122 matches found
debtWriteOff updates totalFrozen immaturely, thereby losing staker rewards
Handle kenzo Vulnerability details debtWriteOff updates totalFrozen before withdrawing unionToken rewards. As the borrower is overdue, this means the staker calling debtWriteOff will lose his rewards if for example totalStaked == totalFrozen. Note: If the borrower would to first call...
Users could shift tokens on Staker with more than he has staked
Handle shw Vulnerability details Impact The shiftTokens function of Staker checks whether the user has staked at least the number of tokens he wants to shift from one side to the other line 885. A user could call the shiftTokens function multiple times before the next price update to shift the...
Incorrect parameters passed while adding new staking fund
Handle hack3r-0m Vulnerability details initializeMarket can be called with different marketIndex each time while calling IStakerstaker.addNewStakingFund with the same parameters resulting in overriding of mapping in the staker contract and hence removing past staking funds. latestMarket should be...
Potential underflow on userAmountStaked[token][msg.sender] in _withdraw
Handle 0xImpostor Vulnerability details Impact Underflowing userAmountStakedtokenmsg.sender once will let me exploit the entire token balance in the Staker contract. This can only be exploited if marketUnstakeFeee18 is ≥ 50%. Proof of Concept 1. Admin sets marketUnstakeFeee18 for this marketIndex...
Potential for market to be created but never initialized
Handle loop Vulnerability details Impact Multiple markets can be created before being initialized since createNewSyntheticMarket and initializeMarket are separate functions. The SyntheticTokens used in initialization will however always be those of the latest market created. Proof of Concept Let'...
FlatNuke 3.1.4 (FlatPoll) Persistent XSS Vulnerability
Exploit for php platform in category web applications ------------------------------------------------------------------------- + FlatNuke alertdocument.cookie&body=This is my comment ------------------------------------------------------------------------------------------------ 0day.today...
Agoko CMS <= 0.4 - Remote Command Execution Exploit
No description provided by source. !/usr/bin/perl print q -------------------------------------------------- Agoko CMS = 0.4 remote commands execution exploit by staker mail: stakerathotmaildotit -------------------------------------------------- Usage - perl xpl.pl host path Example - perl agk.p...
Podcast Generator <= 1.2 unauthorized Re-Installation Remote Exploit
No description provided by source. ?php Podcast Generator = 1.2 unauthorized CMS Re-Installation Remote Exploit by staker -------------------------------------- mail: stakerathotmaildotit url: http://podcastgen.sourceforge.net -------------------------------------- it works with registerglobals=o...
MyPHP Forum <= 3.0 Edit Topics/Blind SQL Injection Vulnerabilities
No description provided by source. / ----------------------------------------------------------------------------------- MyPHP Forum Final = 3.0 Edit Topics/Blind SQL Injection Remote Vulnerabilities ----------------------------------------------------------------------------------- Discovered By...
PunBB Mod PunPortal 0.1 - Local File Inclusion Exploit
No description provided by source. !/usr/bin/perl =about PunBB PunPortal 0.1 Local File Inclusion Exploit -------------------------------------------------- by athos - stakerathotmaildotit download mod http://www.punres.org/download.php?id=1108 download cms http://punbb.org register globals = 1...
Vikingboard <= 0.2 Beta SQL Column Truncation Vulnerability
No description provided by source. --------------------------------------------------------------------- Vikingboard = 0.2 Beta SQL Column Truncation --------------------------------------------------------------------- Discovered By: StAkeR - StAkeRathotmaildotit Discovered On: 25/09/2008...
H2O-CMS <= 3.4 - Remote Command Execution Exploit (mq = off)
No description provided by source. !/usr/bin/perl ---------------------------------------------------------- H2O-CMS = 3.4 Remote Command Execution Exploit mq = Off Discovered By StAkeRathotmaildotit Download On http://sourceforge.net/projects/h2o-cms...
fuzzylime cms <= 3.03a Local Inclusion / Arbitrary File Corruption PoC
No description provided by source. +------------------------------------------------------------------------+ | fuzzylime cms = 3.03a local inclusion / arbitrary file corruption poc | +-----------+------------------------------------------------------------+ | by staker |...
phpWebThings <= 1.5.2 MD5 Hash Retrieve/File Disclosure Exploit
No description provided by source. !/usr/bin/perl phpWebThings = 1.5.2 MD5 Hash Retrieve / File Disclosure Remote Exploit by staker ------------------------------ mail: stakerathotmaildotit url: http://phpwebthings.nl ------------------------------ NOTE: 1. it works regardless of php.ini settings...
All Club CMS <= 0.0.2 - Remote DB Config Retrieve Exploit
No description provided by source. !/usr/bin/perl =about All Club CMS = 0.0.2 Remote DB Config Retrieve Exploit ------------------------------------------------------- by athos - stakerathotmaildotit download on http://sourceforge.net ------------------------------------------------------- Usage:...
NetRisk <= 2.0 (XSS/SQL Injection) Remote Vulnerabilities
No description provided by source. ----------------------------------------------------------------- NetRisk = 2.0 XSS/SQL Injection Remote Vulnerabilities ----------------------------------------------------------------- Discovered By StAkeR aka athos Download On...
Joomla Component PAX Gallery 0.1 - Blind SQL Injection Vulnerability
No description provided by source. ■ Joomla Component PAX Gallery v 0.1 gid = Blind SQL Injection Vulnerability --------------------------------------- AuToR: XaDoS SecurityCode Team Contact M&: xados at hotmail dot it B§g: Blind $ql inJection Note: safe mode = ON Autor script: Tobias Floery...
LightNEasy sql/no-db <= 2.2.x system Config Disclosure Exploit
No description provided by source. !/usr/bin/perl LightNEasy sql/no-db = 2.2.x system config disclosure exploit by staker ------------------------------ mail: stakerathotmaildotit url: http://www.lightneasy.org ------------------------------ it works with magicquotesgpc=off short explanation:...
AdaptCMS Lite <= 1.3 - Blind SQL Injection Exploit
No description provided by source. !/usr/bin/perl ----------------------------------------------------- AdaptCMS Lite = 1.3 Blind SQL Injection Exploit Discovered By StAkeR - StAkeRathotmaildotit Discovered On 03/10/2008 ----------------------------------------------------- Download...
IP Reg <= 0.4 - Remote Blind SQL Injection Exploit
No description provided by source. !/usr/bin/perl ----------------------------------------------- IP Reg = 0.4 Blind SQL Injection Exploit Discovered By StAkeR - StAkeRathotmaildotit Discovered On 03/10/2008 ----------------------------------------------- Download...