CVE-2022-29746

Money Transfer Management System 1.0 is vulnerable to SQL Injection via /mtms/classes/Users.php?f=delete...

CVE-2022-1650

Improper Removal of Sensitive Information Before Storage or Transfer in GitHub repository eventsource/eventsource prior to v2.0.2...

Input validation

Improper Removal of Sensitive Information Before Storage or Transfer in GitHub repository eventsource/eventsource prior to v2.0.2...

CVE-2022-1650

Improper Removal of Sensitive Information Before Storage or Transfer in GitHub repository eventsource/eventsource prior to v2.0.2...

no-revert-on-transfer ERC20 tokens can be drained

Lines of code Vulnerability details Impact Some ERC20 tokens don't throw but just return false when a transfer fails. This can be abused to trick the createVault function to initialize the vault without providing any tokens. A good example of such a token is ZRX: Etherscan code When such a vault ...

Protocol does not support fee-on-transfer tokens

62 comment Warden: cmichel Protocol does not support fee-on-transfer tokens, see addLiquidity and LiquidityPool.depositErc20. The amount value is stored and available to be withdrawn later but the contract receives amount - fees. Note that there are tokenCheckstokenAddress and the protocol would...

CVE-2022-29746: Improper Neutralization of Special Elements used in an SQL Command

Money Transfer Management System 1.0 is vulnerable to SQL Injection via /mtms/classes/Users.php?f=delete...

CVE-2022-1650 Improper Removal of Sensitive Information Before Storage or Transfer in eventsource/eventsource

Improper Removal of Sensitive Information Before Storage or Transfer in GitHub repository eventsource/eventsource prior to v2.0.2...

CVE-2022-29741: Improper Neutralization of Special Elements used in an SQL Command

Money Transfer Management System 1.0 is vulnerable to SQL Injection via \mtms\classes\Master.php?f=deletefee...

CVE-2022-29739: Improper Neutralization of Special Elements used in an SQL Command

Money Transfer Management System 1.0 is vulnerable to SQL Injection via /mtms/admin/?page=user/manageuser&id=...

PT-2022-19809

Name of the Vulnerable Software and Affected Versions Money Transfer Management System version 1.0 Description The issue concerns SQL Injection via the "/mtms/admin/?page=transaction/send&id=" endpoint, where the id variable is vulnerable. This allows for potential manipulation of database querie...

batdappboomx 安全漏洞

batdappboomx is a public smart contract. A security vulnerability exists in batdappboomx version v327c04cf, which stems from an access control issue in the transfer function of the smart contract. A remote attacker can exploit this vulnerability to win cryptocurrency without paying a ticket fee v...

CVE-2022-29738: Improper Neutralization of Special Elements used in an SQL Command

Money Transfer Management System 1.0 is vulnerable to SQL Injection via /mtms/admin/?page=transaction/send&id=, id...

PT-2022-18242

Name of the Vulnerable Software and Affected Versions EOSIO batdappboomx version v327c04cf Description The issue concerns an Access-control vulnerability in the transfer function of the smart contract. This vulnerability allows remote attackers to win cryptocurrency without paying the ticket fee ...

PT-2022-19811

Name of the Vulnerable Software and Affected Versions Money Transfer Management System version 1.0 Description The issue concerns a SQL Injection vulnerability. It can be exploited via the Master.php file, specifically through the f parameter set to delete fee. Recommendations For Money Transfer...

CVE-2022-1650

Improper Removal of Sensitive Information Before Storage or Transfer in GitHub repository eventsource/eventsource prior to v2.0.2...

ZTE ZXMP M721 权限许可和访问控制问题漏洞

The ZTE ZXMP M721 is a metro edge OTN Optical Transport Network device from ZTE Corporation ZTE in China.The ZTE ZXMP M721 has a privilege and access control vulnerability, which stems from the fact that the folder privilege viewed by sftp is 666, which is inconsistent with the actual privilege,...

Money Transfer Management System SQL注入漏洞

Money Transfer Management System is a remittance management system.Money Transfer Management System 1.0 is vulnerable to SQL injection, which can be exploited by attackers to obtain information about data in the target system...

Money Transfer Management System SQL注入漏洞

Money Transfer Management System is a money transfer management system. Money Transfer Management System 1.0 suffers from a SQL injection vulnerability that originates from a SQL injection point in the /mtms/admin/?page=user/manageuser&id= path in the Insurance Management System system, which can...

Money Transfer Management System SQL注入漏洞

Money Transfer Management System is a remittance management system.Money Transfer Management System 1.0 is vulnerable to SQL injection, which can be exploited by attackers to obtain information about data in the target system...