Lucene search
+L

1014 matches found

Code423n4
Code423n4
added 2021/06/01 12:0 a.m.10 views

Vaults are in liquidation forever instead of just for auction length

Handle cmichel Vulnerability details The witch can Witch.grab vaults and the vaultOwnersvaultId field is set to the original owner. The original vault owner is only restored if all debt balances.art is repaid by the liquidation engine. if balances.art - art == 0 // If there is no debt left, retur...

6.9AI score
SaveExploits0
Pen Test Partners Blog
Pen Test Partners Blog
added 2021/03/04 7:23 a.m.73 views

Grid. Locked.

In the UK we are used to having a reliable and stable electricity grid. So stable that you can keep time with it. Before quartz clocks became common, mains powered clocks used the electricity grid frequency of 50Hz as their time reference, you can still find the odd central heating timer or old...

6.8AI score
SaveExploits0
ThreatPost
ThreatPost
added 2021/02/10 9:20 p.m.57 views

Hacker Sets Alleged Auction for Witcher 3 Source Code

The ransomware gang behind an attack on videogame developer CD Projekt Red may have made good on its promise to auction off the company’s data – including source code for Cyberpunk 2077 and an unreleased version of the Witcher 3. Or it may not have. The Twitter account @vxunderground, which bills...

7.1AI score
SaveExploits0References6
Openbugbounty
Openbugbounty
added 2020/11/01 10:44 a.m.8 views

arizonarealtyauction.com Cross Site Scripting vulnerability OBB-1472667

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

SaveExploits0
Openbugbounty
Openbugbounty
added 2020/09/29 10:57 a.m.8 views

massautoauction.com Cross Site Scripting vulnerability OBB-1372155

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

6.2AI score
SaveExploits0
Openbugbounty
Openbugbounty
added 2020/09/04 11:11 a.m.7 views

massautoauction.com Cross Site Scripting vulnerability OBB-1301903

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

6.2AI score
SaveExploits0
Openbugbounty
Openbugbounty
added 2020/09/04 10:22 a.m.7 views

auction-warehouse.com Cross Site Scripting vulnerability OBB-1301662

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

6.2AI score
SaveExploits0
Openbugbounty
Openbugbounty
added 2020/07/29 6:0 a.m.7 views

arizonarealtyauction.com Cross Site Scripting vulnerability OBB-1241366

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

6.2AI score
SaveExploits0
Schneier on Security
Schneier on Security
added 2020/07/14 11:17 a.m.21 views

Enigma Machine for Sale

A four-rotor Enigma machine -- with rotors -- is up for auction...

4.1AI score
SaveExploits0
Securelist
Securelist
added 2020/07/08 12:0 p.m.29 views

Redirect auction

Weve already looked at links under old YouTube videos or in Wikipedia articles which at some point turned bad and began pointing to partner program pages, phishing sites, or even malware. It was as if the attackers were purposely buying up domains, but such a scenario always seemed to us too...

7.3AI score
SaveExploits0
ThreatPost
ThreatPost
added 2020/06/29 9:3 p.m.37 views

REvil Ransomware Gang Adds Auction Feature for Stolen Data

The REvil ransomware gang also known as Sodinokibi has added an auction feature to its underground website that allows anonymous bidding on information stolen in its targeted ransomware campaigns. The auction capability appeared at the beginning of June, according to an analysis from Cyberint. In...

7.3AI score
SaveExploits0References9
Gitee
Gitee
added 2020/06/11 10:0 p.m.4 views

EQGRP

This is a repository containing the decrypted content of eqgrp-auction-file.tar.xz. The repository includes three files: Linux/bin/7z, Linux/bin/7z.so, and Linux/bin/7za. These files are likely related to the 7-Zip file archiver. The files are in ELF Executable and Linkable Format format, which i...

6.7AI score
SaveExploits0
Krebs on Security
Krebs on Security
added 2020/06/02 6:4 p.m.37 views

REvil Ransomware Gang Starts Auctioning Victim Data

The criminal group behind the REvil ransomware enterprise has begun auctioning off sensitive data stolen from companies hit by its malicious software. The move marks an escalation in tactics aimed at coercing victims to pay up -- and publicly shaming those who don't. But it may also signal that...

6.8AI score
SaveExploits0
Gitee
Gitee
added 2020/04/20 10:54 a.m.2 views

EQGRP

This is a repository containing the decrypted contents of a file named "eqgrp-auction-file.tar.xz". The repository includes three files: "Linux/bin/7z", "Linux/bin/7z.so", and "Linux/bin/7za". These files are likely related to the 7-Zip file archiver. The "Linux/bin/7z" file is an ELF Executable...

6.9AI score
SaveExploits0
Patchstack
Patchstack
added 2020/01/09 12:0 a.m.12 views

WordPress Ultimate Auction plugin <= 4.0.5 - Multiple CSRF & XSS vulnerabilities

Multiple CSRF & XSS vulnerabilities found in WordPress Ultimate Auction plugin versions = 4.0.5. Solution Update the WordPress Ultimate Auction plugin to the latest available version at least 4.0.6...

3.7AI score
SaveExploits0References1Affected Software1
WPVulnDB
WPVulnDB
added 2019/12/18 12:0 a.m.12 views

Ultimate Auction < 4.0.6 - Multiple CSRF & XSS

Multiple CSRF and XSS issues were fixed in v4.0.6...

2.2AI score
SaveExploits0References1Affected Software1
Hacker One
Hacker One
added 2019/08/29 7:18 a.m.34 views

BlockDev Sp. Z o.o: Steal all MKR from `flap` during liquidation by exploiting lack of validation in `flap.kick`

Summary: The flap contract provides the ability to auction DAI for MKR. That's a fundamental functionality of the MCD system, invoked usually from the vow contract. A flaw in the validation of calls to flap.kick, however, allows a malicious user to create "fake' auctions that can be later used to...

0.4AI score
SaveExploits0
Hacker One
Hacker One
added 2019/08/29 2:40 a.m.38 views

BlockDev Sp. Z o.o: Steal ALL collateral during liquidation by exploiting lack of validation in `flip.kick`

Summary: The flip contract allows for the MCD system to auction collateral in exchange for DAI. A lack of validation in the method flip.kick allows an attacker to create an auction with a fake bid value. Since the end contract trusts that value, it can be exploited to issue any amount of free DAI...

1.1AI score
SaveExploits0
CNVD
CNVD
added 2019/06/21 12:0 a.m.1 views

Dutch Auction Factory Component SQL Injection Vulnerability in Joomla!

Joomla! is a U.S. Open Source Matters team using PHP and MySQL development of a set of open source, cross-platform content management system CMS. Dutch Auction Factory is used in one of the auction site to create extensions . A SQL injection vulnerability exists in the Dutch Auction Factory...

9.8CVSS8.1AI score0.02338EPSS
SaveExploits1References1
CNVD
CNVD
added 2019/06/21 12:0 a.m.5 views

Auction Factory SQL Injection Vulnerability

Joomla! is a U.S. Open Source Matters team using PHP and MySQL development of a set of open source , cross-platform content management system CMS. Auction Factory is used in one of the auction component . An SQL injection vulnerability exists in Joomla! The vulnerability stems from a lack of...

9.8CVSS8.2AI score0.02338EPSS
SaveExploits1References1
Rows per page
Query Builder