MAL-2025-26460 Malicious code in miranda-bunyan-testcafe-chakra-ui (npm)

The package miranda-bunyan-testcafe-chakra-ui was found to contain malicious code...

CVE-2023-48562

creationtimestamp| type| source ---|---|--- 2024-01-06 09:51:38+00:00| seen| https://t.me/ctinow/163874...

Upgraded Q -> M from #373 [1670018401792]

Judge has assessed an item in Issue 373 as M risk. The relevant finding follows: N2. ETH not accumulated in previewAccumulatedETH supposed to have accumulated += ... Although it is an external view function, depending on its usages, it may present more issues to the callers. --- The text was...

Upgraded Q -> M from 400 [1666366548697]

Judge has assessed an item in Issue 400 as Medium risk. The relevant finding follows: Use address.call instead of payable.transfer Avoid use of transfer to send ether since transfer sends a fixed amount of gas and future gas cost change may cause revert, The receiving contract will also revert if...

Upgraded Q -> M from 130 [1656344996086]

Judge has assessed an item in Issue 130 as Medium risk. The relevant finding follows: --- The text was updated successfully, but these errors were encountered: All reactions...

Upgraded Q -> H from 25 [1655007954017]

Judge has assessed an item in Issue 25 as High risk. The relevant finding follows: Fees should have a boundary of 100% 10000: Otherwise the contract will try to transfer more than possible which will result in reverts: It might also be helpful the have an fixed upper boundary that doesn't allow t...

HSTS Missing From HTTPS Server (RFC 6797) for DDC servers

Security team running Nessus scans are reporting they are being notified of a finding on their controllers - HSTS Missing From HTTPS Server - Nessus Plugin ID 84502 which is a medium finding...

IBM Tivoli Monitoring Java Unspecified Vulnerability

According to the version found in the .properties files, the remote host has a version of IBM Tivoli Monitoring that contains a Category I security finding in the packaged version of Java. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid53490; scriptversion"1.7";...