnerable Software and Affected Versions: Display driver affected versions not specified Description: The issue is related to memory corruption in the display driver, caused by incorrect type casting when accessing fields of the fence structure. Recommendations: At the moment, there ...

CVE-2022-34681

NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel mode layer nvlddmkm.sys handler, where improper input validation of a display-related data structure may lead to denial of service...

Input validation

NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel mode layer nvlddmkm.sys handler, where improper input validation of a display-related data structure may lead to denial of service...

The vulnerability of Adobe Experience Manager’s content and media data management system, which stems from the lack of measures taken to protect the website structure, allows attackers to execute arbitrary code.

The vulnerability of Adobe Experience Manager’s content and media data management system exists due to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially created link...

The vulnerability of Adobe Experience Manager’s content and media data management system, which stems from the lack of measures taken to protect the website structure, allows attackers to execute arbitrary code.

The vulnerability of Adobe Experience Manager’s content and media data management system exists due to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially created link...

The vulnerability of Adobe Experience Manager’s content and media data management system, which stems from the lack of measures taken to protect the website structure, allows attackers to execute arbitrary code.

The vulnerability of Adobe Experience Manager’s content and media data management system exists due to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially created link...