Exploit for CVE-2022-36537

CVE-2022-36537 Summary R1Soft Server Backup Manager uses t...

GAM3 Awards: Leading crypto firms and influencers to honor best in Web3 gaming

By Deeba Ahmed GAM3 awards are dubbed as the Grammys of the Web3 gaming industry. This is a post from HackRead.com Read the original post: GAM3 Awards: Leading crypto firms and influencers to honor best in Web3 gaming...

Theft of ETH that was not used for successful execution of orders in non-atomic execution

Lines of code Vulnerability details Description There is an execute function in LooksRareAggregator contract. It refunds any ETH that was unused for example that left due to the unsuccessful execution of an order at the end of its execution flow: returnETHIfAnyoriginator; returnETHIfAny function ...

AS Roma’s Paulo Dybala is the new face of Web3 soccer game MonkeyLeague

By Deeba Ahmed MonkeyLeague allows players to build a dream team of MonkeyAthlete NFTs to fill field positions and compete against real users. This is a post from HackRead.com Read the original post: AS Romas Paulo Dybala is the new face of Web3 soccer game MonkeyLeague...

Malicious code in web3-update (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 77fdc33138ce74bde93c5bcbd67fafc405aeeb7ae156a91124a5500d3f1b869c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-7084 Malicious code in web3-update (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 77fdc33138ce74bde93c5bcbd67fafc405aeeb7ae156a91124a5500d3f1b869c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MetaMask: Possible to spoof Origin in "Connected Sites"

A vulnerability was discovered in MetaMask that allowed for the spoofing of the origin domain name in the "Connected Sites" list. This was caused by a CSS style sheet that set the direction to "right-to-left", which resulted in the order of characters in the domain name being messed up and...

Malicious code in tokenary-web3-provider (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0f1e8a0777e06e63c14f7812c77bf6007cf1804e2e33f10d1e76b7b0ea34faf9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious Package

Overview tokenary-web3-provider is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this...

With $11.5M In Funding, Naoris Protocol Will Use Blockchain & Decentralization To Plug Web3 Security Gaps

By Owais Sultan By creating a decentralized network of trusted devices that are incentivized to continuously validate each other to ensure… This is a post from HackRead.com Read the original post: With $11.5M In Funding, Naoris Protocol Will Use Blockchain & Decentralization To Plug Web3 Security...

The vulnerability of the “Restore Session” function in Web3 wallets for cryptocurrency MetaMask allows a hacker to gain access to the session restoration password.

The vulnerability of the “Restore Session” function in Web3 wallets for cryptocurrency MetaMask relates to the storage of confidential information in an unencrypted form. Exploiting this vulnerability could allow a attacker to gain access to the session restoration function...

Malicious code in web3-integration (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f5faeaf5e592fa854a38c5ee80aeb77b40c09f82cd8fbdaf7fdc37f6b095cb3a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-7082 Malicious code in web3-integration (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f5faeaf5e592fa854a38c5ee80aeb77b40c09f82cd8fbdaf7fdc37f6b095cb3a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in mina-web3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2fce90ac2154c56898c906006c31912f5bb2bd80e13d5dc7d3c368249a65abba Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-4596 Malicious code in mina-web3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2fce90ac2154c56898c906006c31912f5bb2bd80e13d5dc7d3c368249a65abba Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in web3-ppos (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a4c548943dd0c85744c10b6f12851f7663c9e68d366526bff9b14c987ff303aa Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-7083 Malicious code in web3-ppos (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a4c548943dd0c85744c10b6f12851f7663c9e68d366526bff9b14c987ff303aa Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in moralis-web3-providers-ws (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e15271ff70759690176a5c96c5646ff12bc531be0ff9eec1e3baf0c3c3a9ffa5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-4695 Malicious code in moralis-web3-providers-ws (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e15271ff70759690176a5c96c5646ff12bc531be0ff9eec1e3baf0c3c3a9ffa5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-7081 Malicious code in web3-0.20.7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b862a70b61a696bec847f0c0df8826bd0b41034d6cd593a8f578765c42ff15fa Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...