CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

1412 matches found

Code423n4•added 2023/05/11 12:00 a.m.•15 views

Delegation rewards are not counted toward granting fund

Lines of code Vulnerability details Impact Each period reserves a reward for granting up to 3% GBC: Global Budget Constraint. The GBC is split into two parts: 1. 90% for proposal granting. Any proposal requesting more than 90% will revert. The total amount requested across winning proposals must...

7AI score

SaveExploits0

Code423n4•added 2023/05/11 12:00 a.m.•8 views

It is possible to steal the unallocated part of every delegation period budget

Lines of code Vulnerability details Attacker can monitor the standard proposals distribution and routinely steal each low activity period remainder by submitting a transfer to self proposal and voting a dust amount for it. Since the criteria for the final slate update is that any increase in tota...

6.7AI score

SaveExploits0

Code423n4•added 2023/05/11 12:00 a.m.•15 views

Extraordinary Funding proposal could be susceptible back-run

Lines of code Vulnerability details Impact An extraordinary proposal can be proposed, voted on, and executed within a single transaction, in the same block. As a result, an attacker with enough voting power to meet the conditions on their own could back-run a transaction to steal funds from the...

6.5AI score

SaveExploits0

Code423n4•added 2023/05/11 12:00 a.m.•16 views

Standard voting favors proposals which ask for lower GBC

Lines of code Vulnerability details Impact Proposals which ask for higher % of the GBC have a serious disadvantage. Proof of Concept For simplicity, let's say there are only 3 projects in the screening stage. Project A asks for 90% GBC and projects B and C ask for 40% GBC each. Therefore, project...

6.7AI score

SaveExploits0

Packet Storm•added 2023/05/10 12:00 a.m.•349 views

VOTAB Voting Quiz PHP Script 1.0 SQL Injection

┌┌───────────────────────────────────────────────────────────────────────────────────────┐ ││ C r a C k E r ┌┘ ┌┘ T H E C R A C K O F E T E R N A L M I G H T ││ └───────────────────────────────────────────────────────────────────────────────────────┘┘ ┌──── From The Ashes and Dust Rises An...

7.1AI score

SaveExploits0

Code423n4•added 2023/05/04 12:00 a.m.•15 views

Zero address pauser assignment

Lines of code Vulnerability details Impact By allowing any address to be assigned as the pauser, the StrategyBase contract leaves itself vulnerable to losing critical functionality that controls token transfers in and out. Assigning a zero address would result in no valid pauser, preventing the...

7.2AI score

SaveExploits0

Code423n4•added 2023/04/19 12:00 a.m.•6 views

Malicious redeem prevention

Lines of code Vulnerability details Impact Sending FPS to a person affects his voteAnchor and can prevent him from withdrawing money for a long time Proof of Concept Since canRedeem function is using voteAnchor to determine holding period and sending FPS evokes adjustRecipientVoteAnchor, which...

6.8AI score

SaveExploits0

CNVD•added 2023/04/18 12:00 a.m.•56 views

Campcodes Advanced Online Voting System SQL Injection Vulnerability (CNVD-2023-29413)

Campcodes Advanced Online Voting System is an online voting system. A SQL injection vulnerability exists in Campcodes Advanced Online Voting System v1.0. The vulnerability stems from the lack of validation of external input SQL statements in the parameter id of the file /admin/candidatesrow.php,...

8.2AI score0.00747EPSS