CVE-2020-25375

WP SMART CRM (SoftradeWeb SNC) version 1.8.7 is affected by stored Cross Site Scripting via multiple customer fields (Business Name, Tax Code, First Name, Address, Town, Phone, Mobile, Place of Birth, Web Site, VAT Number, Last Name, Fax, Email, Skype). Root cause: inadequate input sanitization i...

PT-2020-16072 · Softradeweb Snc · Wp Smart Crm

Name of the Vulnerable Software and Affected Versions: WP SMART CRM version 1.8.7 Description: The issue affects the Wordpress Plugin Store / SoftradeWeb SNC WP SMART CRM, where Cross Site Scripting is possible via several fields, including the Business Name field, Tax Code field, First Name fiel...

360lock Smart Lock Review

Two years ago I helped kick start a smart lock, the 360lock. It finally arrived this week. It has different modules like a keybox below and a bike chain. I originally live tweeted the hack on Tuesday Sep 8, 2020. So, how good is it? Blockchain integration! According to the website the 360lock has...

Carrot Number Error Vulnerability

Carrot is an ethereum-based digital currency. An integer overflow vulnerability exists in the 'mintToken' function in Carrot's smart contract implementation. An attacker can exploit this vulnerability to set the balance of any user to an arbitrary value...

DaddyToken Number Error Vulnerability

DaddyToken is an ethereum-based digital currency. An integer overflow vulnerability exists in the 'mintToken' function in DaddyToken's smart contract implementation. An attacker can exploit this vulnerability to set the balance of any user to an arbitrary value...

FILM NUMBER ERROR VULNERABILITY

FILM is an ethereum-based digital currency. An integer overflow vulnerability exists in the 'mintToken' function in the smart contract implementation of FILM. An attacker can exploit this vulnerability to set the balance of any user to an arbitrary value...

CVE-2020-15786

A vulnerability has been identified in SIMATIC HMI Basic Panels 2nd Generation incl. SIPLUS variants All versions V16, SIMATIC HMI Comfort Panels incl. SIPLUS variants All versions = V16, SIMATIC HMI Mobile Panels All versions = V16, SIMATIC HMI Unified Comfort Panels All versions = V16. Affected...

BitCoinAgileToken Digital Error Vulnerability

BitcoinAgileToken is an Ether-based digital currency. An integer overflow vulnerability exists in the 'mintToken' function in the smart contract implementation of BitcoinAgileToken. An attacker can exploit this vulnerability to set the balance of any user to an arbitrary value...

OllisCoin Digital Error Vulnerability

OllisCoin is an ethereum-based digital currency. An integer overflow vulnerability exists in the 'mintToken' function in OllisCoin's smart contract implementation. An attacker can exploit this vulnerability to set the balance of any user to an arbitrary value...

PlatoToken Number Error Vulnerability

PlatoToken is an ethereum-based digital currency. An integer overflow vulnerability exists in the 'mintToken' function in PlatoToken's smart contract implementation. An attacker can exploit this vulnerability to set the balance of any user to an arbitrary value...

HELP Digit Error Vulnerability

HELP is an ethereum-based digital currency. An integer overflow vulnerability exists in the 'mintToken' function in the smart contract implementation of HELP. An attacker can exploit this vulnerability to set the balance of any user to an arbitrary value...

Crypto Alley Shares Number Error Vulnerability

Crypto Alley Shares CAST is an Ether-based digital currency. An integer overflow vulnerability exists in the 'mintToken' function in CAST's smart contract implementation. An attacker can exploit the vulnerability to set the balance of any user to an arbitrary value...

TRIUM Input Validation Error Vulnerability

TRIUM is an Ether-based digital currency. An integer overflow vulnerability exists in the 'mintToken' function in TRIUM's smart contract implementation. An attacker can exploit this vulnerability to set the balance of any user to an arbitrary value...

CVE-2020-14335

A flaw was found in Red Hat Satellite, which allows a privileged attacker to read OMAPI secrets through the ISC DHCP of Smart-Proxy. This flaw allows an attacker to gain control of DHCP records from the network. The highest threat from this vulnerability is to system availability. Mitigation...

New PIN Verification Bypass Flaw Affects Visa Contactless Payments

Even as Visa issued a warning about a new JavaScript web skimmer known as Baka, cybersecurity researchers have uncovered an authentication flaw in the company's EMV enabled payment cards that permits cybercriminals to obtain funds and defraud cardholders as well as merchants illicitly. The...

smart-hr.org Cross Site Scripting vulnerability OBB-1305551

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

CVE-2020-9083

CVE-2020-9083 affects Huawei Mate 20 smartphones running versions earlier than 10.1.0.163 (C00E160R3P8). The DoS arises from insufficient verification when the attacker enters a large amount of text, potentially impacting service availability. Connected documents corroborate the vulnerability des...

The vulnerability of the Cisco Smart Software Manager On-Premium license management software, related to deficiencies in access control, allows a perpetrator to increase their privileges.

The vulnerability of the Cisco Smart Software Manager On-Prem licensing management software is related to deficiencies in access control. Exploiting this vulnerability can allow a malicious actor to enhance their privileges remotely...

GHSA-F8H3-RQRM-47V9 Prototype Pollution in smart-extend

All versions of smart-extend are vulnerable to Prototype Pollution. The deep function allows attackers to modify the prototype of Object causing the addition or modification of an existing property that will exist on all objects. Recommendation No fix is currently available. Consider using an...

Prototype Pollution in smart-extend

All versions of smart-extend are vulnerable to Prototype Pollution. The deep function allows attackers to modify the prototype of Object causing the addition or modification of an existing property that will exist on all objects. Recommendation No fix is currently available. Consider using an...