Vulnerability Spotlight: Multiple Vulnerabilities in Samsung SmartThings Hub

These vulnerabilities were discovered by Claudio Bozzato of Cisco Talos. Executive Summary Cisco Talos recently discovered several vulnerabilities present within the firmware of the Samsung SmartThings Hub. In accordance with our coordinated disclosure policy, Cisco Talos has worked with Samsung ...

Staying Safe in the Era of Browser-based Cryptocurrency Mining

Qualys Malware Research Labs is announcing the release of Qualys BrowserCheck CoinBlocker Chrome extension to detect and block browser-based cryptocurrency mining, aka cryptojacking. Cryptojacking Cryptojacking attacks leverage the victim system’s resources via malicious JavaScript to mine certai...

Adobe Acrobat and Reader Untrusted pointer dereference (APSB18-21: CVE-2018-5012)

A vulnerability exists in Adobe Acrobat and Reader. Successful exploitation of this vulnerability could allow a remote attacker to damage users system...

Adobe Acrobat and Reader Untrusted pointer dereference (APSB18-21: CVE-2018-5030)

A vulnerability exists in Adobe Acrobat and Reader. Successful exploitation of this vulnerability could allow a remote attacker to damage users system...

Adobe Acrobat and Reader Buffer Errors (APSB18-21: CVE-2018-5034)

A vulnerability exists in Adobe Acrobat and Reader. Successful exploitation of this vulnerability could allow a remote attacker to damage users system...

Adobe Acrobat and Reader Buffer Errors (APSB18-21: CVE-2018-5037)

A vulnerability exists in Adobe Acrobat and Reader. Successful exploitation of this vulnerability could allow a remote attacker to damage users system...

Adobe Acrobat and Reader Buffer Errors (APSB18-21: CVE-2018-5043)

A vulnerability exists in Adobe Acrobat and Reader. Successful exploitation of this vulnerability could allow a remote attacker to damage users system...

Oracle Web Cache Unspecified Client Request Handling DoS - Ver2

A vulnerability exists in Oracle Web Cache. Successful exploitation of this vulnerability could allow a remote attacker to damage users system...

D-Link DAP-1160 Unauthenticated Remote Configuration Remote Reboot - Ver2

A vulnerability exists in D-Link DAP-1160. Successful exploitation of this vulnerability could allow a remote attacker to damage users system...

Fuzzer SMB Negotiate Multiple Requests - Ver2

A vulnerability exists in Fuzzer:. Successful exploitation of this vulnerability could allow a remote attacker to damage users system...

Fuzzer SMB Tree Connect Server Name - Ver2

A vulnerability exists in Fuzzer:. Successful exploitation of this vulnerability could allow a remote attacker to damage users system...

QNAP QTS VPNFilter Malware (NAS-201805-24)

QNAP QTS might be affected against the VPNFilter malware. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/o:qnap:qts"; if descripti...

Buffer overflow

The sell function of a smart contract implementation for SEC, a tradable Ethereum ERC20 token, allows a potential trap that could be used to cause financial damage to the seller, because of overflow of the multiplication of its argument amount and a manipulable variable sellPrice, aka the...

Buffer overflow

The sell function of a smart contract implementation for Substratum SUB, a tradable Ethereum ERC20 token, allows a potential trap that could be used to cause financial damage to the seller, because of overflow of the multiplication of its argument amount and a manipulable variable sellPrice, aka...

Buffer overflow

The buy function of a smart contract implementation for Gold Reward GRX, an Ethereum ERC20 token, allows a potential trap that could be used to cause financial damage to the buyer because of overflow of the multiplication of its argument amount and a manipulable variable buyPrice, aka the...

CVE-2018-11446

The buy function of a smart contract implementation for Gold Reward GRX, an Ethereum ERC20 token, allows a potential trap that could be used to cause financial damage to the buyer because of overflow of the multiplication of its argument amount and a manipulable variable buyPrice, aka the...

CVE-2018-12062

The sell function of a smart contract implementation for SwftCoin SWFTC, a tradable Ethereum ERC20 token, allows a potential trap that could be used to cause financial damage to the seller, because of overflow of the multiplication of its argument amount and a manipulable variable sellPrice, aka...

Buffer overflow

The sell function of a smart contract implementation for SwftCoin SWFTC, a tradable Ethereum ERC20 token, allows a potential trap that could be used to cause financial damage to the seller, because of overflow of the multiplication of its argument amount and a manipulable variable sellPrice, aka...

CVE-2018-12063

The sell function of a smart contract implementation for Internet Node Token INT, a tradable Ethereum ERC20 token, allows a potential trap that could be used to cause financial damage to the seller, because of overflow of the multiplication of its argument amount and a manipulable variable...

CVE-2018-12068

The sell function of a smart contract implementation for Target Coin TGT, a tradable Ethereum ERC20 token, allows a potential trap that could be used to cause financial damage to the seller, because of overflow of the multiplication of its argument amount and a manipulable variable sellPrice, aka...