smart-textiles.com Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1162243 Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website...

This Week in Security News: How Researchers Used an App Store to Demonstrate Hacks on a Factory and Microsoft Again Surpasses 100 Vulnerabilities on Patch Tuesday

Welcome to our weekly roundup, where we share what you need to know about the cybersecurity news and events that happened over the past few days. This week, read about how researchers at Trend Micro used an app store to demonstrate hacks on a manufacturing facility. Also, learn about this month’s...

CERB_Coin Numeric Error Vulnerability

CERBCoin is an ethereum-based digital currency. An integer overflow vulnerability exists in the 'mintToken' function in CERBCoin's smart contract implementation. An attacker can exploit this vulnerability to set the balance of any user to an arbitrary value...

Unauthorized Access Vulnerability in Huawei Honor Smart Screen

Huawei Honor Smart Screen is a large screen product using Huawei HarmonyOS Harmony System. Huawei Honor Smart Screen has an unauthorized access vulnerability that can be exploited by attackers to obtain sensitive information...

GROWCHAIN Number Error Vulnerability

GROWCHAIN GROW is an ethereum-based digital currency.An integer overflow vulnerability exists in the 'sell' function in GROW's smart contract implementation. A remote attacker could exploit this vulnerability to set a user's balance to an arbitrary value...

Business Alliance Financial Circle has a logic flaw vulnerability

Business Alliance Financial Circle BAFC is a cryptocurrency.A security vulnerability exists in the 'UBSexToken' function in BAFC's smart contract implementation, which stems from the fact that the function is publicly available and does not check the identity of the caller. The vulnerability can ...

SunContract Digital Error Vulnerability

SunContract is a digital currency.An integer overflow vulnerability exists in the 'mintToken' function in SunContract's smart contract. A remote attacker can exploit this vulnerability to set the balance of any user to an arbitrary value...

Logic Flaw Vulnerability in HashHeroes Tiles

A security vulnerability exists in the 'determineWinner' function in the smart contract implementation of HashHeroes Tiles, an ethereum-based guessing game. An attacker could exploit this vulnerability to control the awarding of prizes by being the last user to make a purchase...

Primeo has a flawed logic vulnerability

Primeo PEO is an ethereum-based digital currency.A security vulnerability exists in the 'doAirdrop' function in the smart contract implementation of Primeo PEO. An attacker could exploit the vulnerability to issue any number of virtual currencies...

JavaSwapTest Number Error Vulnerability

JavaSwapTest JST is an ethereum-based digital currency.An integer overflow vulnerability exists in the 'mintToken' function of JST's smart contract implementation. A remote attacker could exploit this vulnerability to set a user's balance to an arbitrary value...

Coinlancer has a flawed logic vulnerability

Coinlancer CL is an ethereum-based digital currency.A security vulnerability exists in the onlyOwner modifier of CL's smart contract implementation, which stems from the program not correctly comparing msg.sender and owner.An attacker could exploit this vulnerability to execute arbitrary code...

DDQ Authorization Issues Vulnerability

DDQ is a cryptocurrency.A security vulnerability exists in the 'owned' function of DDQ's smart contract implementation, which stems from the fact that the function does not check the identity of the caller. An attacker could use the vulnerability to modify the owner of a smart contract...

NewIntelTechMedia License Issues Vulnerabilities

NewIntelTechMedia NETM is a cryptocurrency.A security vulnerability exists in the 'NETM' function in NETM's smart contract implementation, which stems from the fact that the function does not check the identity of the caller. An attacker could use the vulnerability to modify the owner of the smar...

PFGc Number Error Vulnerability

PFGc is an ethereum-based digital currency.An integer overflow vulnerability exists in the smart contract implementation of PFGc in the 'transfer', 'transferFrom', and 'mint ' functions in the PFGc smart contract implementation suffer from an integer overflow vulnerability. An attacker could...

CryptoBotsBattle Digital Error Vulnerability

CryptoBotsBattle CBTB is an ethereum-based digital currency.An integer overflow vulnerability exists in the 'batchTransfer' function of CBTB's smart contract implementation. An attacker could exploit the vulnerability to create an arbitrary number of tokens for any user...

BOMBBA Authorization Issue Vulnerability

BOMBBA BOMB is a cryptocurrency.A security vulnerability exists in the 'quaker' function of BOMB's smart contract implementation, which stems from the fact that the function does not check the identity of the caller. An attacker could use the vulnerability to modify the owner of the smart contrac...

S. Siedle & Soehne SG 150-0 Smart Gateway Competitive Conditions Issue Vulnerability

S.Siedle & Soehne SG 150-0 Smart Gateway is a home smart gateway product from S.Siedle & Soehne, Germany. A security vulnerability exists in the S.Siedle & Soehne SG 150-0 Smart Gateway versions prior to 1.2.4. The vulnerability can be exploited by an attacker to gain root access to the gateway...

smart-lighting.com.tw Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1157483 Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website...

CVE-2020-9474

The S. Siedle & Soehne SG 150-0 Smart Gateway before 1.2.4 allows remote code execution via the backup functionality in the web frontend. By using an exploit chain, an attacker with access to the network can get root access on the gateway...

CVE-2020-9475

The S. Siedle & Soehne SG 150-0 Smart Gateway before 1.2.4 allows local privilege escalation via a race condition in logrotate. By using an exploit chain, an attacker with access to the network can get root access on the gateway...