Russian Hacker Gets 12-Years Prison for Massive JP Morgan Chase Hack

A U.S. court on Thursday sentenced a 37-year-old Russian to 12 years in prison for perpetrating an international hacking campaign that resulted in the heist of a trove of personal information from several financial institutions, brokerage firms, financial news publishers, and other American...

CVE-2020-35962

The sellTokenForLRC function in the vault protocol in the smart contract implementation for Loopring LRC, an Ethereum token, lacks access control for fee swapping and thus allows price manipulation...

Code injection

The sellTokenForLRC function in the vault protocol in the smart contract implementation for Loopring LRC, an Ethereum token, lacks access control for fee swapping and thus allows price manipulation...

CVE-2020-35962

The sellTokenForLRC function in the vault protocol in the smart contract implementation for Loopring LRC, an Ethereum token, lacks access control for fee swapping and thus allows price manipulation...

CVE-2020-35962

The CVE-2020-35962 issue affects Loopring (LRC) by the vault protocol’s sellTokenForLRC function in its smart contract, which lacks access control for fee swapping. This vulnerability enables price manipulation within the on-chain logic. The documented impact is a HIGH severity in CVSS 3.1 (I:H) ...

CVE-2021-3006

The breed function in the smart contract implementation for Farm in Seal Finance Seal, an Ethereum token, lacks access control and thus allows price manipulation, as exploited in the wild in December 2020 and January 2021...

Design/Logic Flaw

The breed function in the smart contract implementation for Farm in Seal Finance Seal, an Ethereum token, lacks access control and thus allows price manipulation, as exploited in the wild in December 2020 and January 2021...

CVE-2021-3006

The breed function in the smart contract implementation for Farm in Seal Finance Seal, an Ethereum token, lacks access control and thus allows price manipulation, as exploited in the wild in December 2020 and January 2021...

CVE-2021-3006

The CVE-2021-3006 entry concerns the Seal Finance (Seal) Ethereum token. The breed function in its smart contract lacks access control, enabling price manipulation. Exploitation occurred in the wild during December 2020 and January 2021. The available documents confirm the root cause (unauthorize...

CVE-2021-3006

The breed function in the smart contract implementation for Farm in Seal Finance Seal, an Ethereum token, lacks access control and thus allows price manipulation, as exploited in the wild in December 2020 and January 2021...

Seal Finance Farm Security Breach

Seal Finance Farm is a network protocol used by the Seal Finance community to support decentralized trading.SEAL An experimental protocol that acts as an intermediary between the main DeFi protocol tokens, creating deeper liquidity between the two Seal Finance Farm has a security vulnerability. T...

Reverse Engineering Tools: Evaluating the True Cost

When sourcing software for business needs, what criteria should you follow? Price typically tops the list. And sure, free software, like the Linux OS, delivers cost savings, stability, flexibility and ongoing development. No argument there. But when it comes to decompilers, which are used for...

What the cluck?! Cyber hygiene when eating out.

This feels like the new norm for eating out at a restaurant: Stand uncomfortably, 2 metres from the party in front/furrow your brow when the other party move within your “safe zone”. Make a huge over-theatrical show of sanitising your hands, as though you’re about to perform some major surgery...

Scalper-Bots Shake Down Desperate PS5, Xbox Series X Shoppers

It’s a big week for gamers across the globe, with imminent, dueling releases of Xbox Series X and PlayStation PS5. However, an army of retail bots threaten to drive prices up as much as three times the retail price, putting the coveted holiday gifts well out of reach of everyday fans. Retailers...

nepalmarketprice.com Cross Site Scripting vulnerability OBB-1483722

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

Two Russians Charged in $17M Cryptocurrency Phishing Spree

U.S. authorities today announced criminal charges and financial sanctions against two Russian men accused of stealing nearly $17 million worth of virtual currencies in a series of phishing attacks throughout 2017 and 2018 that spoofed websites for some of the most popular cryptocurrency exchanges...

goldpricedashboard.goldprice.org Cross Site Scripting vulnerability OBB-1278263

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

The vulnerability of the setPrice function in the PriceOracle.sol component of the decentralized price data system, Compound Price Oracle, allows a attacker to increase their privileges.

The vulnerability of the setPrice function in the PriceOracle.sol component of the decentralized price data system Compound Price Oracle is related to insufficient validation of input data. Exploiting this vulnerability could allow a malicious actor to enhance their privileges remotely...

Zomato: Ability to manipulate price with a max threshold of `<1 Rupee` in support rider parameter

Hi Team I have found an issue in support rider amount calculation at the time of checkout where the amount is tamperable by negative fraction of rupees which makes the total amount decreased by maximum of 1rs. POC - 1-Goto - zomato.com 2 - Add anything to your cart 3- At the checkout page , Add...

MKCB Number Error Vulnerability

MKCB is a digital currency as well as Ether. An integer overflow vulnerability exists in the 'sell' function in the smart contract implementation of MKCB. An attacker can exploit this vulnerability by setting the sell price to a large value to execute arbitrary code on the system...