3000 matches found
CMSWing SQL注入漏洞
CMSWing is a ThinkJS-based e-commerce platform and CMS builder. A SQL injection vulnerability exists in CMSWing 1.3.8. The vulnerability stems from the rechargeAction function not checking the balance parameter. An attacker can exploit this vulnerability to execute arbitrary SQL commands via...
PT-2021-10476
Name of the Vulnerable Software and Affected Versions: CMSWing version 1.3.8 Description: An issue was found in the CMSWing project where the rechargeAction function does not check the balance parameter, allowing malicious parameters to execute arbitrary SQL commands. Recommendations: For CMSWing...
Evaluating Our Core Principles
Reflecting on the past year led me to put together this post about how I believe this incredibly challenging year has had an irreversible effect on the way the workforce will collaborate, innovate, and do business in the future. The COVID-19 pandemic emerged at the beginning of 2020 and led to ne...
Bilanc Shpk Programi Bilanc SQL Injection Vulnerability
Bilanc Shpk Programi Bilanc is a software for generating balance sheets from Bilanc Shpk, Alphania. A security vulnerability exists in Bilanc Shpk Programi Bilanc 014 version 31.01.2020. It has multiple SQL injection vulnerabilities...
The story of the year: remote work
The coronavirus pandemic has caused sudden, sweeping change around the world. The necessary social distancing measures are having an impact on all of us. One large part of society that has been affected by these measures more than others is the employed. While direct customer facing businesses li...
Don't reward your loyal customers by treating them like criminals!
I am CIAM not IAM Imagine shopping in your favourite wine merchant or checking in to the brand of hotel that you afford the most loyalty, and at the point of self-identification either to prove age or verification security is called over and you are frisked. Not a great experience. Would you...
ElevateCoin Digital Error Vulnerability
ElevateCoin is an ethereum-based digital currency. An integer overflow vulnerability exists in the 'mintToken' function in ElevateCoin's smart contract implementation. An attacker could use this vulnerability to set the balance of any user to an arbitrary value...
DhaCoin Digital Error Vulnerability
DhaCoin is an ethereum-based digital currency. An integer overflow vulnerability exists in the 'mintToken' function in DhaCoin's smart contract implementation. An attacker can exploit this vulnerability to set the balance of any user to an arbitrary value...
HunterCoin Digital Error Vulnerability
HunterCoin is an ethereum-based digital currency. An integer overflow vulnerability exists in the 'mintToken' function in HunterCoin's smart contract implementation. An attacker can exploit this vulnerability to set the balance of any user to an arbitrary value...
PhilCoin Digital Error Vulnerability
PhilCoin is an ethereum-based digital currency. An integer overflow vulnerability exists in the 'mintToken' function in PhilCoin's smart contract implementation. An attacker can exploit this vulnerability to set the balance of any user to an arbitrary value...
SmartPayment Digital Error Vulnerability
SmartPayment is an ethereum-based digital currency. An integer overflow vulnerability exists in the 'mintToken' function in SmartPayment's smart contract implementation. An attacker can exploit this vulnerability to set the balance of any user to an arbitrary value...
PornCoin Digital Error Vulnerability
PornCoin PRNC is an ethereum-based digital currency. An integer overflow vulnerability exists in the 'mintToken' function in PRNC's smart contract implementation. An attacker can exploit the vulnerability to set the balance of any user to an arbitrary value...
Flow Number Error Vulnerability
Flow is an ethereum-based digital currency. An integer overflow vulnerability exists in the 'mintToken' function in Flow's smart contract implementation. An attacker can exploit this vulnerability to set the balance of any user to an arbitrary value...
PinkyToken Number Error Vulnerability
PinkyToken is an ethereum-based digital currency. An integer overflow vulnerability exists in the 'mintToken' function in PinkyToken's smart contract implementation. An attacker can exploit this vulnerability to set the balance of any user to an arbitrary value...
EXGROUP Number Error Vulnerability
EXGROUP is an ethereum-based digital currency. An integer overflow vulnerability exists in the 'mintToken' function in EXGROUP's smart contract implementation. An attacker can exploit this vulnerability to set the balance of any user to an arbitrary value...
TopscoinAdvanced Digital Error Vulnerability
TopscoinAdvanced is an ethereum-based digital currency. An integer overflow vulnerability exists in the 'mintToken' function in the smart contract implementation of TopscoinAdvanced. An attacker can exploit this vulnerability to set the balance of any user to an arbitrary value...
Super Cool Awesome Money Number Error Vulnerability
Super Cool Awesome Money SCAM is an ethereum-based digital currency. An integer overflow vulnerability exists in the 'mintToken' function in SCAM's smart contract implementation. An attacker can exploit this vulnerability to set the balance of any user to an arbitrary value...
C3 Token Number Error Vulnerability
C3 Token C3 is an ethereum-based digital currency. An integer overflow vulnerability exists in the 'mintToken' function in C3's smart contract implementation. An attacker can exploit this vulnerability to set the balance of any user to an arbitrary value...
aman Number Error Vulnerability
aman is an ethereum-based digital currency. An integer overflow vulnerability exists in the 'mintToken' function in aman's smart contract implementation. An attacker can exploit this vulnerability to set the balance of any user to an arbitrary value...
