14122 matches found
Unspecified vulnerability in Linkplay firmware
The Anker Zolo Halo is a smart speaker from Anker Philippines. A security vulnerability exists in the Linkplay firmware. An attacker can exploit the vulnerability to execute code...
UserWallet Security Vulnerability
UserWallet is an ethereum-based digital currency. A security vulnerability exists in UserWallet's smart contract implementation. An attacker can exploit the vulnerability to change the value of sweeperList to 0X123456789...
Unspecified vulnerability in Linkplay firmware
The Anker Zolo Halo is a smart speaker from Anker Philippines. A security vulnerability exists in the Linkplay firmware. An attacker can exploit the vulnerability to execute code...
MegaCryptoPolis Security Vulnerability
MegaCryptoPolis is an ethereum-based blockchain game. A denial of service vulnerability exists in the 'doPayouts' function in the smart contract implementation of MegaCryptoPolis. An attacker can exploit this vulnerability to cause a denial of service...
MKCB Number Error Vulnerability
MKCB is a digital currency as well as Ether. An integer overflow vulnerability exists in the 'sell' function in the smart contract implementation of MKCB. An attacker can exploit this vulnerability by setting the sell price to a large value to execute arbitrary code on the system...
MyYLC Numeric Error Vulnerability
MyYLC is an ethereum-based digital currency. An input validation error vulnerability exists in the 'mintToken' function in MyYLC's smart contract implementation. An attacker could use this vulnerability to set the balance of any user to an arbitrary value...
Cisco Small Business Smart and Managed Switches Session Management Vulnerability
A vulnerability in session management for the web-based interface of Cisco Small Business Smart and Managed Switches could allow an unauthenticated, remote attacker to defeat authentication protections and gain unauthorized access to the management interface. The attacker could obtain the...
Virgo_ZodiacToken Logic Flaw Vulnerability
VirgoZodiacToken is an Ether-based digital currency. A security vulnerability exists in VirgoZodiacToken's smart contract implementation that stems from the program's use of '='. An attacker could use the vulnerability to transfer funds from an arbitrary address to a user's address...
Cryptogs Security Breach
Cryptogs is an ethereum-based digital currency. A security vulnerability exists in the 'endCoinFlip' and 'throwSlammer' functions in Cryptogs' smart contract implementation. An attacker could use the vulnerability to infer random values and win the game...
smart-coaching.pl Cross Site Scripting vulnerability OBB-1209825
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
smart-cities.eu Cross Site Scripting vulnerability OBB-1209630
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
Samsung Smart Viewer Cross-site Scripting (CVE-2018-11689)
A cross-site scripting vulnerability exists in Samsung smartviewer . Successful exploitation of this vulnerability would allow remote attackers to inject arbitrary web script into the affected system...
HP Printers Multiple Vulnerabilities - Ripple20 (HPSBPI03666)
Multiple HP printers are vulnerable to multiple vulnerabilities in the Treck IP stack Ripple20. Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...
smart-invest.hr Cross Site Scripting vulnerability OBB-1203617
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
Unauthorized Access Vulnerability in Smart Government OA Collaboration Platforms
Intelligent government OA collaborative office platform is a set of independent research and development of collaborative office software, is specifically tailored for the government office of the new office software system. Unauthorized access vulnerability exists in Smart Government OA...
ROC Security Vulnerabilities
ROC aka Rasputin Online Coin is a virtual currency. There is a security vulnerability in the 'requestdivend' function in ROC's smart contract implementation. An attacker could use this vulnerability to steal the entire contract's Ether...
KoreaShow Number Error Vulnerability
KoreaShow is a system for cryptocurrency trading. An integer overflow vulnerability exists in the 'transferMulti' function in the smart contract implementation of KoreaShow. The vulnerability can be exploited by an attacker to increase digital assets with the help of the 'value' parameter...
Ether Cartel Security Vulnerability
Ether Cartel is a blockchain-based pharmaceutical simulation game. A security vulnerability exists in the 'DrugDealer' function of the smart contract implementation in Ether Cartel. An attacker could use the vulnerability to take control of the contract's ownership and potentially manipulate...
Unauthorized Access Vulnerability in Intelligent Parking Cloud Charging System of Chongqing Tedi Technology Co.
Chongqing Tedi Technology Co., Ltd. leads the development and construction of intelligent community cloud platform, to create a cloud community service platform based on the integration of webpage + WeChat + APP, centralized management and control of community intelligent equipment, including...
CVE-2020-3245
A vulnerability in the web application of Cisco Smart Software Manager On-Prem SSM On-Prem could allow an unauthenticated, remote attacker to create arbitrary user accounts. The vulnerability is due to the lack of authorization controls in the web application. An attacker could exploit this...