Joomla! Component Swap Factory 2.2.1 - SQL Injection

Joomla! Component Swap Factory 2.2.1 - SQL Injection Exploit Title: Joomla! Component Swap Factory 2.2.1 - SQL Injection Dork: N/A Date: 2018-09-24 Vendor Homepage: https://thephpfactory.com/ Software Link:...

Joomla! Component Swap Factory 2.2.1 - SQL Injection

Exploit Title: Joomla! Component Swap Factory 2.2.1 - SQL Injection Dork: N/A Date: 2018-09-24 Vendor Homepage: https://thephpfactory.com/ Software Link: https://extensions.joomla.org/extensions/extension/ads-a-affiliates/classified-ads/swap-factory/ Version: 2.2.1 Category: Webapps Tested on:...

Unbreakable Enterprise kernel security update

2.6.39-400.301.1 - x86/speculation/l1tf: Fix overflow in l1tfpfnlimit on 32bit Vlastimil Babka Orabug: 28505519 CVE-2018-3620 - x86/speculation/l1tf: Exempt zeroed PTEs from inversion Sean Christopherson Orabug: 28505519 CVE-2018-3620 - x86/speculation/l1tf: Protect PAE swap entries against L1TF...

Hanging Up on Mobile in the Name of Security

An entrepreneur and virtual currency investor is suing AT&T for $224 million, claiming the wireless provider was negligent when it failed to prevent thieves from hijacking his mobile account and stealing millions of dollars in cryptocurrencies. Increasingly frequent, high-profile attacks like the...

Florida Man Arrested in SIM Swap Conspiracy

Police in Florida have arrested a 25-year-old man accused of being part of a multi-state cyber fraud ring that hijacked mobile phone numbers in online attacks that siphoned hundreds of thousands of dollars worth of bitcoin and other cryptocurrencies from victims. On July 18, 2018, Pasco County...

Reddit Breach Highlights Limits of SMS-Based Authentication

Reddit.com today disclosed that a data breach exposed some internal data, as well as email addresses and passwords for some Reddit users. As Web site breaches go, this one doesn't seem too severe. What's interesting about the incident is that it showcases once again why relying on mobile text...

T-Swap-Token Numeric Error Vulnerability

T-Swap-Token T-S-T is an Ether-based digital currency. An integer overflow vulnerability exists in the 'mintToken' function in T-S-T's smart contract implementation. An attacker could use this vulnerability to set the balance of any user to an arbitrary value...

Integer overflow

The mintToken function of a smart contract implementation for T-Swap-Token T-S-T, an Ethereum token, has an integer overflow that allows the owner of the contract to set the balance of an arbitrary user to any value...

CVE-2018-13463

The CVE-2018-13463 entry concerns T-Swap-Token (T-S-T). The mintToken function in the token’s smart contract has an integer overflow that enables the contract owner to set any user’s balance to an arbitrary value. Reported across NVD/CNVD entries; no public details on exploit status or remediatio...

PT-2018-11839

Name of the Vulnerable Software and Affected Versions T-Swap-Token T-S-T affected versions not specified Description The issue concerns an integer overflow in the mintToken function of a smart contract implementation for T-Swap-Token T-S-T, an Ethereum token. This overflow allows the owner of the...

PT-2018-11840

Name of the Vulnerable Software and Affected Versions t swap affected versions not specified Description The issue concerns an integer overflow in the mintToken function of a smart contract implementation for t swap, an Ethereum token. This overflow allows the owner of the contract to set the...

CVE-2018-13463: Integer Overflow or Wraparound

The mintToken function of a smart contract implementation for T-Swap-Token T-S-T, an Ethereum token, has an integer overflow that allows the owner of the contract to set the balance of an arbitrary user to any value...

CVE-2018-13196

The sell function of a smart contract implementation for T-Swap-Token T-S-T, an Ethereum token, has an integer overflow in which "amount sellPrice" can be zero, consequently reducing a seller's assets...

Integer overflow

The sell function of a smart contract implementation for T-Swap-Token T-S-T, an Ethereum token, has an integer overflow in which "amount sellPrice" can be zero, consequently reducing a seller's assets...

CVE-2018-13196

The sell function of a smart contract implementation for T-Swap-Token T-S-T, an Ethereum token, has an integer overflow in which "amount sellPrice" can be zero, consequently reducing a seller's assets...

CVE-2018-13196

CVE-2018-13196 affects the T-Swap-Token (T-S-T) smart contract on Ethereum. The sell function contains an integer overflow where amount * sellPrice can evaluate to zero, leading to a reduction of a seller’s assets. The connected sources (NVD entry and related records) describe the vulnerability c...

CVE-2018-13196: Integer Overflow or Wraparound

The sell function of a smart contract implementation for T-Swap-Token T-S-T, an Ethereum token, has an integer overflow in which "amount sellPrice" can be zero, consequently reducing a seller's assets...

PT-2018-11677

Name of the Vulnerable Software and Affected Versions T-Swap-Token T-S-T affected versions not specified Description The issue concerns an integer overflow in the sell function of a smart contract implementation for T-Swap-Token T-S-T, an Ethereum token. Specifically, when amount sellPrice equals...

SUSE-SU-2018:1832-1 Security update for unixODBC

This update for unixODBC to version 2.3.6 fixes the following issues: - CVE-2018-7409: Buffer overflow in unicodetoansicopy was fixed in 2.3.5 bsc1082290 - CVE-2018-7485: Swapped arguments in SQLWriteFileDSN in odbcinst/SQLWriteFileDSN.c bsc1082484 Other fixes: - Enabled --enable-fastvalidate...

Man-in-the-Middle (MitM)

grunt-ccompiler is vulnerable to man-in-the-middle MitM attack. This is possible because it does not prevent downloading of executables via HTTP if the attacker is on the network or positioned in between the user and the remote server. Consequently, it may potentially cause remote code execution...