1169 matches found
Design/Logic Flaw
Python3-RESTfulAPI commit d9907f14e9e25dcdb54f5b22252b0e9452e3970e and e772e0beee284c50946e94c54a1d43071ca78b74 was discovered to contain a code execution backdoor via the request package. This vulnerability allows attackers to access sensitive user information and digital currency keys, as well ...
Design/Logic Flaw
vSphereselfuse commit 2a9fe074a64f6a0dd8ac02f21e2f10d66cac5749 was discovered to contain a code execution backdoor via the request package. This vulnerability allows attackers to access sensitive user information and digital currency keys, as well as escalate privileges...
Design/Logic Flaw
Passhunt commit 54eb987d30ead2b8ebbf1f0b880aa14249323867 was discovered to contain a code execution backdoor via the request package. This vulnerability allows attackers to access sensitive user information and digital currency keys, as well as escalate privileges...
CVE-2022-46997
Passhunt commit 54eb987d30ead2b8ebbf1f0b880aa14249323867 was discovered to contain a code execution backdoor via the request package. This vulnerability allows attackers to access sensitive user information and digital currency keys, as well as escalate privileges...
PT-2022-28016 · Passhunt · Passhunt
Name of the Vulnerable Software and Affected Versions: Passhunt commit 54eb987d30ead2b8ebbf1f0b880aa14249323867 Description: The issue allows attackers to access sensitive user information and digital currency keys, as well as escalate privileges via a code execution backdoor in the request...
PT-2022-27929 · Unknown · Python3-Restfulapi
Name of the Vulnerable Software and Affected Versions: Python3-RESTfulAPI versions d9907f14e9e25dcdb54f5b22252b0e9452e3970e through e772e0beee284c50946e94c54a1d43071ca78b74 Description: The issue allows attackers to access sensitive user information and digital currency keys, as well as escalate...
CVE-2022-46997
CVE-2022-46997 relates to Passhunt. Connected sources describe a code execution backdoor in Passhunt at commit 54eb987d30ead2b8ebbf1f0b880aa14249323867 introduced via the request package. The vulnerability is said to allow attackers to access sensitive user information and digital currency keys a...
CVE-2022-46996
vSphereselfuse commit 2a9fe074a64f6a0dd8ac02f21e2f10d66cac5749 was discovered to contain a code execution backdoor via the request package. This vulnerability allows attackers to access sensitive user information and digital currency keys, as well as escalate privileges...
CVE-2022-46997
Passhunt commit 54eb987d30ead2b8ebbf1f0b880aa14249323867 was discovered to contain a code execution backdoor via the request package. This vulnerability allows attackers to access sensitive user information and digital currency keys, as well as escalate privileges...
Passhunt 安全漏洞
Passhunt is a simple tool open source by Viral Maniar. Used to search for default credentials for network devices , web applications , etc. . Passhunt commit number: 54eb987d30ead2b8ebbf1f0b880aa14249323867 suffers from a security vulnerability that stems from the fact that it allows an attacker ...
vSphere_selfuse 安全漏洞
vSphereselfuse is a vSphere automation attempt project by Henry Sun Personal Developer. A security vulnerability exists in vSphereselfuse commit number: 2a9fe074a64f6a0dd8ac02f21e2f10d66cac5749, which stems from the fact that it allows an attacker to execute a backdoor through the code of a reque...
CVE-2022-46996
vSphereselfuse commit 2a9fe074a64f6a0dd8ac02f21e2f10d66cac5749 was discovered to contain a code execution backdoor via the request package. This vulnerability allows attackers to access sensitive user information and digital currency keys, as well as escalate privileges...
Python3-RESTfulAPI 安全漏洞
Python3-RESTfulAPI is Python3 development and deployment of RESTful API project. Python3-RESTfulAPI commit number: d9907f14e9e25dcdb54f5b22252b0e9452e3970e and e772e0beee284c50946e94c54a1d43071ca78b74 suffers from a security vulnerability that stems from it allowing an Attackers to access sensiti...
CVE-2022-46609
Python3-RESTfulAPI commit d9907f14e9e25dcdb54f5b22252b0e9452e3970e and e772e0beee284c50946e94c54a1d43071ca78b74 was discovered to contain a code execution backdoor via the request package. This vulnerability allows attackers to access sensitive user information and digital currency keys, as well ...
Update 15.17 for Microsoft Dynamics 365 Business Central 2019 Release Wave 2 (Application Build 15.17.49440, Platform Build 15.0.49431)
None None...
Re-Entrancy when invoking ERC20EnabledLooksRareAggregator.execute() function
Lines of code Vulnerability details Impact We didn't check the address of currency . We don't know if the currency is ERC20 or not, and then just invoke currency.call. For these functions, we don't have any Re-Entrancy check. It will definitely lead to an Re-Entrancy issue on the currency side...
NFT not minted when contributed via a supported payment terminal
Lines of code Vulnerability details Impact A contributor won't get an NFT they're eligible for if the payment is made through a payment terminal that's supported by the project but not by the NFT delegate. Proof of Concept A Juicebox project can use multiple payment terminals to receive...
Canadian Netwalker Ransomware Affiliate Sentenced to 20 Years in U.S. Prison
A former affiliate of the Netwalker ransomware has been sentenced to 20 years in prison in the U.S., a little over three months after the Canadian national pleaded guilty to his role in the crimes. Sebastien Vachon-Desjardins, 35, has also been ordered to forfeit $21,500,000 that was illicitly...
Sourcecodester Hotel and Lodge Management System 2.0 - SQL Injection
Sourcecodester Hotel and Lodge Management System 2.0 contains a SQL injection vulnerability via the email parameter to the edit page for Customer, Room, Currency, Room Booking Details, or Tax Details. An attacker can possibly obtain sensitive information, modify data, and/or execute unauthorized...
