SmartPayment Number Error Vulnerability

SmartPayment is an Ether-based digital currency. An integer overflow vulnerability exists in the 'mintToken' function in SmartPayment's smart contract implementation. An attacker can exploit this vulnerability to set the balance of any user to an arbitrary value...

ZIBToken Integer Overflow Vulnerability

ZIBToken is an Ether-based digital currency. An integer overflow vulnerability exists in the 'mintToken' function in the smart contract implementation of ZIBToken. An attacker can exploit this vulnerability to set the balance of any user to an arbitrary value...

MaxHouse Number Error Vulnerability

MaxHouse is an Ether-based digital currency. An integer overflow vulnerability exists in the 'mintToken' function in MaxHouse's smart contract implementation. An attacker can exploit this vulnerability to set the balance of any user to an arbitrary value...

t_swap numeric error vulnerability

tswap is an ethereum-based digital currency. An integer overflow vulnerability exists in the 'mintToken' function in tswap's smart contract implementation. An attacker can exploit this vulnerability to set the balance of any user to an arbitrary value...

CryptonitexCoin Integer Overflow Vulnerability

CryptonitexCoin is an Ether-based digital currency. An integer overflow vulnerability exists in the 'mintToken' function in CryptonitexCoin's smart contract implementation. An attacker can exploit this vulnerability to set the balance of any user to an arbitrary value...

AzurionToken Integer Overflow Vulnerability

AzurionToken AZU is an Ether-based digital currency. An integer overflow vulnerability exists in the 'mintToken' function of the smart contract implementation in AZU. An attacker can exploit this vulnerability to set the balance of any user to an arbitrary value...

GZS Token Integer Overflow Vulnerability

GZS Token GZS is an Ether-based digital currency. An integer overflow vulnerability exists in the 'mintToken' function of the smart contract implementation in GZS. An attacker can exploit this vulnerability to set the balance of any user to an arbitrary value...

CVE-2017-6282

NVIDIA Tegra kernel driver contains a vulnerability in NVMAP where an attacker has the ability to write an arbitrary value to an arbitrary location which may lead to an escalation of privileges. This issue is rated as high...

CVE-2017-12343: Improper Neutralization of Input During Web Page Generation

Multiple vulnerabilities in Cisco Data Center Network Manager DCNM Software could allow a remote attacker to inject arbitrary values into DCNM configuration parameters, redirect a user to a malicious website, inject malicious content into a DCNM client interface, or conduct a cross-site scripting...

Legal Robot: Add arbitrary value in reset password cookie

I recently discovered that we can add arbitery value in reset pass token and compromise the life time unlimitedly .. After opening a reset password link I got these cookies ....for token expires timeout . "domain": ".app.legalrobot.com", "expirationDate": 1504618468.82726, "hostOnly": false,...

CVE-2017-1000016

A weakness was discovered where an attacker can inject arbitrary values in to the browser cookies. This is a re-issue of an incomplete fix from PMASA-2016-18...

CVE-2017-1000016: Improper Input Validation

A weakness was discovered where an attacker can inject arbitrary values in to the browser cookies. This is a re-issue of an incomplete fix from PMASA-2016-18...

phpMyAdmin 4.6.x < 4.6.3 Multiple Vulnerabilities

Binary data 9537.prm...

Illustrated CVE-2 0 1 5-1 8 0 5-vulnerability warning-the black bar safety net

CVE-2 0 1 5-1 8 0 5 is a General-purpose linux kernel to any address write arbitrary value of vulnerability, this vulnerability worthy of commemoration, here with four double figure intuitive description about it: ! The initial memory layout ! First copy ! redo the second copy after ! Third copy...

SA113 : January 2016 NTP Security Vulnerabilities

SUMMARY Blue Coat products using affected versions of the NTP software distribution from ntp.org are susceptible to multiple vulnerabilities. A remote attacker may exploit these vulnerabilities to set the victim's system time to an arbitrary value or cause it to become out of sync. The attacker c...

CVE-2011-3182

PHP before 5.3.7 does not properly check the return values of the malloc, calloc, and realloc library functions, which allows context-dependent attackers to cause a denial of service NULL pointer dereference and application crash or trigger a buffer overflow by leveraging the ability to provide a...

CVE-2011-3182

PHP before 5.3.7 does not properly check the return values of the malloc, calloc, and realloc library functions, which allows context-dependent attackers to cause a denial of service NULL pointer dereference and application crash or trigger a buffer overflow by leveraging the ability to provide a...

Memory overwrites in JVM via malformed TrueType font

Note: This advisory should have been published several months ago; apologies for the delay -- John Heasman ======= Summary ======= Name: Memory overwrites in JVM via malformed TrueType font Release Date: 29 October 2007 Reference: NGS00419 Discover: John Heasman [email protected] Vendor: Sun...