r-b.ru XSS vulnerability

Open Bug Bounty ID: OBB-648958 Description| Value ---|--- Affected Website:| r-b.ru Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

PT-2018-12280

Name of the Vulnerable Software and Affected Versions radare2 version 2.7.0 Description The issue allows remote attackers to cause a denial of service, resulting in a heap-based buffer over-read and application crash, via a crafted Mini Crash Dump file. This is related to the r bin mdmp init...

PT-2018-12279

Name of the Vulnerable Software and Affected Versions radare2 version 2.7.0 Description The issue is related to a denial of service caused by an invalid read and application crash. This occurs when a crafted ELF file is processed due to missing input validation in the r bin dwarf parse comp unit...

PT-2018-12281

Name of the Vulnerable Software and Affected Versions radare2 version 2.7.0 Description The issue is related to a denial of service heap-based buffer over-read and application crash that can be caused by remote attackers via a crafted .class file. This is due to missing input validation in the r...

CVE-2018-2436

Executing transaction WRCK in SAP R/3 Enterprise Retail EHP6 does not perform necessary authorization checks for an authenticated user, resulting in escalation of privileges...

CVE-2018-2436

CVE-2018-2436 affects SAP R/3 Enterprise Retail (EHP6): an authenticated user can escalate privileges due to missing authorization checks on transaction WRCK. Impact described as privilege escalation with high CVSS3 score (8.8) and notable network exposure. Documented references point to SAP Note...

PT-2018-15560

Name of the Vulnerable Software and Affected Versions SAP R/3 Enterprise Retail EHP6 version not specified Description The issue arises from the execution of transaction WRCK in SAP R/3 Enterprise Retail EHP6, where necessary authorization checks for an authenticated user are not performed, leadi...

OpenSSH < 6.6 SFTP - Command Execution Exploit

Exploit for linux platform in category remote exploits OpenSSH 8 else 32 print "+ bit libc mapped @ -, path: ".formatBITS, addr0, addr1, path libcbase = intaddr0, 16 libcpath = path if "stack" in line: addr = addr.split"-" saddrstart = intaddr0, 16 saddrend = intaddr1, 16...

CVE-2018-2436: Missing Authorization

Executing transaction WRCK in SAP R/3 Enterprise Retail EHP6 does not perform necessary authorization checks for an authenticated user, resulting in escalation of privileges...

Integer overflow

The mintToken function of a smart contract implementation for R Time Token v3 RS Contract Name: RTokenMain, an Ethereum token, has an integer overflow that allows the owner of the contract to set the balance of an arbitrary user to any value...

CVE-2018-13691

CVE-2018-13691 describes an integer overflow in the mintToken function of the smart contract implementation for R Time Token v3 (RS) , specifically the contract named RTokenMain . This vulnerability allows the owner of the contract to set the balance of an arbitrary user to any value. The provide...

CVE-2018-13691: Integer Overflow or Wraparound

The mintToken function of a smart contract implementation for R Time Token v3 RS Contract Name: RTokenMain, an Ethereum token, has an integer overflow that allows the owner of the contract to set the balance of an arbitrary user to any value...

PT-2018-12082

Name of the Vulnerable Software and Affected Versions R Time Token v3 RS Description The issue concerns an integer overflow in the mintToken function of the RTokenMain smart contract implementation. This overflow allows the contract owner to set the balance of any user to any value. Recommendatio...

CVE-2018-13223

The sell function of a smart contract implementation for R Time Token v3 RS Contract Name: RTokenMain, an Ethereum token, has an integer overflow in which "amount sellPrice" can be zero, consequently reducing a seller's assets...

CVE-2018-13223

The CVE-2018-13223 entry corresponds to a vulnerability in the sell function of the R Time Token v3 (RS) smart contract (RTokenMain) on Ethereum. The issue is an integer overflow where the calculation amount * sellPrice can evaluate to zero, which can incorrectly reduce a seller’s assets. The des...

PT-2018-11705

Name of the Vulnerable Software and Affected Versions R Time Token v3 RS Description The issue concerns an integer overflow in the sell function of the RTokenMain smart contract implementation. Specifically, when amount sellPrice equals zero, it can lead to a reduction in a seller's assets...

CVE-2018-12103: Incorrect Authorization

An issue was discovered on D-Link DIR-890L with firmware 1.21B02beta01 and earlier, DIR-885L/R with firmware 1.21B03beta01 and earlier, and DIR-895L/R with firmware 1.21B04beta04 and earlier devices all hardware revisions. Due to the predictability of the /docs/captchanumber.jpeg URI, being local...

CVE-2018-13223: Integer Overflow or Wraparound

The sell function of a smart contract implementation for R Time Token v3 RS Contract Name: RTokenMain, an Ethereum token, has an integer overflow in which "amount sellPrice" can be zero, consequently reducing a seller's assets...

ipanemaplaza.com.br XSS vulnerability

Open Bug Bounty ID: OBB-639041 Description| Value ---|--- Affected Website:| ipanemaplaza.com.br Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

PT-2018-11545

Name of the Vulnerable Software and Affected Versions YXcms version 1.4.7 Description The issue allows remote attackers to delete arbitrary files. This is achieved through the index.php?r=admin/photo/delpic endpoint, specifically by manipulating the picname parameter. Recommendations For YXcms...