RandomizerNXT allows randomness re-rolling and also front-running.

Lines of code Vulnerability details Description When a collection uses RandomizerNXT as the randomizer, the process of minting and setting the token hash happens in the same transaction and block, which allows two attacks. First, a user can see the randomness outcome in mempool and front-run his...

bau-art-en.de Improper Access Control vulnerability OBB-3778016

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

art-mate.net Cross Site Scripting vulnerability OBB-3775669

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

[SECURITY] Fedora 39 Update: libcaca-0.99-0.69.beta20.fc39

libcaca is the Colour AsCii Art library. It provides high level functions for color text drawing, simple primitives for line, polygon and ellipse drawing, as well as powerful image to text conversion routines...

CVE-2023-44377

The connected PT-2023-29213 entry describes an unauthenticated SQL injection in Online Art Gallery version 1.0, caused by lack of input validation in the add3 parameter of header.php. This could allow arbitrary database queries if exploited. The recommended workaround is to restrict or avoid usin...

CVE-2023-44376

The connected PT-2023-29212 entry details an unauthenticated SQL Injection in Online Art Gallery version 1.0, specifically in the header.php resource via the add2 parameter which is not validated before a database write. Impact is typical SQLi risk allowing arbitrary queries if exploited; exploit...

CVE-2023-44375

CVE-2023-44375 entry is rejected and does not represent an active vulnerability entry.

CVE-2023-44162

CVE-2023-44162 is rejected/not used; this entry does not represent an active vulnerability.

CVE-2023-43738

CVE-2023-43738 is rejected/not used and does not represent an active vulnerability entry.

Number withdrawn

Projectworlds Online Art gallery project is an online art gallery project by Projectworlds India. This CVE number has been withdrawn...

PT-2023-29213 · Unknown · Online Art Gallery

Name of the Vulnerable Software and Affected Versions: Online Art Gallery version 1.0 Description: The issue concerns multiple Unauthenticated SQL Injection vulnerabilities. Specifically, the add3 parameter of the header.php resource does not validate the characters received, and they are sent...

Number withdrawn

Projectworlds Online Art gallery project is an online art gallery project by Projectworlds India. This CVE number has been withdrawn...

PT-2023-29212 · Unknown · Online Art Gallery

Name of the Vulnerable Software and Affected Versions: Online Art Gallery version 1.0 Description: The issue concerns multiple Unauthenticated SQL Injection vulnerabilities. Specifically, the add2 parameter of the header.php resource does not validate the characters received and they are sent...

Number withdrawn

Projectworlds Online Art gallery project is an online art gallery project by Projectworlds India. This CVE number has been withdrawn...

Number withdrawn

Projectworlds Online Art gallery project is an online art gallery project by Projectworlds India. This CVE number has been withdrawn...

Number withdrawn

Projectworlds Online Art gallery project is an online art gallery project by Projectworlds India. This CVE number has been withdrawn...

CVE-2023-43737

CVE-2023-43737 is noted as withdrawn in the initial description, but a connected PTSecurity entry (PT-2023-28957) provides concrete details: Online Art Gallery version 1.0 is affected by multiple unauthenticated SQL injection flaws in header.php via the fnm parameter, with unfiltered input sent t...

CVE-2023-44268

This CVE ID is rejected/not used and does not represent an active vulnerability entry.

CVE-2023-44267

Online Art Gallery v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'lnm' parameter of the header.php resource does not validate the characters received and they are sent unfiltered to the database...

CVE-2023-44267

Online Art Gallery v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'lnm' parameter of the header.php resource does not validate the characters received and they are sent unfiltered to the database...