2764 matches found
_doMultipleInteractions - User can use more wrapped tokens than they own
Lines of code Vulnerability details Impact User can use more wrapped tokens than they own. Proof of Concept When wrapped tokens are used by an Adaptor or Primitive through computeOutputAmount, it does not check if the user has enough tokens. Therefore, when calling computeOutputAmount, you need t...
Microsoft Incident Response lessons on preventing cloud identity compromise
Microsoft observed a surge in cyberattacks targeting identities in 2023, with attempted password-based attacks increasing by more than tenfold in the first quarter of 2023 compared to the same period in 2022. Threat actors leverage compromised identities to achieve a significant level of access t...
Okta's Recent Customer Support Data Breach Impacted 134 Customers
Identity and authentication management provider Okta on Friday disclosed that the recent support case management system breach affected 134 of its 18,400 customers. It further noted that the unauthorized intruder gained access to its systems from September 28 to October 17, 2023, and ultimately...
Information disclosure
An information leak in Tokudaya.ekimaemc v13.6.1 allows attackers to obtain the channel access token and send crafted messages...
Design/Logic Flaw
An information leak in VISION MEAT WORKS Track Diner 10/10mbl v13.6.1 allows attackers to obtain the channel access token and send crafted messages...
CVE-2023-39054
An information leak in Tokudaya.ekimaemc v13.6.1 allows attackers to obtain the channel access token and send crafted messages...
Line Security Breach
Line is an instant messaging platform from Line Inc. Line suffers from a security vulnerability that originates from a vulnerability in VISION MEAT WORKS Track Diner 10/10mbl. An attacker could exploit the vulnerability to obtain a channel access token to send a crafted message...
CVE-2023-39048
An information leak in Tokudaya.honten v13.6.1 allows attackers to obtain the channel access token and send crafted messages...
StakedUSDe contract allows attackers to steal staked USDe tokens of soft-restricted users
Lines of code Vulnerability details Description The modifier called checkMinShares that is used to ensure that there is always a small non-zero amount of shares in circulation. This is to prevent a donation attack, where an attacker donates a small amount of USDe tokens to the contract and then...
CVE-2023-39734
The leakage of the client secret in VISION MEAT WORKS TrackDiner10/10mc Line v13.6.1 allows attackers to obtain the channel access token and send crafted broadcast messages...
CVE-2023-39739
The leakage of the client secret in REGINA SWEETS&BAKERY Line 13.6.1 allows attackers to obtain the channel access token and send crafted broadcast messages...
CVE-2023-39732
The leakage of the client secret in Tokueimaruwaiting Line 13.6.1 allows attackers to obtain the channel access token and send crafted broadcast messages...
CVE-2023-39740
The leakage of the client secret in Onigiriya-musubee Line 13.6.1 allows attackers to obtain the channel access token and send crafted broadcast messages...
CVE-2023-39735
The leakage of the client secret in UomasaSaijinews Line 13.6.1 allows attackers to obtain the channel access token and send crafted broadcast messages...
CVE-2023-39733
The leakage of the client secret in TonTon-Tei Line v13.6.1 allows attackers to obtain the channel access token and send crafted broadcast messages...
CVE-2023-39733
The leakage of the client secret in TonTon-Tei Line v13.6.1 allows attackers to obtain the channel access token and send crafted broadcast messages...
Line Security Breach
Line is an instant messaging platform from Line Inc. Line suffers from a security vulnerability that stems from an information disclosure issue that allows an attacker to obtain a channel access token and send a carefully crafted broadcast message...
Line Security Breach
Line is an instant messaging platform from Line Inc. Line suffers from a security vulnerability that stems from an information disclosure issue that allows an attacker to obtain a channel access token and send a carefully crafted broadcast message...
Jenkins Plugin Multibranch Scan Webhook Trigger Security Vulnerability
Jenkins and Jenkins Plugin are both Jenkins open source products.Jenkins is a software application . An open source automation server Jenkins provides hundreds of plugins to support building, deploying and automating any project.Jenkins Plugin is a software application. A security vulnerability...