EUVD-2018-4912

Malware in sbrugna...

Aditus Security Vulnerabilities

Aditus ADI is an ethereum-based digital currency.A security vulnerability exists in the 'approveAndCall' function in ADI's smart contract implementation. The vulnerability can be exploited by an attacker to steal assets e.g., transfer all contract balances to the attacker's account...

Code injection

The approveAndCall function of a smart contract implementation for Aditus ADI, an Ethereum ERC20 token, allows attackers to steal assets e.g., transfer all contract balances into their account...

CVE-2018-12959

The approveAndCall function of a smart contract implementation for Aditus ADI, an Ethereum ERC20 token, allows attackers to steal assets e.g., transfer all contract balances into their account...

CVE-2018-12959

The CVE-2018-12959 entry concerns the approveAndCall function of a smart contract implementation for Aditus (ADI), an Ethereum ERC20 token. The description states that this function allows attackers to steal assets (e.g., transfer all contract balances into their account). The connected documents...

CVE-2018-12959

The approveAndCall function of a smart contract implementation for Aditus ADI, an Ethereum ERC20 token, allows attackers to steal assets e.g., transfer all contract balances into their account...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in the GetURLArguments function in jpgraph.php in Aditus Consulting JpGraph 3.0.6 allow remote attackers to inject arbitrary web script or HTML via a key to csiminhtmlex1.php, and other unspecified vectors...

CVE-2009-4422

Multiple cross-site scripting XSS vulnerabilities in the GetURLArguments function in jpgraph.php in Aditus Consulting JpGraph 3.0.6 allow remote attackers to inject arbitrary web script or HTML via a key to csiminhtmlex1.php, and other unspecified vectors...

CVE-2009-4422

Multiple cross-site scripting XSS vulnerabilities in the GetURLArguments function in jpgraph.php in Aditus Consulting JpGraph 3.0.6 allow remote attackers to inject arbitrary web script or HTML via a key to csiminhtmlex1.php, and other unspecified vectors...

CVE-2009-4422

Multiple cross-site scripting XSS vulnerabilities in the GetURLArguments function in jpgraph.php in Aditus Consulting JpGraph 3.0.6 allow remote attackers to inject arbitrary web script or HTML via a key to csiminhtmlex1.php, and other unspecified vectors...

CVE-2009-4422

CVE-2009-4422 corresponds to multiple cross-site scripting (XSS) vulnerabilities in Aditus Consulting JpGraph 3.0.6, specifically in the GetURLArguments function inside jpgraph.php. The public description indicates remote attackers can inject arbitrary web script or HTML via a key to csim_in_html...

CVE-2009-4422

Multiple cross-site scripting XSS vulnerabilities in the GetURLArguments function in jpgraph.php in Aditus Consulting JpGraph 3.0.6 allow remote attackers to inject arbitrary web script or HTML via a key to csiminhtmlex1.php, and other unspecified vectors...

Remote file inclusion

PHP remote file inclusion vulnerability in lib/jpgraph/jpgrapherrhandler.inc.php in Sandbox 1.4.1 might allow remote attackers to execute arbitrary PHP code via unspecified vectors. NOTE: the issue, if any, may be located in Aditus JpGraph rather than Sandbox. If so, then this should not be treat...

CVE-2008-5694

PHP remote file inclusion vulnerability in lib/jpgraph/jpgrapherrhandler.inc.php in Sandbox 1.4.1 might allow remote attackers to execute arbitrary PHP code via unspecified vectors. NOTE: the issue, if any, may be located in Aditus JpGraph rather than Sandbox. If so, then this should not be treat...

CVE-2008-5694

CVE-2008-5694 describes a PHP remote file inclusion vulnerability in lib/jpgraph/jpgraph_errhandler.inc.php within Sandbox 1.4.1 (and possibly Aditus JpGraph). An attacker could cause arbitrary PHP code execution via unspecified vectors. The vulnerable component is the JPGraph-related error handl...