FedRAMP 101: How to get listed as “In Process”

Are you a cloud service provider working on a federal contract and need a FedRAMP authorization - but dont have a sponsor yet? Acquiring a committed government agency sponsor early in the FedRAMP process is crucial to your success and will ensure a smoother process. A major role for an agency...

Pandora Digital Error Vulnerability

Pandora PDX is an ethereum-based digital currency.An integer overflow vulnerability exists in the 'transfer' and 'transferFrom' functions in the smart contract implementation of PDX. An attacker could exploit the vulnerability to set a user's balance to an arbitrary value...

CVE-2020-7831

A vulnerability in the web-based contract management service interface Ebiz4u of INOGARD could allow an victim user to download any file. The attacker is able to use startup menu directory via directory traversal for automatic execution. The victim user need to reboot, however...

CVE-2020-7831

A vulnerability in the web-based contract management service interface Ebiz4u of INOGARD could allow an victim user to download any file. The attacker is able to use startup menu directory via directory traversal for automatic execution. The victim user need to reboot, however...

Directory traversal

A vulnerability in the web-based contract management service interface Ebiz4u of INOGARD could allow an victim user to download any file. The attacker is able to use startup menu directory via directory traversal for automatic execution. The victim user need to reboot, however...

CVE-2020-7831

The CVE-2020-7831 entry concerns the web-based Ebiz4u contract management interface from INOGARD. A vulnerability exists that could let a victim user download arbitrary files by abusing a directory traversal via the startup menu directory to trigger automatic execution; the impact per the descrip...

CVE-2020-7831

A vulnerability in the web-based contract management service interface Ebiz4u of INOGARD could allow an victim user to download any file. The attacker is able to use startup menu directory via directory traversal for automatic execution. The victim user need to reboot, however...

PT-2020-19827

Name of the Vulnerable Software and Affected Versions INOGARD Ebiz4u affected versions not specified Description A vulnerability in the web-based contract management service interface Ebiz4u could allow an attacker to download any file. The attacker can use directory traversal via the startup men...

Thread Number Error Vulnerability

Thread is an ethereum-based digital currency. An integer overflow vulnerability exists in the 'mintToken' function in Thread's smart contract implementation. An attacker could use this vulnerability to set the balance of any user to an arbitrary value...

HashHeroes Tiles Security Breach

HashHeroes Tiles is an ethereum-based guessing game. A security vulnerability exists in the 'determineWinner' function in the smart contract implementation of HashHeroes Tiles. An attacker could exploit this vulnerability to control the awarding of prizes by being the last user to make a purchase...

Primeo Security Feature Issue Vulnerability

Primeo PEO is an ethereum-based digital currency. A security vulnerability exists in the 'doAirdrop' function in the smart contract implementation of Primeo PEO. An attacker could exploit the vulnerability to issue any number of virtual currencies...

Business Alliance Financial Circle Security Breach

Business Alliance Financial Circle BAFC is a cryptocurrency. A security vulnerability exists in the 'UBSexToken' function in BAFC's smart contract implementation, which stems from the fact that the function is publicly available and does not check the identity of the caller. An attacker could use...

CryptosisToken Digital Error Vulnerability

CryptosisToken is an ethereum-based digital currency. An integer overflow vulnerability exists in the 'mintToken' function in CryptosisToken's smart contract implementation. An attacker can exploit this vulnerability to set the balance of any user to an arbitrary value...

Cryptbond Network Authorization Issues Vulnerability

Cryptbond Network CBN is a cryptocurrency. A security vulnerability exists in the 'ToOwner' function in CBN's smart contract implementation, which stems from the fact that the function does not check the identity of the caller. An attacker could use the vulnerability to modify the owner of the...

OTAKUToken Number Error Vulnerability

OTAKUToken is an ethereum-based digital currency. An integer overflow vulnerability exists in the 'mintToken' function in OTAKUToken's smart contract implementation. An attacker could use this vulnerability to set the balance of any user to an arbitrary value...

CherryCoinFoundation Digital Error Vulnerability

CherryCoinFoundation is an ethereum-based digital currency. An integer overflow vulnerability exists in the 'mintToken' function in CherryCoinFoundation's smart contract implementation. An attacker could use this vulnerability to set the balance of any user to an arbitrary value...

Coinquer Digital Error Vulnerability

Coinquer is an ethereum-based digital currency. An integer overflow vulnerability exists in the 'mintToken' function in Coinquer's smart contract implementation. An attacker can exploit this vulnerability to set the balance of any user to an arbitrary value...

LoliCoin Digital Error Vulnerability

LoliCoin is an ethereum-based digital currency. An integer overflow vulnerability exists in the 'mintToken' function in LoliCoin's smart contract implementation. An attacker can exploit this vulnerability to set the balance of any user to an arbitrary value...

Security Bulletin: Multiple Oracle Database Server Security Vulnerabilities Affect IBM Emptoris Contract Management

Summary Multiple Oracle Database Server Security Vulnerabilities Affect IBM Emptoris Contract Management Vulnerability Details CVEID: CVE-2020-2734 DESCRIPTION: An unspecified vulnerability in Oracle Database Server related to the RDBMS/Optimizer component could allow an authenticated attacker to...

MoneyChainNet Digital Error Vulnerability

MoneyChainNet MCN is an ethereum-based digital currency. An input validation error vulnerability exists in the 'mintToken' function in MCN's smart contract implementation. An attacker can exploit the vulnerability to set the balance of any user to an arbitrary value...