Fake YouTube Android Apps Used to Distribute CapraRAT

By Deeba Ahmed The group behind this attack is the infamous Pakistani threat actor known as Transparent Tribe. This is a post from HackRead.com Read the original post: Fake YouTube Android Apps Used to Distribute CapraRAT...

Upgraded Q -> 2 from #17 [1685982856814]

Judge has assessed an item in Issue 17 as 2 risk. The relevant finding follows: Ragequit can be frontrun by distribute call to cause losses to user who is ragequitting --- The text was updated successfully, but these errors were encountered: All reactions...

FIN7 & Wizard Spider team up to disseminate Domino malware

Threat Level Attack Report For a detailed threat advisory, download the pdf file here Summary FIN7 threat actors and Wizard Spider collaborate to distribute Domino malware family in recent attacks. To receive real-time threat advisories, please follow HiveForce Labs on LinkedIn...

MAL-2023-970 Malicious code in wrf-distribute (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2de6c33366b6a4984966301e4c28d68e52b28012251e02e8922736664cc6347f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in wrf-distribute (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2de6c33366b6a4984966301e4c28d68e52b28012251e02e8922736664cc6347f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious Package

Overview wrf-distribute is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this package wa...

2K Games Help Desk Platform Hacked to Spread Info-stealing Malware

By Deeba Ahmed Famous publisher 2K Games helpdesk platform was hacked where the attackers attempted to distribute malware to gamers devices.… This is a post from HackRead.com Read the original post: 2K Games Help Desk Platform Hacked to Spread Info-stealing Malware...

_sendForReceiver returns false when receiver is EOA

Handle pauliax Vulnerability details Impact sendForReceiver always returns false when the receiver is not a contract: if receiver.isContract ... return success && IERC20Upgradeablevault.allowanceaddressthis, receiver.receiver == 0; else IERC20Upgradeablevault.safeTransferreceiver.receiver,...

Dishonest Stakers Can Siphon Rewards From xToken Holders Through The deposit Function In NFTXInventoryStaking

Handle leastwood Vulnerability details Impact xTokens is intended to be a representation of staked vault tokens. As the protocol's vaults accrue fees from users, these fees are intended to be distributed to users in an inconsistent fashion. NFTXInventoryStaking is one of the ways users can stake...

function distribute() Allow Certain Users Transfer Third Persons Token aka Users'Wallet into Contract

Handle Meta0xNull Vulnerability details Impact function distributeToTransmuteruint256 amount internal token.approvetransmuter, amount; In Alchemist.sol, here is where the Token Approved. function distributeaddress origin, uint256 amount public onlyWhitelisted runPhasedDistribution...

Unbounded iteration in NFTXEligiblityManager.distribute over _feeReceivers

Handle @cmichelio Vulnerability details Vulnerability Details NFTXEligiblityManager.distribute iterates over all feeReceivers. Impact If the number of feeReceivers gets too big, the transaction's gas cost could exceed the block gas limit and make it impossible to call distribute at all. Recommend...

MP3 Coin Digital Error Vulnerability

MP3 Coin MP3 is an ethereum-based digital currency.An integer overflow vulnerability exists in the 'distribute' function in MP3. An attacker could use this vulnerability to set the balance of an arbitrary user...

EETHER has a logic flaw vulnerability

EETHER is an Ether-based digital currency. An integer overflow vulnerability exists in the unprotected 'distributeToken' function in EETHER's smart contract implementation. An attacker could exploit the vulnerability to increase their digital assets...

VulnCheck KEV: CVE-2018-11687

An integer overflow in the distributeBTR function of a smart contract implementation for Bitcoin Red BTCR, an Ethereum ERC20 token, allows the owner to accomplish an unauthorized increase of digital assets by providing a large address array, as exploited in the wild in May 2018, aka the...

CVE-2018-14002

An integer overflow vulnerability exists in the function distribute of MP3 Coin MP3, an Ethereum token smart contract. An attacker could use it to set any user's balance...

MacUpdate Hacked to Distribute Mac Cryptocurrency Miner

By Waqas Another day, another cryptocurrency miner targeting users - This time, This is a post from HackRead.com Read the original post: MacUpdate Hacked to Distribute Mac Cryptocurrency Miner...

CVE-2014-9852

distribute-cache.c in ImageMagick re-uses objects after they have been destroyed, which allows remote attackers to have unspecified impact via unspecified vectors...

Design/Logic Flaw

distribute-cache.c in ImageMagick re-uses objects after they have been destroyed, which allows remote attackers to have unspecified impact via unspecified vectors...

CVE-2014-9852

distribute-cache.c in ImageMagick re-uses objects after they have been destroyed, which allows remote attackers to have unspecified impact via unspecified vectors...

CVE-2014-9852

distribute-cache.c in ImageMagick re-uses objects after they have been destroyed, which allows remote attackers to have unspecified impact via unspecified vectors...