1017 matches found
BlockDev Sp. Z o.o: Steal ALL collateral during liquidation by exploiting lack of validation in `flip.kick`
Summary: The flip contract allows for the MCD system to auction collateral in exchange for DAI. A lack of validation in the method flip.kick allows an attacker to create an auction with a fake bid value. Since the end contract trusts that value, it can be exploited to issue any amount of free DAI...
Dutch Auction Factory Component SQL Injection Vulnerability in Joomla!
Joomla! is a U.S. Open Source Matters team using PHP and MySQL development of a set of open source, cross-platform content management system CMS. Dutch Auction Factory is used in one of the auction site to create extensions . A SQL injection vulnerability exists in the Dutch Auction Factory...
Auction Factory SQL Injection Vulnerability
Joomla! is a U.S. Open Source Matters team using PHP and MySQL development of a set of open source , cross-platform content management system CMS. Auction Factory is used in one of the auction component . An SQL injection vulnerability exists in Joomla! The vulnerability stems from a lack of...
CVE-2018-17381
SQL Injection exists in the Dutch Auction Factory 2.0.2 component for Joomla! via the filterorderDir or filterorder parameter...
CVE-2018-17374
SQL Injection exists in the Auction Factory 4.5.5 component for Joomla! via the filterorderDir or filterorder parameter...
CVE-2018-17374
SQL Injection exists in the Auction Factory 4.5.5 component for Joomla! via the filterorderDir or filterorder parameter...
CVE-2018-17381
SQL Injection exists in the Dutch Auction Factory 2.0.2 component for Joomla! via the filterorderDir or filterorder parameter...
Sql injection
SQL Injection exists in the Dutch Auction Factory 2.0.2 component for Joomla! via the filterorderDir or filterorder parameter...
Sql injection
SQL Injection exists in the Auction Factory 4.5.5 component for Joomla! via the filterorderDir or filterorder parameter...
CVE-2018-17374
CVE-2018-17374 describes a SQL Injection in the Joomla! Auction Factory 4.5.5 component exposed through the filter_order_Dir or filter_order parameters. The vulnerability stems from unsafe handling of externally entered SQL statements in this component. According to the linked records, the CVE ha...
CVE-2018-17374
SQL Injection exists in the Auction Factory 4.5.5 component for Joomla! via the filterorderDir or filterorder parameter...
CVE-2018-17381
SQL Injection exists in the Dutch Auction Factory 2.0.2 component for Joomla! via the filterorderDir or filterorder parameter...
CVE-2018-17381
The CVE-2018-17381 vulnerability affects the Joomla! Dutch Auction Factory 2.0.2 component. A SQL Injection exists via the filter_order_Dir or filter_order parameter due to insufficient validation of externally supplied SQL statements in the database layer, enabling potentially unauthorized queri...
German SG-41 Encryption Machine Up for Auction
A German auction house is selling an SG-41. It looks beautiful. Starting price is 75,000 euros. My guess is that it will sell for around 100K euros...
World’s most dangerous laptop ‘Persistence of Chaos’ is up for auction
By Ryan De Souza The 'Persistence of Chaos' laptop is infected with some of the most dangerous malware including WannaCry. A Samsung’s 11-year old Notebook called the Persistence of Chaos is dubbed the most dangerous PC in the world because it is loaded with six of the most notorious and damaging...
WannaCry-Infested Laptop Starts at $1.13M in Art Auction
Malware as high art? Stranger things have happened, but a Windows laptop infected with six high-profile pieces of malware think WannaCry and BlackEnergy is nonetheless looking to fetch more than $1 million in public art-auction bids. A project called “The Persistence of Chaos,” mounted by artist...
PHP Scripts Mall Auction website script input validation vulnerability
PHP Scripts Mall Auction website script is an online auction website system by PHP Scripts Mall India. An input validation vulnerability exists in PHP Scripts Mall Auction website script version 2.0.4, which can be exploited by an attacker to modify the amount of payment...
Code injection
PHP Scripts Mall Auction website script 2.0.4 allows parameter tampering of the payment amount...