PT-2024-1507 · WordPress · Web3

Name of the Vulnerable Software and Affected Versions: Web3 WordPress plugin versions prior to 3.0.0 Description: The issue is related to an authentication bypass due to incorrect authentication checking in the login flow. This is caused by vulnerabilities in the handle auth request and handle...

Web3 – Crypto wallet Login & NFT token gating < 3.0.0 - Authentication Bypass

Description The plugin is vulnerable to an authentication bypass due to incorrect authentication checking in the login flow in functions 'handleauthrequest' and 'hadleloginrequest'. This makes it possible for non authenticated attackers to log in as any existing user on the site, such as an...

PT-2023-31464 · Galxe · Galxe

Name of the Vulnerable Software and Affected Versions: Galxe platform version 1.0 Description: The issue allows a remote attacker to obtain sensitive information via the Web3 authentication process of Galxe. The signed message lacks a nonce, which is a random number. This lack of a nonce enables ...

Malicious code in web3-core-subscription (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 29bb5d3d302e021e8dddaaafa92aa8444f3496917be02b290087b0c9bd4c4b54 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-8699 Malicious code in web3-core-subscription (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 29bb5d3d302e021e8dddaaafa92aa8444f3496917be02b290087b0c9bd4c4b54 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Particle Network’s Intent-Centric Approach Aims to Simplify and Secure Web3

By Owais Sultan Discover Particle Networks Web3 evolution! From a Wallet-as-a-Service tool to the Intent-Centric Modular Access Layer, explore the platforms… This is a post from HackRead.com Read the original post: Particle Networks Intent-Centric Approach Aims to Simplify and Secure Web3...

Crimeware and financial cyberthreats in 2024

At Kaspersky, we constantly monitor the financial cyberthreat landscape, which includes threats to financial institutions, such as banks, and financially motivated threats, such as ransomware, that target a broader range of industries. As part of our Kaspersky Security Bulletin, we try to predict...

READYgg Onboards 15 Million Web2 Players into Web3 in Partnership with Aptos Labs

By Owais Sultan Millions of players will enter web3 gaming thanks to a new partnership between READYgg and Aptos Labs realized… This is a post from HackRead.com Read the original post: READYgg Onboards 15 Million Web2 Players into Web3 in Partnership with Aptos Labs...

lahno-web3.de Improper Access Control vulnerability OBB-3768454

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

MAL-2023-8326 Malicious code in web3-abi (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7f4a779c84bc2b1936964dfbf4fc200f36f4dc6fb95b0a426c8a0e48459f2f30 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in web3-abi (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7f4a779c84bc2b1936964dfbf4fc200f36f4dc6fb95b0a426c8a0e48459f2f30 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

How looking at decades of spam led Jaeson Schultz from Y2K to the metaverse and cryptocurrency

At this point in his career, Jaeson Schultz has seen nearly every type of online scam there is to see. From fake bomb threats at schools, to "sextortion" campaigns, cryptocurrency mining, metaverse and more of the 2010s, to the earliest type of spam emails in the 1990s that promised to protect...

Malicious code in web3-react-core (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 00a1d6d62c15a7112e41d1d0c71d79e1698232823cc6c88f392bbef2e2a772ec Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-8079 Malicious code in web3-react-core (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 00a1d6d62c15a7112e41d1d0c71d79e1698232823cc6c88f392bbef2e2a772ec Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-8071 Malicious code in eth-web3-tx (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9c442b5b546b5967c812942b37c649d2e7caa2675e942bd96ddf40cbee1174f9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in eth-web3-tx (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9c442b5b546b5967c812942b37c649d2e7caa2675e942bd96ddf40cbee1174f9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Incorrect delegate token URI in MarketMetadata.sol.

Lines of code Vulnerability details Impact Web3 logic may be error prone by the wrong delegate token URL. Proof of Concept In DelegateToken.tokenURL, MarketMetadata.delegateTokenURI is called. MarketMetadata.delegateTokenURI is as follows. File: MarketMetadata.sol 37: function...

GAM3S.GG Raises $2M to Grow Web3 Gaming Superapp

By Owais Sultan GAM3S.GG Secures $2M Seed Funding Led by Mechanism Capital to Grow Web3 Gaming Superapp. This is a post from HackRead.com Read the original post: GAM3S.GG Raises $2M to Grow Web3 Gaming Superapp...

Malicious code in web3-provider-patchers (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8a3da847a0100e6d34ec1eaaf261644c00fcc8342f19bf86f01da33f61a7fb9d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-7961 Malicious code in web3-provider-patchers (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8a3da847a0100e6d34ec1eaaf261644c00fcc8342f19bf86f01da33f61a7fb9d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...