Malicious Package

Overview erc-20-lib is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this package was...

QNAP QTS RCE Vulnerability (QSA-22-20)

QNAP QTS is prone to a remote code execution RCE vulnerability. SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/o:qnap:qts";...

CVE-2022-23080

creationtimestamp| type| source ---|---|--- 2022-06-22 20:33:45+00:00| seen| https://t.me/cibsecurity/44949...

CVE-2021-40510

creationtimestamp| type| source ---|---|--- 2022-06-21 20:27:45+00:00| seen| https://t.me/cibsecurity/44916...

WETH.sol computes the wrong totalSupply()

Lines of code Vulnerability details Impact Affected code: WETH.sol is almost copied from the infamous WETH contract that lives in mainnet. This contract is supposed to receive the native currency of the blockchain for example ETH and wrap it into a tokenized, ERC-20 form. This contract computes t...

Incorrect hard coded value for WETH address

Lines of code Vulnerability details Impact getWETHAddress still relies on same Comp hard coded address. Unless WETH address is deployed to an address identical to Comps original address the grantCompinternal function wont work or in a pessimistic scenario an attacker might deploy a malicious toke...

CVE-2022-22317

creationtimestamp| type| source ---|---|--- 2022-06-20 20:26:43+00:00| seen| https://t.me/cibsecurity/44843...

CVE-2022-22414

creationtimestamp| type| source ---|---|--- 2022-06-20 20:26:37+00:00| seen| https://t.me/cibsecurity/44840...

CVE-2022-33913

creationtimestamp| type| source ---|---|--- 2022-06-20 20:26:36+00:00| seen| https://t.me/cibsecurity/44839...

CVE-2022-1720

creationtimestamp| type| source ---|---|--- 2022-06-20 18:26:34+00:00| seen| https://t.me/cibsecurity/44830...

CVE-2022-2134

creationtimestamp| type| source ---|---|--- 2022-06-20 18:26:33+00:00| seen| https://t.me/cibsecurity/44829...

CVE-2021-41683

creationtimestamp| type| source ---|---|--- 2022-06-20 18:26:31+00:00| seen| https://t.me/cibsecurity/44827...

mcl.iis.u-tokyo.ac.jp Cross Site Scripting vulnerability OBB-2658352

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2022-21742

creationtimestamp| type| source ---|---|--- 2022-06-20 12:26:25+00:00| seen| https://t.me/cibsecurity/44817...

CVE-2017-20059

creationtimestamp| type| source ---|---|--- 2022-06-20 12:26:24+00:00| seen| https://t.me/cibsecurity/44816...

CVE-2017-20061

creationtimestamp| type| source ---|---|--- 2022-06-20 12:26:21+00:00| seen| https://t.me/cibsecurity/44814...

CVE-2017-20058

creationtimestamp| type| source ---|---|--- 2022-06-20 12:26:15+00:00| seen| https://t.me/cibsecurity/44809...

ooe-zukunftsakademie.at Cross Site Scripting vulnerability OBB-2657419

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2022-24533

creationtimestamp| type| source ---|---|--- 2022-06-20 11:04:41+00:00| seen| https://t.me/itsecnews/860...

librairiedelareine.be Cross Site Scripting vulnerability OBB-2656788

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...