Integer overflow

The mintToken function of a smart contract implementation for Welfare Token Fund WTF, an Ethereum token, has an integer overflow that allows the owner of the contract to set the balance of an arbitrary user to any value...

CVE-2018-13197

The sell function of a smart contract implementation for Welfare Token Fund WTF, an Ethereum token, has an integer overflow in which "amount sellPrice" can be zero, consequently reducing a seller's assets...

Integer overflow

The sell function of a smart contract implementation for Welfare Token Fund WTF, an Ethereum token, has an integer overflow in which "amount sellPrice" can be zero, consequently reducing a seller's assets...

CVE-2018-13197

CVE-2018-13197 concerns a flaw in the Welfare Token Fund (WTF) Ethereum smart contract. The sell function suffers an integer overflow where the expression "amount * sellPrice" can evaluate to zero, which can unintentionally reduce a seller’s assets. The issue is described in the NVD entry for thi...

CVE-2018-13197

The sell function of a smart contract implementation for Welfare Token Fund WTF, an Ethereum token, has an integer overflow in which "amount sellPrice" can be zero, consequently reducing a seller's assets...

hedgefundsymposium.com XSS vulnerability

Open Bug Bounty ID: OBB-585544 Description| Value ---|--- Affected Website:| hedgefundsymposium.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

rht.mu XSS vulnerability

Vulnerable URL: http://www.rht.mu/fund-management/details.php?id=13'" Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 7631956 VIP website status:| No Coordinated Disclosure Timeline: Description| Value ---|---...

Fraudulent Donations Lead to Disbanding of Hutchins Legal Defense Fund

A legal defense fund established to ease Marcus Hutchins’ attorney costs has been disbanded after a sizable number of fraudulent donations were discovered. Hutchins, known as Malware Tech, is facing six counts for his alleged involvement in creating and distributing the Kronos banking malware. Th...

Tor Project Opens Bounty Program To All Researchers

The Tor Project announced today the launch of a public bug bounty program to encourage security researchers to privately report issues they find in the group’s software. Unlike its previous invite-only bounty program launched last year, this bounty program will be open to all bounty hunters throu...

Creating a More Altruistic Bug Bounty Program

SINT MAARTEN—David Jacoby and Frans Rosén want security researchers to become more altruistic about how they approach bug bounty programs. While programs such as those facilitated by HackerOne and BugCrowd have become ubiquitous over the last several years, the researchers said in a talk at...

Wise Dogs Android App Has Arbitrary Password Reset Vulnerability

Smart Home Dog Android App is an application about wireless access control intercom system,wireless smart home system. Smart Home Dog Android App has an arbitrary password reset vulnerability. Allow attackers only need to know each other's cell phone number to change their passwords, leaking...

biglotteryfund.org.uk XSS vulnerability

Open Bug Bounty ID: OBB-219416 Description| Value ---|--- Affected Website:| biglotteryfund.org.uk Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

OpenVPN to Undergo Cryptographic Audit

The next version of the open-source OpenVPN software will be audited by an well-known cryptographer. It was announced Wednesday that Matthew D. Green, PhD, a cryptographer, computer science professor, and researcher at Johns Hopkins University will carry out an audit of the code currently availab...

SQL Injection Vulnerability in Shen Yue Software Provident Fund System

Shen Yue Software is a company that provides housing fund management software. A SQL injection vulnerability exists in Shen Yue Software's provident fund system. An attacker can exploit the vulnerability to obtain sensitive information from the database...

Logic Design Flaw Vulnerability in DBSHOP_0.9.3_Beta

DBShop is an open source e-commerce online store system developed using endFramework. DBSHOP0.9.3Beta /module/Mobile/src/Mobile/Controller/HomeController.php there is a logical design flaw vulnerability . As the parameters of the post are passed to $passArray to determine whether the original...

How a Typo Stopped Hackers from Stealing $1 Billion from Bank

Typos are really embarrassing, but this time it saved the Bangladesh Central Bank and the New York Federal Reserve by preventing a nearly $1 Billion £700 Million heist. Last month, some unknown hackers broke into Bangladesh's central bank, obtained credentials needed for payment transfers and the...

Tor to Launch Bug Bounty Program in 2016

The Tor Project announced last week that it will launch a bug bounty program later this year to encourage security researchers to responsibly report issues they find in the software. Tor Browser and Tor Performance Developer Mike Perry announced the news during the “State of the Onion” address la...

Police Raid alleged Bitcoin Creator Craig Wright's Home in Sydney

Just hours after the Australian man 'Craig Steven Wright' outed as the possible real identity of Satoshi Nakamoto, the anonymous creator of Bitcoin, Australian Police raided his home in Sydney. Over 10 police officers raided Wright's home in the Sydney suburbs on Wednesday afternoon. They...

Threat Outbreak Alert RuleID19539: Email Messages Distributing Malicious Software on November 19, 2015

Medium Alert ID: 42176 First Published: 2015 November 19 18:39 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID19539 may contain the following files: Name |...

Flaw Lets Attackers Bypass PayPal Two-Factor Authentication

There’s a vulnerability in the way that PayPal handles certain requests from mobile clients that can allow an attacker to bypass the two-factor authentication mechanism for the service and transfer money from a victim’s account to any recipient he chooses. The flaw lies in the way that the PayPal...