Design/Logic Flaw

The approveAndCallcode function of a smart contract implementation for Block 18 18T, an tradable Ethereum ERC20 token, allows attackers to steal assets e.g., transfer the contract's balances into their account because the callcode i.e., spender.callextraData is not verified, aka the "evilReflex"...

tradablebits.com Open Redirect vulnerability

Vulnerable URL: https://tradablebits.com/crm/oauth?logintype=emailid=7174685url=https://openbugbounty.org Details: Description| Value ---|--- Patched:| Yes, at 05.04.2017 Latest check for patch:| 05.04.2017 15:42 GMT Vulnerability type:| Open Redirect Vulnerability status:| Publicly disclosed Ale...