Authorization

A vulnerability was found in Forged Alliance Forever up to 3746. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the component Vote Handler. The manipulation leads to improper authorization. Upgrading to version 3747 is able to address this issue. T...

CVE-2022-4879 Forged Alliance Forever Vote improper authorization

A vulnerability was found in Forged Alliance Forever up to 3746. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the component Vote Handler. The manipulation leads to improper authorization. Upgrading to version 3747 is able to address this issue. T...

CVE-2022-4879 Forged Alliance Forever Vote improper authorization

A vulnerability was found in Forged Alliance Forever up to 3746. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the component Vote Handler. The manipulation leads to improper authorization. Upgrading to version 3747 is able to address this issue. T...

CVE-2022-4879

CVE-2022-4879 affects Forged Alliance Forever up to version 3746, targeting the Vote Handler component. The issue is due to manipulation of an unknown functionality that leads to improper authorization. Upgrading to version 3747 mitigates the vulnerability; the patch is identified by 6880971bd3d7...

CVE-2022-4879 Forged Alliance Forever Vote improper authorization

A vulnerability was found in Forged Alliance Forever up to 3746. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the component Vote Handler. The manipulation leads to improper authorization. Upgrading to version 3747 is able to address this issue. T...

Forged Alliance Forever 安全漏洞

Forged Alliance Forever is a community-driven project to promote online play of Supreme Commander: Forged Alliance. Forged Alliance Forever suffers from a security vulnerability that stems from an unknown feature of the component Vote Handler that manipulates to cause incorrect authorization...

PT-2023-15893 · Unknown · Forged Alliance Forever

Name of the Vulnerable Software and Affected Versions: Forged Alliance Forever versions up to 3746 Description: A critical issue was found in the Vote Handler component, leading to improper authorization due to manipulation of an unknown functionality. Upgrading to version 3747 addresses this...

The vulnerability of the “Create poll” module in the YOP Poll plugin of the WordPress content management system allows a hacker to perform cross-site scripting attacks.

The vulnerability of the “Create poll” module in the YOP Poll plugin of the WordPress content management system is related to the lack of protection for website structure when processing parameters such as “Vote Button Label”, “Show Results Link”, and “Display Back to vote Link”. Exploiting this...

CVE-2022-1581

The WP-Polls WordPress plugin before 2.76.0 prioritizes getting a visitor's IP from certain HTTP headers over PHP's REMOTEADDR, which makes it possible to bypass IP-based limitations to vote in certain situations...

PT-2022-13980 · WordPress · Wp-Polls

Name of the Vulnerable Software and Affected Versions: WP-Polls versions prior to 2.76.0 Description: The issue allows bypassing IP-based limitations to vote in certain situations due to the plugin prioritizing getting a visitor's IP from certain HTTP headers over PHP's REMOTE ADDR...

Inside the ‘Election Integrity App’ Built to Purge US Voter Rolls

True the Vote’s IV3 app is meant to catch election cheaters. But it has a fundamental flaw...

CVE-2021-42045

An issue was discovered in SecurePoll in the Growth extension in MediaWiki through 1.36.2. Simple polls allow users to create alerts by changing their User-Agent HTTP header and submitting a vote...

CVE-2021-42045

An issue was discovered in SecurePoll in the Growth extension in MediaWiki through 1.36.2. Simple polls allow users to create alerts by changing their User-Agent HTTP header and submitting a vote...

CVE-2022-40310

Authenticated subscriber+ Race Condition vulnerability in Rate my Post – WP Rating System plugin = 3.3.4 at WordPress allows attackers to increase/decrease votes...

Race condition

Authenticated subscriber+ Race Condition vulnerability in Rate my Post – WP Rating System plugin = 3.3.4 at WordPress allows attackers to increase/decrease votes...

CVE-2022-40310 WordPress Rate my Post – WP Rating System plugin <= 3.3.4 - Race Condition vulnerability

Authenticated subscriber+ Race Condition vulnerability in Rate my Post – WP Rating System plugin = 3.3.4 at WordPress allows attackers to increase/decrease votes...

WordPress plugin Rate my Post – WP Rating System 竞争条件问题漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

ArbitraryCallsProposal.sol and ListOnOpenseaProposal.sol safeguards can be bypassed by cancelling in-progress proposal allowing the majority to steal NFT

Lines of code Vulnerability details Note: PartyDAO acknowledges that "canceling an InProgress proposal mid-step can leave the governance party in a vulnerable or undesirable state because there is no cleanup logic run during a cancel" in the "Known Issues / Topics" section of the contest readme. ...

ERC721Votes.sol checkpoints' timestamp is not unique, which leads to manipulation of the amount of votes

Lines of code Vulnerability details Impact getPastVotes uses the binary search algorithm, which returns the result if it encounters the same timestamp, and since timestamps are not unique in the array The number of votes can be controlled by adding checkpoints to locate any one of the same...

Use can get unlimited votes

Lines of code Vulnerability details Impact aftertokenTransfer in ERC721Votes transfers votes between user addresses instead of the delegated addresses, so a user can cause overflow in moveDelegates and get unlimited votes Proof of Concept function afterTokenTransfer address from, address to,...