5560 matches found
CPP-Ethereum libevm pow2N Code Execution Vulnerability
Summary An exploitable out-of-bounds read vulnerability exists in libevm Ethereum Virtual Machine of CPP-Ethereum. A specially crafted smart contract code can cause an out-of-bounds read which can subsequently trigger an out-of-bounds write resulting in remote code execution. An attacker can...
CPP-Ethereum libevm create2 Information Leak Vulnerability
Summary An exploitable information leak / denial of service vulnerability exists in the libevm Ethereum Virtual Machine create2 opcode handler of CPP-Ethereum. A specially crafted smart contract code can cause an out-of-bounds read leading to memory disclosure or denial of service. An attacker ca...
Coinbase: Ethereum account balance manipulation
The researchers noticed an issue with our ETH receiving code when receiving from a contract. This allowed sending of ETH to Coinbase to be credited even if the underlying contract execution failed. The issue was fixed by changing the contract handling logic. Analysis of the issue indicated only...
jobashore.com XSS vulnerability
Open Bug Bounty ID: OBB-410525 Description| Value ---|--- Affected Website:| jobashore.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
Hundreds of Millions in Digital Currency Remains Frozen
Between $150 million and $300 million in digital currency called ether remains inaccessible today after a user said he “accidentally” triggered a vulnerability that froze the funds in the popular Parity wallet. Parity Technologies issued an advisory warning users about the flaw in the Parity Wall...
CVE-2017-14841
Mojoomla Annual Maintenance Contract AMC Management System allows Arbitrary File Upload in profilesetting image handling...
Default credentials
Mojoomla Annual Maintenance Contract AMC Management System allows Arbitrary File Upload in profilesetting image handling...
CVE-2017-14841
Mojoomla Annual Maintenance Contract AMC Management System allows Arbitrary File Upload in profilesetting image handling...
AMC Master - Arbitrary File Upload
Exploit Title: Annual Maintenance Contract Management System - Arbitrary File Upload Dork: N/A Date: 26.09.2017 Vendor Homepage: http://mojoomla.com/ Software Link: https://codecanyon.net/item/amc-master-annual-maintenance-contract-management-system/20667703 Demo:...
AMC Master - Arbitrary File Upload
AMC Master - Arbitrary File Upload Exploit Title: Annual Maintenance Contract Management System - Arbitrary File Upload Dork: N/A Date: 26.09.2017 Vendor Homepage: http://mojoomla.com/ Software Link: https://codecanyon.net/item/amc-master-annual-maintenance-contract-management-system/20667703 Dem...
IBM Emptoris Contract Management Information Disclosure Vulnerability (CNVD-2017-21772)
IBM Emptoris Contract Management is a suite of software from IBM USA that automates the contract lifecycle. The software automates and manages all phases of the contract lifecycle, from the creation, execution and renegotiation of contracts and amendments, to performance monitoring, analysis and...
CVE-2016-6018
IBM Emptoris Contract Management 10.0 and 10.1 reveals detailed error messages in certain features that could cause an attacker to gain additional information to conduct further attacks. IBM X-Force ID: 116738...
Code injection
IBM Emptoris Contract Management 10.0 and 10.1 reveals detailed error messages in certain features that could cause an attacker to gain additional information to conduct further attacks. IBM X-Force ID: 116738...
CVE-2016-6018
IBM Emptoris Contract Management 10.0 and 10.1 reveals detailed error messages in certain features that could cause an attacker to gain additional information to conduct further attacks. IBM X-Force ID: 116738...
CVE-2016-6018
CVE-2016-6018 affects IBM Emptoris Contract Management 10.0 and 10.1, where detailed error messages in certain features could allow an attacker to obtain additional information for further actions. The vulnerability is characterized as an information disclosure issue (information exposure) with a...
CVE-2016-6018
IBM Emptoris Contract Management 10.0 and 10.1 reveals detailed error messages in certain features that could cause an attacker to gain additional information to conduct further attacks. IBM X-Force ID: 116738...
IBM Emptoris Sourcing Open Redirect Vulnerability (CNVD-2017-21233)
BM Emptoris Sourcing is a source-to-contract solution from IBM USA. The solution helps organizations get affordable prices and greater value from suppliers by looking at factors such as cost, risk and performance in sourcing decisions. An open redirection vulnerability exists in IBM Emptoris...
Threat Outbreak Alert RuleID29600: Email Messages Distributing Malicious Software on June 26, 2017
Medium Alert ID: 54312 First Published: 2017 June 26 17:51 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID29600 may contain the following files: Name | Siz...
Threat Outbreak Alert RuleID29345: Email Messages Distributing Malicious Software on May 31, 2017
Medium Alert ID: 54001 First Published: 2017 May 31 17:17 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID29345 may contain the following files: Name | Size...
