Lucene search
+L

2 matches found

Code423n4
Code423n4
added 2023/03/20 12:00 a.m.7 views

Implementation error in Namespace.fuse() leads to a wrong unicode representation

Lines of code Vulnerability details Impact The font class of a tile will be always considered as 0 emoji when a user registers a name. Proof of Concept To register a name, fuse is used taking as input the data of the characters. The name to register is a string created by converting the character...

6.8AI score
SaveExploits0
Code423n4
Code423n4
added 2023/03/20 12:00 a.m.9 views

characterModifier is uint8 but encodes 1.38e24 different Zalgo distortions.

Lines of code Vulnerability details Impact Only 256 Zalgo distortions are possible, which is a miniscule fraction of the actual combinations possible. Proof of Concept A Zalgo tile is defined by a letter and a modification consisting of a combination of characters above, over and below the letter...

6.6AI score
SaveExploits0
Rows per page
Query Builder