Virtuozzo Hybrid Server 7.5 Update 3 Hotfix 1 (7.5.3-396)

The Hotfix 1 for Virtuozzo Hybrid Server 7.5 Update 3 provides stability and usability bug fixes Vulnerability id: PSBM-139281 Optimized cache and memory usage while creating backups. Vulnerability id: PSBM-139170 The container backup process could hang when working with NFS backup storage...

Huawei HarmonyOS 授权问题漏洞

Huawei HarmonyOS is an operating system from Huawei, a Chinese company. Huawei HarmonyOS is vulnerable to licensing issues. Successful exploitation of this vulnerability could result in a usability impact. An attacker could use this vulnerability to bypass Web authentication and gain administrati...

Huawei Smartphone Out-of-Bounds Reading Vulnerability

Huawei Smartphone is a cell phone product launched by Huawei. Huawei Smartphone is an out-of-bounds read vulnerability in Huawei HarmonyOS, a full-scenario distributed operating system for the Internet of Everything. The vulnerability stems from an out-of-bounds read vulnerability in a module in...

WordPress miniOrange's Google Authenticator plugin cross-site request forgery vulnerability

WordPress is a blogging platform developed by the Wordpress Foundation using the PHP language. WordPress plugin is a WordPress application plugin. WordPress miniOrange's Google Authenticator plugin version 5.5 or earlier is vulnerable to a cross-site request forgery vulnerability that stems from...

Renouncepauser function is dangerous

Lines of code Vulnerability details Impact If pauser makes an error all the protocol will be unusable Proof of Concept The funtion renouncePauserPausable.sol which affect several contracts is dangerous. function renouncePauser external virtual onlyPauser emit PauserChangedpauser, address0; pauser...

Huawei Emui and Magic UI video framework heap buffer overflow vulnerability

Huawei Emui is a mobile operating system developed on Android. magic Ui is a mobile operating system developed on Android. heap buffer overflow vulnerability exists in Huawei Emui and Magic UI video framework, which can be exploited by attackers to impact usability...

Huawei Emui and Magic UI video framework stack buffer overflow vulnerability

Huawei Emui is a mobile operating system developed on Android. Magic Ui is a mobile operating system developed on Android. Huawei Emui and Magic UI video framework are vulnerable to a stack buffer overflow vulnerability that can be exploited by attackers to impact usability...

Huawei Emui and Magic UI video framework heap buffer overflow vulnerability (CNVD-2022-20288)

Huawei Emui is a mobile operating system developed on Android. magic Ui is a mobile operating system developed on Android. heap buffer overflow vulnerability exists in Huawei Emui and Magic UI video framework, which can be exploited by attackers to impact usability...

Huawei Emui and Magic UI Incorrect Buffer Size Calculation Vulnerability (CNVD-2022-20292)

Huawei Emui is a mobile operating system developed on Android. Magic Ui is a mobile operating system developed on Android. Huawei Emui and Magic UI are vulnerable to incorrect buffer size calculation, which can be exploited by attackers to impact usability...

Huawei Emui and Magic UI incorrect buffer size calculation vulnerability

Huawei Emui is a mobile operating system developed on Android. Magic Ui is a mobile operating system developed on Android. Huawei Emui and Magic UI are vulnerable to incorrect buffer size calculation, which can be exploited by attackers to impact usability...

HUAWEI EMUI 缓冲区错误漏洞

Huawei Emui is a mobile operating system developed on Android. magic Ui is a mobile operating system developed on Android. heap buffer overflow vulnerability exists in Huawei Emui and Magic UI video framework, which can be exploited by attackers to impact usability...

HUAWEI EMUI 安全漏洞

Huawei Emui is a mobile operating system developed on Android. Magic Ui is a mobile operating system developed on Android. Huawei Emui and Magic UI are vulnerable to incorrect buffer size calculation, which can be exploited by attackers to impact usability...

HUAWEI EMUI/Magic UI 安全漏洞

Huawei Emui is a mobile operating system developed on Android. Magic Ui is a mobile operating system developed on Android. Huawei Emui and Magic UI are vulnerable to incorrect buffer size calculation, which can be exploited by attackers to impact usability...

Virtuozzo Hybrid Server 7.5 Update 3 (7.5.3-391)

Virtuozzo Hybrid Server 7.5 Update 3 introduces new features and provides stability and usability bug fixes. It also introduces a new kernel 3.10.0-1160.53.1.vz7.185.3. Vulnerability id: PSBM-133274 Node could crash due to an nfsd issue. Vulnerability id: PSBM-136335 Fixes for the balancing formu...

Integer overflow

In getService of IServiceManager.cpp, there is a possible unhandled exception due to an integer overflow. This could lead to local denial of service making the lockscreen unusable with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions:...

Virtuozzo Hybrid Server 7.5 Update 2 Hotfix 2 (7.5.2-464)

The Hotfix 2 for Virtuozzo Hybrid Server 7.5 Update 2 provides stability and usability bug fixes. Vulnerability id: PSBM-136189 QEMU could mark a VM QCOW2 image as corrupt. Vulnerability id: PSBM-136198 QEMU could not be updated. Vulnerability id: PSBM-136407 VCMMD needed to be properly notified ...

Virtuozzo PowerPanel Update 2 (7.0.4-75)

The update for Virtuozzo PowerPanel introduces new features as well as a stability and usability fix. Vulnerability id: PP-664 Wrong VA agent version could be displayed after an update...

MochiTreasuryV0.sol Is Unusable In Its Current State

Handle leastwood Vulnerability details Impact MochiTreasuryV0.sol interacts with Curve's voting escrow contract to lock tokens for 90 days, where it can be later withdrawn by the governance role. However, VotingEscrow.vy does not allow contracts to call the following functions; createlock,...

Virtuozzo Hybrid Server 7.5 Update 2 Hotfix 1 (7.5.2-444)

The Hotfix 1 for Virtuozzo Hybrid Server 7.5 Update 2 provides new features as well as stability and usability bug fixes. Vulnerability id: PSBM-134035 libvirtd could stop responding during VM autostart after node reboot. Vulnerability id: PSBM-134221 virtio-scsi could abort inside a guest during...

Wrong indexes: positionId vs incentiveId

Handle 0xsanson Vulnerability details Impact In multiple functions in ConcentratedLiquidityPoolManager, the index positionId is used instead of the correct incentiveId when dealing with the incentives mapping. Of course the issue is that incentives cannot be used, or in some cases only by lucky...