WordPress plugin Smart Slider 'name' cross-site scripting vulnerability

WordPress is a blogging platform based on the PHP language, which can be used to set up a website on a server that supports PHP and MySQL databases, and can also be used as a content management system CMS. A cross-site scripting vulnerability exists in the WordPress plugin Smart Slider 'name',...

No check transferFrom() return value

Handle s1m0 Vulnerability details Impact The smart contract doesn't check the return value of token.transfer and token.transferFrom, some erc20 token might not revert in case of error but return false. In the TracerPerpetualSwaps:deposit and Insurance:deposit this would allow a user to deposit fo...

Weak password vulnerability in NETGEAR GS724Tv4

The GS724Tv4 is a 24-port Gigabit Smart Managed Professional Switch with 2 SFP ports. The NETGEAR GS724Tv4 suffers from a weak password vulnerability that can be exploited by an attacker to obtain sensitive information...

NETGEAR Smart Cloud Switch Command Injection Vulnerability (PSV-2021-0071)

Multiple NETGEAR Smart Cloud Switch devices are prone to an unauthenticated command injection vulnerability. Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

SQL Injection Vulnerability in Various Smart Management Platforms of Byzoro Networks

Beijing Byzoro Networks Technology Co., Ltd hereinafter referred to as Byzoro Networks is a high-tech enterprise dedicated to building the next-generation secure Internet. A number of Smart management platforms of Byzoro Networks have SQL injection vulnerabilities, which can be exploited by...

CVE-2020-17753

An issue was discovered in function addMeByRC in the smart contract implementation for RC, an Ethereum token, allows attackers to transfer an arbitrary amount of tokens to an arbitrary address...

CVE-2020-17752

Integer overflow vulnerability in payable function of a smart contract implementation for an Ethereum token, as demonstrated by the smart contract implemented at address 0xB49E984A83d7A638E7F2889fc8328952BA951AbE, an implementation for MillionCoin MON...

Integer overflow

Integer overflow vulnerability in payable function of a smart contract implementation for an Ethereum token, as demonstrated by the smart contract implemented at address 0xB49E984A83d7A638E7F2889fc8328952BA951AbE, an implementation for MillionCoin MON...

Code injection

An issue was discovered in function addMeByRC in the smart contract implementation for RC, an Ethereum token, allows attackers to transfer an arbitrary amount of tokens to an arbitrary address...

CVE-2020-17752

Integer overflow vulnerability in payable function of a smart contract implementation for an Ethereum token, as demonstrated by the smart contract implemented at address 0xB49E984A83d7A638E7F2889fc8328952BA951AbE, an implementation for MillionCoin MON...

CVE-2020-17752

CVE-2020-17752 corresponds to an integer overflow in the payable function of a smart-contract implementation for Ethereum token MillionCoin (MON). The vulnerable contract is at 0xB49E984A83d7A638E7F2889fc8328952BA951AbE. Documented impact is partial confidentiality/integrity/availability (per CVS...

CVE-2020-17753

An issue was discovered in function addMeByRC in the smart contract implementation for RC, an Ethereum token, allows attackers to transfer an arbitrary amount of tokens to an arbitrary address...

CVE-2020-17753

The CVE-2020-17753 entry concerns the RC Ethereum token smart contract. A vulnerability in the function addMeByRC allows an attacker to transfer an arbitrary amount of tokens to an arbitrary address. Public sources (NVD/NVD-derived entries and related records) confirm the affected component as th...

CVE-2021-21737

CVE-2021-21737 affects ZTE ZXV10 B860H family STBs (V5.0, V83011303.0010, V83011303.0016). The issue is a permission/access control vulnerability due to insufficient protection of system applications, enabling an attacker to tamper with the system desktop and affect system customization. No explo...

CVE-2021-21737

A smart STB product of ZTE is impacted by a permission and access control vulnerability. Due to insufficient protection of system application, attackers could use this vulnerability to tamper with the system desktop and affect system customization functions. This affects: ZXV10 B860H V5.0,...

Ethereum token 安全漏洞

The Ethereum token is a digital currency of the Ether Ethereum community. The Ethereum token suffers from a security vulnerability that stems from an issue discovered in the function addMeByRC in the smart contract implementation of the Ethereum token RC, which allows an attacker to transfer an...

Unauthorized Access Vulnerability in Byzoro Networks Smart Multiservice Security Gateway Intelligent Management Platform (CNVD-2021-46891)

Beijing Byzoro Networks Technology Co., Ltd hereinafter referred to as Byzoro Networks is a high-tech enterprise dedicated to building the next-generation secure Internet. An unauthorized access vulnerability exists in Byzoro's Smart Multi-service Security Gateway Intelligent Management Platform,...

CVE-2021-31769

MyQ Server in MyQ X Smart before 8.2 allows remote code execution by unprivileged users because administrative session data can be read in the %PROGRAMFILES%\MyQ\PHP\Sessions directory. The "Select server file" feature is only intended for administrators but actually does not require authorizatio...

Design/Logic Flaw

MyQ Server in MyQ X Smart before 8.2 allows remote code execution by unprivileged users because administrative session data can be read in the %PROGRAMFILES%\MyQ\PHP\Sessions directory. The "Select server file" feature is only intended for administrators but actually does not require authorizatio...

CVE-2021-31769

MyQ Server in MyQ X Smart before 8.2 allows remote code execution by unprivileged users because administrative session data can be read in the %PROGRAMFILES%\MyQ\PHP\Sessions directory. The "Select server file" feature is only intended for administrators but actually does not require authorizatio...