126 matches found
terra-ruhr.de Cross Site Scripting vulnerability OBB-2715553
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
MAL-2022-6460 Malicious code in terra-view-function-adapter (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c00058bf42508940f7138ab18f39487a17faa6709662f091634526b5ab4ee450 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in terra-view-function-adapter (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c00058bf42508940f7138ab18f39487a17faa6709662f091634526b5ab4ee450 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in gauntlet-terra (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 21e5d56efa6b8860e9da03861e123741d08d1fcac9abbf54cdaf93ab1aca934f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2022-3295 Malicious code in gauntlet-terra (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 21e5d56efa6b8860e9da03861e123741d08d1fcac9abbf54cdaf93ab1aca934f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Exploit for Missing Authentication for Critical Function in Terra-Master Terramaster_Operating_System
It is an exploit module for CVE-2022-24990, a TerraMaster TOS Un...
Exploit for Missing Authentication for Critical Function in Terra-Master Terramaster_Operating_System
CVE-2022-24990 CVE-2022-24990: Information lea...
Exploit for Missing Authentication for Critical Function in Terra-Master Terramaster_Operating_System
CVE-2022-24990-POC It’s just a poc; it’s not an exploit...
[WP-H0] When transferring tokens not in whitelist on Ethereum to Terra with CrossAnchorBridge.depositStable(), the funds may get frozen
Lines of code Vulnerability details In the current implementation of CrossAnchorBridge, all require that "Check that token is a whitelisted token" is commented out. As a result, users may send transcations with the non-whitelisted tokens and as they can not be processd properly on the Terra side,...
Missing allowlist checks on tokens in CrossAnchorBridge could cause loss of funds
Lines of code Vulnerability details Impact The CrossAnchorBridge contract accepts any ERC20 token and transfers them to the wormhole bridge. There were allowlist checks on the tokens before, but they were commented out in this version for the audit. If a user transfers, for example, non-supported...
download.terra-master.com Cross Site Scripting vulnerability OBB-1366735
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
TerraMaster TOS System Command Injection Vulnerability (CNVD-2019-00665)
TerraMaster TOS is a set of storage server special operating system based on Linux platform developed by Terra Master. The system supports file sharing, cloud data synchronization, data backup and virtualization. A system command injection vulnerability exists in the ajaxdata.php endpoint in...
CVE-2018-13418
System command injection in ajaxdata.php in TerraMaster TOS 3.1.03 allows attackers to execute system commands via the "newname" parameter...
CVE-2018-13336
System command injection in ajaxdata.php in TerraMaster TOS version 3.1.03 allows attackers to execute system commands via the "pwd" parameter during user creation...
CVE-2018-13350
SQL injection in logtable.php in TerraMaster TOS version 3.1.03 allows attackers to execute SQL queries via the "Event" parameter...
CVE-2018-13334
Cross-site scripting in handle.php in TerraMaster TOS version 3.1.03 allows attackers to execute JavaScript via the "optionssysname" parameter...
terra-mundi.com XSS vulnerability
Open Bug Bounty ID: OBB-575233 Description| Value ---|--- Affected Website:| terra-mundi.com Open Bug Bounty Program:| Not created yet Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N...
Terra Battle - Base64 encoded String, Customized SSL, WebView SSL handling enabled vulnerabilities
HackApp vulnerability scanner discovered that application Terra Battle published at the 'play' market has multiple vulnerabilities...
Terra Monsters 2 - Dynamic Code Loading, External URLs, Native code usage vulnerabilities
HackApp vulnerability scanner discovered that application Terra Monsters 2 published at the 'play' market has multiple vulnerabilities...
Wordpress Theme Terra Arbitrary File Download Vulnerability
Exploit for php platform in category web applications Exploit Title: Wordpress Theme Terra Arbitrary File Download Vulnerability Date: 18/01/2015 Exploit Author: t3rr0rist - GHC Georgian Hacking Community team Contact : email protected Tested on: Linux Google Dork: inurl:"wp-content/themes/terra/...