EUVD-2015-4645

Malware in sbrugna...

MAL-2025-41516 Malicious code in @twork-data-services/proxy-prime-api-v1-account-overdraft-info (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-41482 Malicious code in @twork-data-services/company-overdraft (npm)

--- -= Per source details. Do not edit below this line.=-...

Design/Logic Flaw

B.A.S C2Box before 4.0.0 r19171 relies on client-side validation, which allows remote attackers to "corrupt the business logic" via a negative value in an overdraft...

CVE-2015-4626

B.A.S C2Box before 4.0.0 r19171 relies on client-side validation, which allows remote attackers to "corrupt the business logic" via a negative value in an overdraft...

CVE-2015-4626

CVE-2015-4626 affects B.A.S C2Box; versions before 4.0.0 (r19171) rely on client-side validation, enabling a remote attacker to bypass validation and corrupt business logic via negative overdraft input. The vulnerability stems from unvalidated client input allowing server-side impact. >=4.0.0 ...

CVE-2015-4626: Undefined Security Weakness

B.A.S C2Box before 4.0.0 r19171 relies on client-side validation, which allows remote attackers to "corrupt the business logic" via a negative value in an overdraft...

PT-2017-6772

Name of the Vulnerable Software and Affected Versions B.A.S C2Box versions prior to 4.0.0 r19171 Description The issue relies on client-side validation, allowing remote attackers to corrupt the business logic by submitting a negative value in an overdraft. Recommendations For versions prior to...