Authorities Fully Behead Hydra Dark Marketplace

German authorities have taken down the Hydra marketplace – a popular destination on the Dark Web for trading in illicit goods and services, including cyberattack tools and stolen data. This week, they were able to commandeer and take offline underpinning infrastructure such as servers, plus insta...

advanced-traders.de Cross Site Scripting vulnerability OBB-2416282

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

mint() Input Variable minOut Does Not Pass Value to interface ICurveFi add_liquidity()

Handle Meta0xNull Vulnerability details Impact Dev Note in Zap.sol: @param minOut Minimum amount of ibbtc to mint. Use for capping slippage while adding liquidity to curve pool. User Input minOut in function mint: function mintIERC20 token, uint amount, uint poolId, uint idx, uint minOut In...

Attackers can force liquidations by borrowing large amounts of an asset.

Handle tensors Vulnerability details Impact Consider an attacker who borrows enough to greatly increase the oracle rate. It is claimed that arbitrageurs will come in a fix this discrepancy before the attacker has a chance to profit off of his price manipulation: "Over the next 1 hour, the effect ...

Rewards cannot be withdrawn

Email address [email protected] Handle @cmichelio Eth address 0x6823636c2462cfdcD8d33fE53fBCD0EdbE2752ad Vulnerability details The rewards for a recipient in IncentiveDistribution.sol are stored in the storage mapping indexed by recipient accruedRewardrecipient and the recipient is the actual margi...

Wrong liquidation logic

Eth address 0x6823636c2462cfdcD8d33fE53fBCD0EdbE2752ad Vulnerability details The belowMaintenanceThreshold function decides if a trader can be liquidated: function belowMaintenanceThresholdCrossMarginAccount storage account internal returns bool uint256 loan = loanInPegaccount, true; uint256...

Security Perspective: Why Do 90% of Traders Fail?

By Owais Sultan A couple of years ago, there were already close to 14 million traders all over the globe. It may come as surprising - most of them fail. This is a post from HackRead.com Read the original post: Security Perspective: Why Do 90% of Traders Fail?...

traders-alliance.com XSS vulnerability

Open Bug Bounty ID: OBB-620342 Description| Value ---|--- Affected Website:| traders-alliance.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

4-traders.com XSS vulnerability

Open Bug Bounty ID: OBB-615163 Description| Value ---|--- Affected Website:| 4-traders.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

affiliate.traders-trust.com XSS vulnerability

Vulnerable URL: http://affiliate.traders-trust.com/scripts/banner.php?aaid=60039752aed9dc3b7f7bid=f04775a0=1&refx2s6d;=%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| Yes, at 26.07.2017 Latest check for patch:| 26.07.2017 17:31 GMT Vulnerability type:|...

[Onapsis Security Advisories] Multiple Hard-coded Usernames in SAP Components

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Onapsis Security Advisories:Multiple Hard-coded Usernames CWE-798 have been found and patched in a variety of SAP components. Summaries of the advisories with links to full versions follow: 1. ONAPSIS-2014-011-SAP Project System Structures and...

BlackNova Traders SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: BlackNova Traders SQL Injection Vulnerability Date : 2/14/2013 Author : ITTIHACK Home : http://ittihack.com Vendor : http://blacknova.net/ Download : http://sourceforge.net/projects/blacknova/ Version : 0.663 Category : webapps...

BlackNova Traders SQL Injection

BlackNova Traders SQL Injection Vulnerability Software : BlackNova Date : 2/12/2013 Vendor : http://blacknova.net/ Download : http://sourceforge.net/projects/blacknova/ Language : PHP Tested on: Windows OS + Apache Server Author : ITTIHACK Home : http://ittihack.com Description BlackNova Traders ...

BlackNova Traders - news.php SQL Injection

BlackNova Traders - news.php SQL Injection source: https://www.securityfocus.com/bid/57910/info BlackNova Traders is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker ...

BlackNova Traders - 'news.php' SQL Injection

source: https://www.securityfocus.com/bid/57910/info BlackNova Traders is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access or...

Carbon Trading Halted After Hack Of Exchange

The European Commission EC suspended trading in carbon credits on Wednseday after unknown hackers compromised the accounts of Czech traders and siphoned off around $38 million, according to published reports. EU countries including Estonia, Austria, The Czech Republic, Poland and France began...

Joomla! Component allCineVid 1.0.0 - Blind SQL Injection

Joomla! Component allCineVid 1.0.0 - Blind SQL Injection http://adv.salvatorefresta.net/allCineVidJoomlaComponent1.0.0BlindSQLInjectionVulnerability-18012011.txt allCineVid Joomla Component 1.0.0 Blind SQL Injection Vulnerability Name allCineVid Vendor http://www.joomtraders.com Versions Affected...