399 matches found
CVE-2022-22261
CVE-2022-22261 concerns Huawei HarmonyOS HiAIserver. Multiple connected sources confirm a vulnerability where the system fails to strictly validate the weights used in a model, allowing exploitation that can cause AI service anomalies or denial of service. The issue is described as a weight-valid...
CVE-2022-22261
The HiAIserver has a vulnerability in verifying the validity of the weight used in the model.Successful exploitation of this vulnerability will affect AI services...
HUAWEI HarmonyOS 安全漏洞
HUAWEI HarmonyOS is an operating system from the Chinese company Huawei HUAWEI. It provides a full-scenario distributed operating system based on a microkernel. A security vulnerability exists in the HUAWEI HarmonyOS AI business component, which stems from the fact that hiaiserver does not do...
In ERC20Gauges, contribution to total weight is double-counted when incrementGauge is called before addGauge for a given gauge.
Lines of code Vulnerability details Impact The impact depends really on how gauges are used by other contracts. The most obvious consequence I can imagine is that some other contract distributes rewards based on calculateGaugeAllocation. However, because getStoredWeighttotalWeight, currentCycle i...
Wrong reweight implementation (ManagedIndexReweightingLogic.sol)
Lines of code Vulnerability details Impact The list of assets will be incorrect after reweight Proof of Concept Base on the doc, updatedAssets is the list of asset for the index after reweight. But the implementation just iterates throw all of the updatedAsset and checks if that weight of asset 0...
DoS at CitadelMinter.sol
Lines of code Vulnerability details Impact At CitadelMinter.sol, Funding Pool Weight can't be set at the beginning since totalFundingPoolWeight value is not assigned and Zero meanwhile being cached to newTotalWeight. Hence the substraction will not perform as it will yield to a negative value whi...
WordPress Cart Weight for WooCommerce plugin <= 1.0.7 - Sensitive Information Disclosure vulnerability
Sensitive Information Disclosure vulnerability discovered in WordPress Cart Weight for WooCommerce plugin versions = 1.0.7. Solution No patched version available...
Fedora: Security Advisory for lua (FEDORA-2022-93f064549c)
The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
Business Logic Errors in dolibarr/dolibarr
Description Dolibarr is vulnerable to Business Logic Errors in the Weight, Length x Width x Height, Area, Volume fields of a Product since these values can be negative numbers. Proof of Concept 1.After login, in the top menu bar, click Products 2.In the left menu bar, click List to view the list ...
Business Logic Errors
yetiforce/yetiforce-crm is vulnerable to business logic errors. The vulnerability exists due to an insufficient validation for weight fields...
USDV TWAP averages wrong
Handle cmichel Vulnerability details The vader price in LiquidityBasedTWAP.getUSDVPrice is computed using the pastLiquidityWeights and pastTotalLiquidityWeight return values of the syncUSDVPrice. The syncUSDVPrice function does not initialize all weights and the total liquidity weight does not...
Vader TWAP averages wrong
Handle cmichel Vulnerability details The vader price in LiquidityBasedTWAP.getVaderPrice is computed using the pastLiquidityWeights and pastTotalLiquidityWeight return values of the syncVaderPrice. The syncVaderPrice function does not initialize all weights and the total liquidity weight does not...
vader price is wrong
Handle danb Vulnerability details for tokens that are not updating in syncVaderPrice because their updatePeriod is greated than timeElapsed, their liquidty weight will be zero, it will make the vader price wrong when calling getVaderPrice and it can be exploited. Recommended Mitigation Steps move...
What is JSON-RPC ❓ Definition, Work, Comparison
Just like everything else, the world of API protocols is evolving. Typical SOAP and REST APIs have many companies like GraphQL, gRPC, and Thrift. JSON-RPC is also on the list. Created to develop feature-rich and quick websites, it is developers’ best buddy. Let us see what it is and how it benefi...
Keep APP for Android has information leakage vulnerability
Keep APP for Android is a full voice-guided fitness and weight loss software. Keep APP Android version suffers from an information leakage vulnerability that can be exploited by attackers to obtain sensitive information...
GHSA-CXG7-84WP-8PCQ YetiForceCRM is vulnerable to Business Logic Errors in the weight of a product
YetiForceCRM is vulnerable to Business Logic Errors in the Weight of a Product since that value can be a negative number...
YetiForceCRM is vulnerable to Business Logic Errors in the weight of a product
YetiForceCRM is vulnerable to Business Logic Errors in the Weight of a Product since that value can be a negative number...
PT-2021-23144 · Unknown · Yetiforcecrm
Name of the Vulnerable Software and Affected Versions: YetiForceCRM affected versions not specified Description: The issue concerns Business Logic Errors in YetiForceCRM, specifically related to the Weight of a Product. The problem arises because the weight value can be set to a negative number...
Business Logic Errors in yetiforcecompany/yetiforcecrm
Description YetiForceCRM application is vulnerable to Business Logic Errors in the Weight of a Product since that value can be a negative number. Proof of Concept 1.After login, in the left menu bar, click Databases - Products 2.Click any product to go to the product details. 3.In the product...
EFB Tampering. Approach and Landing Performance Part 2
Approach and Landing Performance Part 2: Approach Speeds, Cold Weather Corrections, Sources of Data Click here for part 1 Target: Approach speed calculation The speed at which aircraft fly on approach depends on a variety of factors including: Aircraft weight Flap setting Wind direction/speed Fin...