A malicious contributor can increase voting power maliciously and eventually steal funds!

Lines of code Vulnerability details Impact Unlimited voting power for attacker and stealing of funds ! Proof of Concept All of the contribute functions uses msg.value to calculate the votingpower . For example , contribute function looks like this : function contribute uint256 tokenId, address...

Envoy 资源管理错误漏洞

Envoy is an open source distributed proxy server. A resource management error vulnerability exists in Envoy versions prior to 1.27.0, which stems from the possibility that Envoy's HTTP/2 codec may leak header maps and bookkeeping structures after receiving the frame RSTSTREAM from an upstream...

Admin may take non-fee baseTokens from Collateral.sol

Lines of code Vulnerability details Description In Collateral.sol, deposit and withdraw functions are subject to fees. They are either sent directly to the treasure in deposit / withdraw hooks, or are kept in the Collateral contract for safekeeping. Later, manager can use managerWithdraw function...

Consistently check account balance before and after transfers for Fee-On-Transfer discrepencies

Handle Dravee Vulnerability details Impact Wrong fateBalance bookkeeping for a user. Wrong fateCreated value emitted. Proof of Concept Taking into account the FOT is done almost everywhere important in the solution already. That's a known practice in the solution. However, it's missing here see...

LedgerSMB Cross-Site Scripting Vulnerability

LedgerSMB is a free web-based double-entry bookkeeping system with quoting, ordering, invoicing, projects, time cards, inventory management, shipping, etc. A cross-site scripting vulnerability exists in LedgerSMB, which stems from the application's failure to adequately encode HTML for error...

LedgerSMB Cross-Site Scripting Vulnerability (CNVD-2021-101203)

LedgerSMB is a free web-based double-entry bookkeeping system with quoting, ordering, invoicing, projects, time cards, inventory management, shipping, etc. A cross-site scripting vulnerability exists in LedgerSMB, which stems from the application's failure to check the origin of HTML fragments...

Incorrect internal balance bookkeeping

Handle walker Vulnerability details type: Incorrect Assumptions on External Systems The sherlock smart contract system uses internal bookkeeping of arbitrary ERC20 token balances. It doesn't assert that the ERC20 doesn't implement some non-standard behaviour. For example, deflationary tokens, or...

Memory corruption

Incorrect bookkeeping of functions inlined during JIT compilation could have led to memory corruption and a potentially exploitable crash when handling out-of-memory errors. This vulnerability affects Firefox 83...

kerriganbookkeeping.com Cross Site Scripting vulnerability OBB-1258244

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

Unauthorized Access Vulnerability in Dolphin Notebook Order Android APP of Beijing Smooth Entertainment Technology Co.

Dolphin Bookkeeping App is a professional and simple mobile bookkeeping software. There is an unauthorized access vulnerability in Dolphin Bookkeeping App for Android, which can be exploited by attackers to obtain sensitive information...

Shanxi Xianqi Technology Co., Ltd. environmental times enterprise online bookkeeping management system there are logic flaws vulnerability

Eco Times Business Online Bookkeeping Management System is a bookkeeping system for micro and small businesses and households. Shanxi Xianqi Technology Co., Ltd Environmental Times Enterprise Online Bookkeeping Management System has a logic flaw vulnerability that can be exploited by an attacker ...

XSS Vulnerability in Enterprise Online Bookkeeping Management System

Ltd. hereinafter referred to as "Xianqi Technology" was founded in May 2011, is a collection of hardware and software research and development, production, sales and service in one of the high-tech enterprises, but also one of the most influential high-tech enterprises in Shanxi Province. An XSS...

Logic Flaw Vulnerability in EcoTimes.com Corporate Online Bookkeeping Management System

EcoTimes.com Business Online Bookkeeping Management System PHP is a commercial system. There is a logic flaw vulnerability in the EcoTimes.com Enterprise Online Bookkeeping Management System that can be exploited by attackers to obtain sensitive information...

Arbitrary File Deletion Vulnerability in Environmental Times Enterprise Online Bookkeeping Management System

EcoTimes.com Business Online Bookkeeping Management System PHP is a commercial system. There is an arbitrary file deletion vulnerability that can be exploited by attackers to delete arbitrary files...

Arbitrary File Download Vulnerability in EcoTimes.com Enterprise Online Bookkeeping Management System

EcoTimes.com Business Online Bookkeeping Management System is a commercial system. There is an arbitrary file download vulnerability that can be exploited by an attacker to download arbitrary files...

SQL Injection Vulnerability in the Frontend of Environmental Times Enterprise Online Bookkeeping Management System

Eco Times Business Online Bookkeeping Management System is a simple and easy to use bookkeeping system for micro and small businesses and households. SQL injection vulnerability exists in the frontend of the EcoTimes Enterprise Online Bookkeeping Management System, which can be exploited by...

SQL injection vulnerability in the front-end mo***_mo***_zh***.asp file of the Eco Times Enterprise Online Bookkeeping Management System.

EcoTime Enterprise Online Bookkeeping Management System is an online bookkeeping software for small and medium-sized enterprises, stores, etc. It is suitable for managing cash flow accounts, accounts receivable and payable accounts, as well as company bookkeeping and other related financial...

SQL Injection Vulnerability in the front-end pa***.asp file of Eco Times Enterprise Online Bookkeeping Management System

EcoTime Enterprise Online Bookkeeping Management System is an online bookkeeping software for small and medium-sized enterprises, stores, etc. It is suitable for managing cash flow accounts, accounts receivable and payable accounts, as well as company bookkeeping and other related financial...

SQL injection vulnerability in the front-end mo***_sh***_pa***.asp file of the Eco Times Enterprise Online Bookkeeping Management System.

EcoTime Enterprise Online Bookkeeping Management System is an online bookkeeping software for small and medium-sized enterprises, stores, etc. It is suitable for managing cash flow accounts, accounts receivable and payable accounts, as well as company bookkeeping and other related financial...

SQL injection vulnerability in the frontend mo***_sh***.asp file of the EcoTimes Enterprise Online Bookkeeping Management System

EcoTime Enterprise Online Bookkeeping Management System is an online bookkeeping software for small and medium-sized enterprises, stores, etc. It is suitable for managing cash flow accounts, accounts receivable and payable accounts, as well as company bookkeeping and other related financial...