reedriver.com XSS vulnerability

Open Bug Bounty ID: OBB-566576 Description| Value ---|--- Affected Website:| reedriver.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Someone Stole Almost Half a BILLION Dollars from Japanese Cryptocurrency Exchange

Coincheck, a Tokyo-based cryptocurrency exchange, has suffered what appears to be the biggest hack in the history of cryptocurrencies, losing $532 million in digital assets nearly $420 million in NEM tokens and $112 in Ripples. In 2014, Mt Gox, one of the largest bitcoin exchange at that time,...

CEO of Major UK-Based Cryptocurrency Exchange Kidnapped in Ukraine

Pavel Lerner, a prominent Russian blockchain expert and known managing director of one of the major crypto-exchanges EXMO, has allegedly been kidnapped by "unknown" criminals in the Ukranian capital of Kiev. According to Ukraine-based web publication Strana, Lerner, 40-year-old citizen of Russia,...

Sql injection

SQL injection vulnerability in the A-Reserve and A-Reserve for MT cloud versions 3.8.6 and earlier allows an attacker to execute arbitrary SQL commands via unspecified vectors...

CVE-2017-10898

SQL injection vulnerability in the A-Member and A-Member for MT cloud versions 3.8.6 and earlier allows an attacker to execute arbitrary SQL commands via unspecified vectors...

Sql injection

SQL injection vulnerability in the A-Member and A-Member for MT cloud versions 3.8.6 and earlier allows an attacker to execute arbitrary SQL commands via unspecified vectors...

CVE-2017-10899

SQL injection vulnerability in the A-Reserve and A-Reserve for MT cloud versions 3.8.6 and earlier allows an attacker to execute arbitrary SQL commands via unspecified vectors...

CVE-2017-10899

SQL injection vulnerability in the A-Reserve and A-Reserve for MT cloud versions 3.8.6 and earlier allows an attacker to execute arbitrary SQL commands via unspecified vectors...

CVE-2017-10898

SQL injection vulnerability in the A-Member and A-Member for MT cloud versions 3.8.6 and earlier allows an attacker to execute arbitrary SQL commands via unspecified vectors...

CVE-2017-10898

CVE-2017-10898 describes a SQL injection in Movable Type plugins A-Member and A-Member for MT cloud, affected through versions 3.8.6 and earlier. The root cause is a vulnerability in processing cookie values (CWE-89). Impact per sources: an attacker who can access pages using these plugins may ob...

CVE-2017-10899

CVE-2017-10899 affects Movable Type plugins A-Reserve and A-Reserve for MT cloud (versions 3.8.6 and earlier). The root cause is a SQL injection (CWE-89) vulnerability arising from cookie-value processing, enabling an attacker to execute arbitrary SQL commands against the database. Impact describ...

PT-2017-11593

Name of the Vulnerable Software and Affected Versions A-Reserve and A-Reserve for MT cloud versions 3.8.6 and earlier Description The issue allows an attacker to execute arbitrary SQL commands via unspecified vectors. Recommendations For versions 3.8.6 and earlier, update to a version later than...

CVE-2017-10899: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the A-Reserve and A-Reserve for MT cloud versions 3.8.6 and earlier allows an attacker to execute arbitrary SQL commands via unspecified vectors...

CVE-2017-10898: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the A-Member and A-Member for MT cloud versions 3.8.6 and earlier allows an attacker to execute arbitrary SQL commands via unspecified vectors...

PT-2017-11592

Name of the Vulnerable Software and Affected Versions A-Member and A-Member for MT cloud versions 3.8.6 and earlier Description The issue allows an attacker to execute arbitrary SQL commands via unspecified vectors. This can potentially lead to unauthorized access and manipulation of sensitive...

mt-crow.net XSS vulnerability

Open Bug Bounty ID: OBB-441752 Description| Value ---|--- Affected Website:| mt-crow.net Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat Sheet...

imobiliarianovacapital.com.br XSS vulnerability

Vulnerable URL: https://imobiliarianovacapital.com.br/plugins/location/index.php?label=Casa%20a%20venda%20no%20AQUARELA%20BRASIL%20em%20Sinop/MT=xss%22%3E%3Csvg/onload=prompt%22openbugbounty%22%3E=-55.5036442=-11.8595329=15=100%=350px Details: Description| Value ---|--- Patched:| No Latest check...

Bitcoin Exchange Operator Arrested For $4 Billion Money Laundering Scheme

Greek police have arrested a Russian man who is believed to have been the operator of the popular BTC-e Bitcoin exchange on charges of laundering more than $4 billion in bitcoin for culprits involved in hacking attacks, tax fraud and drug trafficking. A United States jury indicted 38-year-old...

ARM Trusted Firmware MT_EXECUTE_NEVER Protection Mechanism Bypass Vulnerability

ARM Trusted Firmware is a set of interface standards that provide an ARMv8-A secure software implementation. A security vulnerability exists in ARM Trusted Firmware version 1.3. An attacker can exploit this vulnerability to bypass the MTEXECUTENEVER protection mechanism...

CVE-2016-8446

An elevation of privilege vulnerability in MediaTek components, including the thermal driver and video driver, could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged...