1185 matches found
Malicious code in vt-blockchain-bootcamp-starter-frontend (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f1085597e357b5b1d2b12ab109ff9c279fa1cbca538e418cf962f34265384141 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2022-6986 Malicious code in vt-blockchain-bootcamp-starter-frontend (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f1085597e357b5b1d2b12ab109ff9c279fa1cbca538e418cf962f34265384141 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in blockchain-explorer-sdk (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f01495842310cffcbf1d5d6d28f46cc678de92e26262ab89d275701e407b8017 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2022-1613 Malicious code in blockchain-explorer-sdk (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f01495842310cffcbf1d5d6d28f46cc678de92e26262ab89d275701e407b8017 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Griefing Attack By Extending The Reward Duration
Lines of code Vulnerability details Proof-Of-Concept The Gauge.notifyRewardAmount notifies the contract of a newly received rewards. This updates the local accounting and streams the reward over a preset period Five days. It was observed that this function is callable by anyone regardless of...
GHSA-6X52-88CQ-55Q5 Grin allows attackers to adversely affect availability of data on a Mimblewimble blockchain
Grin before 3.1.0 allows attackers to adversely affect availability of data on a Mimblewimble blockchain...
Blockchain AltExchanger 1.2.1 SQL Injection Vulnerability
Information Vulnerability Name : Multiple Remote SQL Injections in Inout Blockchain AltExchanger Product : Inout Blockchain AltExchanger version : 1.2.1 Vendor Site : https://www.inoutscripts.com/products/inout-blockchain-altexchanger/ Exploit Detail :...
Blockchain FiatExchanger 2.2.1 SQL Injection Vulnerability
Information Vulnerability Name : Remote Blind SQL Injections in Inout Blockchain FiatExchanger Product : Inout Blockchain FiatExchanger version : 2.2.1 Vendor Site : https://www.inoutscripts.com/products/inout-blockchain-fiatexchanger/ Exploit Detail :...
CVE-2022-31489
Inout Blockchain AltExchanger 1.2.1 allows index.php/home/about inoutiolanguage cookie SQL injection...
CVE-2022-31489
Inout Blockchain AltExchanger 1.2.1 allows index.php/home/about inoutiolanguage cookie SQL injection...
CVE-2022-31488
Inout Blockchain AltExchanger 1.2.1 allows index.php/coins/updatemarketboxslider marketcurrency SQL injection...
CVE-2022-31487
Inout Blockchain AltExchanger 1.2.1 and Inout Blockchain FiatExchanger 2.2.1 allow Chart/TradingView/chartcontent/master.php symbol SQL injection...
CVE-2022-31488
Inout Blockchain AltExchanger 1.2.1 allows index.php/coins/updatemarketboxslider marketcurrency SQL injection...
Sql injection
Inout Blockchain AltExchanger 1.2.1 allows index.php/coins/updatemarketboxslider marketcurrency SQL injection...
Sql injection
Inout Blockchain AltExchanger 1.2.1 and Inout Blockchain FiatExchanger 2.2.1 allow Chart/TradingView/chartcontent/master.php symbol SQL injection...
Sql injection
Inout Blockchain AltExchanger 1.2.1 allows index.php/home/about inoutiolanguage cookie SQL injection...
CVE-2022-31487
CVE-2022-31487 affects Inout Blockchain AltExchanger 1.2.1 and Inout Blockchain FiatExchanger 2.2.1. The root cause is a SQL injection in Chart/TradingView/chart_content/master.php symbol parameter due to missing input filtering/escaping. Documented impact includes potential data exposure (confid...
CVE-2022-31487
Inout Blockchain AltExchanger 1.2.1 and Inout Blockchain FiatExchanger 2.2.1 allow Chart/TradingView/chartcontent/master.php symbol SQL injection...
CVE-2022-31488
CVE-2022-31488 affects Inout Blockchain AltExchanger 1.2.1, with a SQL injection on the index.php/coins/update_marketboxslider marketcurrency page. Root cause stated: lack of input filtering/escaping on that endpoint. Affected component: the marketcurrency parameter handling in index.php/coins/up...