CVE-2018-13517

CVE-2018-13517 affects the C3 Token (C3) Ethereum smart contract. The mintToken function contains an integer overflow that enables the contract owner to set any user’s balance to an arbitrary value. Documented impacts are the balance manipulation, but the provided sources do not specify exploitat...

CVE-2018-13517: Integer Overflow or Wraparound

The mintToken function of a smart contract implementation for C3 Token C3, an Ethereum token, has an integer overflow that allows the owner of the contract to set the balance of an arbitrary user to any value...

PT-2018-11898

Name of the Vulnerable Software and Affected Versions C3 Token C3 affected versions not specified Description The issue concerns an integer overflow in the mintToken function of a smart contract implementation for C3 Token C3, an Ethereum token. This overflow allows the owner of the contract to s...

c3.kz XSS vulnerability

Open Bug Bounty ID: OBB-630524 Description| Value ---|--- Affected Website:| c3.kz Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

c3.kz XSS vulnerability

Open Bug Bounty ID: OBB-609213 Description| Value ---|--- Affected Website:| c3.kz Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

FreeBSD : shibboleth-sp -- vulnerable to forged user attribute data (3dbe9492-f7b8-11e7-a12d-6cc21735f730)

Shibboleth consortium reports : Shibboleth SP software vulnerable to forged user attribute data The Service Provider software relies on a generic XML parser to process SAML responses and there are limitations in older versions of the parser that make it impossible to fully disable Document Type...

shibboleth-sp -- vulnerable to forged user attribute data

Shibboleth consortium reports: Shibboleth SP software vulnerable to forged user attribute data The Service Provider software relies on a generic XML parser to process SAML responses and there are limitations in older versions of the parser that make it impossible to fully disable Document Type...

c3-rcon.net XSS vulnerability

Open Bug Bounty ID: OBB-388976 Description| Value ---|--- Affected Website:| c3-rcon.net Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat Sheet...

c3.hu XSS vulnerability

Vulnerable URL: http://www.c3.hu/collection/indexen.php?id=43" Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 369670 VIP website status:| No Check c3.hu SSL connection:| Grade: F...

Cross-Site Scripting

Overview Affected versions of c3 are vulnerable to cross-site scripting via improper sanitization of HTML in rendered tooltips. Recommendation Update to 0.4.11 or later. References - Issue 1536 - GitHub Advisory...

xercesi-c3 -- multiple vulnerabilities

Apache reports: The Xerces-C XML parser fails to successfully parse a DTD that is deeply nested, and this causes a stack overflow, which makes a denial of service attack against many applications possible by an unauthenticated attacker. Also, CVE-2016-2099: Use-after-free vulnerability in...

FreeBSD : xerces-c3 -- Parser Crashes on Malformed Input (a7f2e9c6-de20-11e5-8458-6cc21735f730)

The Apache Software Foundation reports : The Xerces-C XML parser mishandles certain kinds of malformed input documents, resulting in buffer overflows during processing and error reporting. The overflows can manifest as a segmentation fault or as memory corruption during a parse operation. The bug...

CVE-2012-1813

eosfailoverservice.exe in C3-ilex EOScada before 11.0.19.2 allows remote attackers to cause a denial of service by sending a large amount of data to TCP port 12000...

CVE-2012-1810

EOSCoreScada.exe in C3-ilex EOScada before 11.0.19.2 allows remote attackers to cause a denial of service daemon restart by sending data to TCP port 1 5050 or 2 24004...

CVE-2012-1811

EOSDataServer.exe in C3-ilex EOScada before 11.0.19.2 allows remote attackers to cause a denial of service by sending a large amount of data to TCP port 24006...

CVE-2012-1812

eosfailoverservice.exe in C3-ilex EOScada before 11.0.19.2 allows remote attackers to obtain sensitive cleartext information via a session on TCP port 12000...

Code injection

eosfailoverservice.exe in C3-ilex EOScada before 11.0.19.2 allows remote attackers to cause a denial of service by sending a large amount of data to TCP port 12000...

Code injection

EOSDataServer.exe in C3-ilex EOScada before 11.0.19.2 allows remote attackers to cause a denial of service by sending a large amount of data to TCP port 24006...

Code injection

eosfailoverservice.exe in C3-ilex EOScada before 11.0.19.2 allows remote attackers to obtain sensitive cleartext information via a session on TCP port 12000...

CVE-2012-1811

CVE-2012-1811 affects C3-ilex EOScada, specifically the EOSDataServer.exe component. Before version 11.0.19.2, this service on TCP port 24006 is vulnerable to a Resource Management Error: sending a large amount of random data can cause a denial-of-service, resulting in the application crashing an...