UBUNTU-CVE-2018-19931

An issue was discovered in the Binary File Descriptor BFD library aka libbfd, as distributed in GNU Binutils through 2.31. There is a heap-based buffer overflow in bfdelf32swapphdrin in elfcode.h because the number of program headers is not restricted...

CVE-2018-18583

An issue has been found in LuPng through 2017-03-10. It is a heap-based buffer overflow in insertByte in miniz/lupng.c during a write operation for data obtained from a swap...

CVE-2018-18583

An issue has been found in LuPng through 2017-03-10. It is a heap-based buffer overflow in insertByte in miniz/lupng.c during a write operation for data obtained from a swap...

CVE-2018-17384

SQL Injection exists in the Swap Factory 2.2.1 component for Joomla! via the filterorderDir or filterorder parameter...

CVE-2018-17384

SQL Injection exists in the Swap Factory 2.2.1 component for Joomla! via the filterorderDir or filterorder parameter...

Sql injection

SQL Injection exists in the Swap Factory 2.2.1 component for Joomla! via the filterorderDir or filterorder parameter...

CVE-2018-17384

CVE-2018-17384 affects Joomla! Swap Factory 2.2.1. The vulnerability is a SQL Injection in the Swap Factory component, exploitable via the filter_order_Dir and filter_order parameters, allowing an attacker to manipulate database queries. Root cause is unsafe handling of user input in the affected...

CVE-2018-17384

SQL Injection exists in the Swap Factory 2.2.1 component for Joomla! via the filterorderDir or filterorder parameter...

Component Swap Factory SQL Injection Vulnerability in Joomla!

Joomla! is the United States Open Source Matters team developed a set of open source content management system CMS. A SQL injection vulnerability exists in the Swap Factory component of Joomla! The vulnerability is caused by inserting SQL commands into the query string of a web form submission or...

Joomla Swap Factory 2.2.1 Component - SQL Injection Vulnerability

Exploit for php platform in category web applications...

Joomla! Component Swap Factory 2.2.1 - SQL Injection

Joomla! Component Swap Factory 2.2.1 - SQL Injection Exploit Title: Joomla! Component Swap Factory 2.2.1 - SQL Injection Dork: N/A Date: 2018-09-24 Vendor Homepage: https://thephpfactory.com/ Software Link:...

Joomla! Component Swap Factory 2.2.1 - SQL Injection

Exploit Title: Joomla! Component Swap Factory 2.2.1 - SQL Injection Dork: N/A Date: 2018-09-24 Vendor Homepage: https://thephpfactory.com/ Software Link: https://extensions.joomla.org/extensions/extension/ads-a-affiliates/classified-ads/swap-factory/ Version: 2.2.1 Category: Webapps Tested on:...

Unbreakable Enterprise kernel security update

2.6.39-400.301.1 - x86/speculation/l1tf: Fix overflow in l1tfpfnlimit on 32bit Vlastimil Babka Orabug: 28505519 CVE-2018-3620 - x86/speculation/l1tf: Exempt zeroed PTEs from inversion Sean Christopherson Orabug: 28505519 CVE-2018-3620 - x86/speculation/l1tf: Protect PAE swap entries against L1TF...

Hanging Up on Mobile in the Name of Security

An entrepreneur and virtual currency investor is suing AT&T for $224 million, claiming the wireless provider was negligent when it failed to prevent thieves from hijacking his mobile account and stealing millions of dollars in cryptocurrencies. Increasingly frequent, high-profile attacks like the...

Florida Man Arrested in SIM Swap Conspiracy

Police in Florida have arrested a 25-year-old man accused of being part of a multi-state cyber fraud ring that hijacked mobile phone numbers in online attacks that siphoned hundreds of thousands of dollars worth of bitcoin and other cryptocurrencies from victims. On July 18, 2018, Pasco County...

Reddit Breach Highlights Limits of SMS-Based Authentication

Reddit.com today disclosed that a data breach exposed some internal data, as well as email addresses and passwords for some Reddit users. As Web site breaches go, this one doesn't seem too severe. What's interesting about the incident is that it showcases once again why relying on mobile text...

T-Swap-Token Numeric Error Vulnerability

T-Swap-Token T-S-T is an Ether-based digital currency. An integer overflow vulnerability exists in the 'mintToken' function in T-S-T's smart contract implementation. An attacker could use this vulnerability to set the balance of any user to an arbitrary value...

Integer overflow

The mintToken function of a smart contract implementation for T-Swap-Token T-S-T, an Ethereum token, has an integer overflow that allows the owner of the contract to set the balance of an arbitrary user to any value...

CVE-2018-13463

The CVE-2018-13463 entry concerns T-Swap-Token (T-S-T). The mintToken function in the token’s smart contract has an integer overflow that enables the contract owner to set any user’s balance to an arbitrary value. Reported across NVD/CNVD entries; no public details on exploit status or remediatio...

CVE-2018-13196

The sell function of a smart contract implementation for T-Swap-Token T-S-T, an Ethereum token, has an integer overflow in which "amount sellPrice" can be zero, consequently reducing a seller's assets...