20 matches found
EUVD-2022-52278
Malicious code in bioql PyPI...
WordPress plugin Bonanza – WooCommerce Free Gifts Lite 安全漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...
CVE-2022-30335
Bonanza Wealth Management System BWM 7.3.2 allows SQL injection via the login form. Users who supply the application with a SQL injection payload in the User Name textbox could collect all passwords in encrypted format from the Microsoft SQL Server component...
Exploit for Missing Authorization in Wpexperts Post_Smtp
CVE-2023-6875 CVE-2023-6875 PoC This is the original proof...
bonanza.news Cross Site Scripting vulnerability OBB-2859452
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
CVE-2022-30335
Bonanza Wealth Management System BWM 7.3.2 allows SQL injection via the login form. Users who supply the application with a SQL injection payload in the User Name textbox could collect all passwords in encrypted format from the Microsoft SQL Server component...
CVE-2022-30335
Bonanza Wealth Management System BWM 7.3.2 allows SQL injection via the login form. Users who supply the application with a SQL injection payload in the User Name textbox could collect all passwords in encrypted format from the Microsoft SQL Server component...
CVE-2022-30335
Bonanza Wealth Management System BWM 7.3.2 allows SQL injection via the login form. Users who supply the application with a SQL injection payload in the User Name textbox could collect all passwords in encrypted format from the Microsoft SQL Server component...
CVE-2022-30335
CVE-2022-30335 affects Bonanza Wealth Management System (BWM) 7.3.2. The vulnerability is a SQL injection in the login form, exploitable via the User Name textbox, which could enable an attacker to collect all passwords in encrypted format from the Microsoft SQL Server component. The connected do...
CVE-2022-30335
Bonanza Wealth Management System BWM 7.3.2 allows SQL injection via the login form. Users who supply the application with a SQL injection payload in the User Name textbox could collect all passwords in encrypted format from the Microsoft SQL Server component...
Wealth Management System Bonanza Wealth Management SQL注入漏洞
Wealth Management System Bonanza Wealth Management System is a portfolio management analytics platform from Wealth Management System Ltd. A SQL injection vulnerability exists in Wealth Management System Bonanza Wealth Management System, which can be exploited by attackers to collect passwords in...
Logic Flaw Vulnerability in GOAL Bonanza
GOAL Bonanza GOAL is an ethereum-based virtual currency.A security vulnerability exists in the 'mintToken' function in GOAL's smart contract implementation. An attacker could exploit the vulnerability to increase the balance of a digital asset at any address...
Unspecified Vulnerability in GOAL Bonanza tradeTrap
GOAL Bonanza GOAL is a tradable Ether ERC20 token. A security vulnerability exists in the GOAL Bonanza tradeTrap. The vulnerability stems from the fact that GOAL Bonanza's smart contract implementation of the mintToken function has no expiration date constraints. The vulnerability can be exploite...
Information disclosure
The mintToken function of a smart contract implementation for GOAL Bonanza GOAL, a tradable Ethereum ERC20 token, has no period constraint, which allows the owner to increase the total supply of the digital assets arbitrarily so as to make profits, aka the "tradeTrap" issue...
CVE-2018-12083
The CVE-2018-12083 entry concerns GOAL Bonanza (GOAL), an Ethereum ERC20 token whose smart-contract mintToken function has no period constraint, enabling the owner to arbitrarily increase total supply. This minting oversight creates a supply manipulation risk described as the tradeTrap. Affected ...
CVE-2018-12083
The mintToken function of a smart contract implementation for GOAL Bonanza GOAL, a tradable Ethereum ERC20 token, has no period constraint, which allows the owner to increase the total supply of the digital assets arbitrarily so as to make profits, aka the "tradeTrap" issue...
Bonanza Mall App Registry has SMS Bombing Double Verification Vulnerability
Bonanza Mall APP is a shopping software. There is an SMS bombing double verification vulnerability in the registration of Bonong Mall APP. An attacker can exploit this vulnerability to replay packets sending verification codes without restriction and bombard the client with SMS messages...
Slots™ - Bonanza slot machines - Customized SSL, Dangerous filesystem permissions, Redefined SSL Common Names verifier vulnerabilities
HackApp vulnerability scanner discovered that application Slots™ - Bonanza slot machines published at the 'play' market has multiple vulnerabilities...
Free Slots Slot Bonanza - Exported ContentProvider, WebView code execution vulnerabilities
HackApp vulnerability scanner discovered that application Free Slots Slot Bonanza published at the 'play' market has multiple vulnerabilities...