WordPress Plugin "WPCS - WordPress Currency Switcher" vulnerable to cross-site request forgery

Overview WordPress Plugin "WPCS - WordPress Currency Switcher" provided by realmag777 contains a cross-site request forgery vulnerability CWE-352. Mizuki Takagi of Cryptography Laboratory,Department of Information and Communication Engineering,Tokyo Denki University reported and coordinated with...

European Authorities Disrupt Emotet — World's Most Dangerous Malware

Law enforcement agencies from as many as eight countries dismantled the infrastructure of Emotet, a notorious email-based Windows malware behind several botnet-driven spam campaigns and ransomware attacks over the past decade. The coordinated takedown of the botnet on Tuesday — dubbed "Operation...

WordPress Stripe Payments 2.0.39 Cross Site Scripting

Exploit Title: WordPress Plugin Stripe Payments 2.0.39 - 'AcceptStripePayments-settingscurrencycode' Stored XSS Date: 04-01-2021 Software Link: https://wordpress.org/plugins/stripe-payments/developers Exploit Author: Park Won Seok Contact: [email protected] Category: Webapps Version:...

aman Number Error Vulnerability

aman is an ethereum-based digital currency. An integer overflow vulnerability exists in the 'mintToken' function in aman's smart contract implementation. An attacker can exploit this vulnerability to set the balance of any user to an arbitrary value...

Major Global Ransom Denial of Service Campaign Continues Rising Trend in Global DDoS Attacks

Extortionists Claim Connection to Notorious Threat Actor Groups In recent weeks Imperva has become aware of a considerable increase in the number of serious Ransom Denial of Service RDoS threats, with extortion campaigns targeting thousands of large commercial organizations globally, not least th...

mkethToken Number Error Vulnerability

mkethToken is an ethereum-based digital currency. An integer overflow vulnerability exists in the 'mintToken' function in the smart contract implementation of mkethToken. An attacker can exploit this vulnerability to set the balance of any user to an arbitrary value...

QRG Number Error Vulnerability

QRG is an ethereum-based digital currency. An integer overflow vulnerability exists in the 'mintToken' function in QRG's smart contract implementation. An attacker can exploit this vulnerability to set the balance of any user to an arbitrary value...

Spadeico Digital Error Vulnerability

Spadeico is an ethereum-based digital currency. An integer overflow vulnerability exists in the 'mint' function in Spadeico. An attacker can exploit the vulnerability to retrieve generated tokens...

Pandora Digital Error Vulnerability

Pandora PDX is an ethereum-based digital currency.An integer overflow vulnerability exists in the 'transfer' and 'transferFrom' functions in the smart contract implementation of PDX. An attacker could exploit the vulnerability to set a user's balance to an arbitrary value...

CVE-2020-10123

The currency dispenser of NCR SelfSev ATMs running APTRA XFS 05.01.00 or earlier does not adequately authenticate session key generation requests from the host computer, allowing an attacker with physical access to internal ATM components to issue valid commands to dispense currency by generating...

CVE-2020-10123

The currency dispenser of NCR SelfSev ATMs running APTRA XFS 05.01.00 or earlier does not adequately authenticate session key generation requests from the host computer, allowing an attacker with physical access to internal ATM components to issue valid commands to dispense currency by generating...

Design/Logic Flaw

The currency dispenser of NCR SelfSev ATMs running APTRA XFS 05.01.00 or earlier does not adequately authenticate session key generation requests from the host computer, allowing an attacker with physical access to internal ATM components to issue valid commands to dispense currency by generating...

CVE-2020-10123

The currency dispenser of NCR SelfSev ATMs running APTRA XFS 05.01.00 or earlier does not adequately authenticate session key generation requests from the host computer, allowing an attacker with physical access to internal ATM components to issue valid commands to dispense currency by generating...

CVE-2020-10123

Affected product: NCR SelfServ ATMs running APTRA XFS 05.01.00 or older. Vulnerable component: currency dispenser session key generation authentication. Root cause: inadequate authentication for session key generation requests from the host computer, enabling a physical-access attacker to generat...

NCR SelfServ ATM dispenser software contains multiple vulnerabilities

Overview NCR SelfServ automated teller machines ATMs running APTRA XFS 05.01.00 or older are vulnerable to physical attacks on the communications bus between the currency dispenser component and the host computer. Description NCR SelfServ ATMs running APTRA XFS 05.01.00 or older contain...

Capital One Fined $80 Million for 2019 Data Breach Affecting 106 Million Users

A United States regulator has fined the credit card provider Capital One Financial Corp with $80 million over last year's data breach that exposed the personal information of more than 100 million credit card applicants of Americans. The fine was imposed by the Office of the Comptroller of the...

Primeo Security Feature Issue Vulnerability

Primeo PEO is an ethereum-based digital currency. A security vulnerability exists in the 'doAirdrop' function in the smart contract implementation of Primeo PEO. An attacker could exploit the vulnerability to issue any number of virtual currencies...

Divi Resource Management Error Vulnerability

Divi is a digital currency. A security vulnerability exists in Divi 4.0.5 and earlier versions. An attacker could exploit the vulnerability to cause a denial of service...

Soar Labs Soar Coin Security Vulnerability Exists

Soar Labs Soar Coin is an ethereum-based virtual cryptocurrency. A security vulnerability exists in the 'zerofeetransaction' function in Soar Labs Soar Coin git commit 4a2aa71ee21014e2880a3f7aad11091ed6ad434f and previous versions. An attacker could exploit this vulnerability to steal Soar curren...

Zcash Input Validation Error Vulnerability

Zcash is a decentralized open source data currency.There is a security vulnerability in Zcash. An attacker can exploit the vulnerability to generate unlimited currency...