Treasury accounting miss voters rewards

Lines of code Vulnerability details treasury is overstated over time as each distribution period it adds back the delegate rewards part, which is actually spent on voters rewards. I.e. it is updated with fundsAvailable - totalTokensRequested difference, while totalTokensRequested is limited to 90...

CVE-2023-26860

SQL injection vulnerability found in PrestaShop Igbudget v.1.0.3 and before allow a remote attacker to gain privileges via the LgBudgetBudgetModuleFrontController::displayAjaxGenerateBudget component...

PT-2023-20831 · Prestashop · Prestashop Igbudget

Name of the Vulnerable Software and Affected Versions: PrestaShop Igbudget versions 1.0.3 and earlier Description: A SQL injection issue allows a remote attacker to gain privileges via the LgBudgetBudgetModuleFrontController::displayAjaxGenerateBudget component. This enables the attacker to...

PrestaShop SQL注入漏洞

PrestaShop is an open source e-commerce solution from PrestaShop, Inc. in the United States. The solution provides multiple payment methods, short message alerts and product image scaling. A security vulnerability exists in PrestaShop Igbudget version v.1.0.3 and earlier versions. An attacker...

CVE-2023-26858

SQL injection vulnerability found in PrestaSHp faqs v.3.1.6 allows a remote attacker to escalate privileges via the faqsBudgetModuleFrontController::displayAjaxGenerateBudget component...

PrestaSHp faqs SQL注入漏洞

PrestaSHp faqs is a FAQ page from PrestaSHp. A security vulnerability exists in PrestaSHp faqs version v.3.1.6, which stems from the discovery of a contained elevation of privilege vulnerability via the faqsBudgetModuleFrontController::displayAjaxGenerateBudget component...

Learn what an AI-driven future means for cybersecurity at Microsoft Secure

Maintaining security across today’s vast digital ecosystem is a team effort. AI and machine learning have helped to detect threats quickly and respond effectively. Yet we all know that the best defense still requires human wisdom and experience. From a frontline security operations admin to the...

Introducing Malware Protection for Scanning File Uploads

With Malware Protection, you can scan once at the edge and prevent malware from draining your time and budget...

Deny of service in CCash.sol with "transfer" which can be unusable for smart contract calls

Lines of code Vulnerability details Impact The CCash.doTransferOut method is susceptible to denial of service. Proof of Concept The logic of the doTransferOut method in CCash is as follows: The whole user withdraw is being handled with a token.transfer call. This is unsafe as transfer has hard...

4 Cybersecurity Budget Management Tips

Learn how CISOs and security leaders can strategically manage their cybersecurity budget to run more productive security teams amid a recession and skills shortage...

Command Execution Vulnerabilities in the Budget Networking Supervision System of the National People's Congress of Beijing UFIDA Government Affairs Software Co.

Beijing UFIDA Government Software Co., Ltd. is a comprehensive business management information solution provider for government departments, institutions and non-profit organizations. A command execution vulnerability exists in the NPC Budget Networking Supervision System of Beijing UFIDA...

Can Cloud Security Be Easier Than Complex?

A bigger piece of the meal For those in the United States and certain parts of the world, it’s time for end-of-year holidays. That means lots and lots of big meals to celebrate these special occasions. Each dish created becomes part of that larger meal. Another important event that occurs around...

kernel: bfq: Update cgroup information before merging bio

In the Linux kernel, the following vulnerability has been resolved: bfq: Update cgroup information before merging bio When the process is migrated to a different cgroup or in case of writeback just starts submitting bios associated with a different cgroup bfqmergebio can operate with stale cgroup...

7 Ways Imperva Solutions Reduce the Cost of Data Security

As we push into Q4, economic uncertainty caused by rising interest rates, as-yet unchecked inflation, and a bear market is driving many enterprises to buck the trend and tighten cyber security budgets for the last three months of 2022. The result is increased pressure to achieve data security whi...

Local government cybersecurity: 5 best practices

It seems like not a day goes by where we dont hear about a local government cyberattack. Indeed, from 911 call centers to public schools, cyberattacks on local governments are as common as they are devastating. Just how often do threat actors attack local governments? A survey of 14 mainly larger...

4 Cybersecurity Budget Management Tips

Learn how CISOs can strategically manage their cybersecurity budget to run more productive cybersecurity teams amid a skills shortage...

CVE-2022-38509

Wedding Planner v1.0 was discovered to contain a SQL injection vulnerability via the bookingid parameter at /admin/budget.php...

Software supply chain security is coming of age

Coalfires first Securealities Software Supply Chain Risk Report revealed dramatic budget increases for enterprise security in general and a growing demand for more testing, training, and process improvements in the battle to defend digital assets. But perhaps the most significant takeaway from th...

Wedding Planner SQL注入漏洞

Wedding Planner is a wedding planner program by pushpam abhishek. Designed to provide users with an easy way to plan their weddings through a web application while using real data. A security vulnerability exists in Wedding Planner v1.0, which stems from an SQL injection that can be achieved by a...

PT-2022-34199 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.4.212 Description: A data-race issue exists around netdev budget. The actual impact and attack plausibility have not yet been proven. This issue was introduced in version v2.6.13 and is fixed in Linux Kernel...