553 matches found
All Vulnerabilities for web3.sydneygirl-h.schools.nsw.edu.au Patched via Open Bug Bounty
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Affected Website:| web3.sydneygirl-h.schools.nsw.edu.au...
Data Corruption
vyper causes data corruption. Incorrect data handling allows an attacker to cause a data corruption via certain Web3 libraries with Vyper-deploy forwarder proxy contracts using Vyper's built-in createforwarderto function...
VVE-2021-0002: Incorrect `returndatasize` when using simple forwarder proxies deployed prior to EIP-1167 adoption
Background @tjayrush reported a data handling issue with certain Web3 libraries using Vyper-deploy forwarder proxy contracts using our Vyper's built-in createforwarderto function prior to our change to support EIP-1167 style forwarder proxies. Impact If you are an end user of a forwarder-style...
Malicious Package in web3-eht
All versions of this package contained malware. The package was designed to find and exfiltrate cryptocurrency wallets. Recommendation Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated...
GHSA-29FH-XCJR-P7RX Malicious Package in web3-eht
All versions of this package contained malware. The package was designed to find and exfiltrate cryptocurrency wallets. Recommendation Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated...
qos-web3.exigo.ch Improper Access Control vulnerability OBB-1283576
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
003-gas-convert (=1.0.1), 0x-hunter-core (>=1.0.0 <=1.0.0-12) +5469 more potentially affected by unknown CVE via web3 (>=0.19.1 <=1.5.2)
web3 NPM version =0.19.1, =1.0.0, =0.0.3, =1.1.0, =0.9.9, =0.0.1, =1.0.0, =0.1.0, =0.1.3 and more Source cves: unknown CVE Source advisory: OSV:GHSA-27V7-QHFV-RQQ8...
GHSA-27V7-QHFV-RQQ8 Insecure Credential Storage in web3
All versions of web3 are vulnerable to Insecure Credential Storage. The package stores encrypted wallets in local storage and requires a password to load the wallet. Once the wallet is loaded, the private key is accessible via LocalStorage. Exploiting this vulnerability likely requires a Cross-Si...
Insecure Credential Storage in web3
All versions of web3 are vulnerable to Insecure Credential Storage. The package stores encrypted wallets in local storage and requires a password to load the wallet. Once the wallet is loaded, the private key is accessible via LocalStorage. Exploiting this vulnerability likely requires a Cross-Si...
Insecure Credential Storage
Overview All versions of web3 are vulnerable to Insecure Credential Storage. The package stores encrypted wallets in local storage and requires a password to load the wallet. Once the wallet is loaded, the private key is accessible via LocalStorage. Exploiting this vulnerability likely requires a...
blockapps-vm (>=2.0.0 <=2.1.0), blockapps-web3 (>=1.1.4 <=1.1.6) +11 more potentially affected by CVE-2018-19183 via ethereumjs-vm (>=1.2.1 <=2.4.0)
ethereumjs-vm NPM version =1.2.1, =2.0.0, =1.1.4, =1.1.0, =0.0.2, =1.0.1, =3.0.4, =0.1.1, =0.0.1, =1.1.6, =1.1.41 - newstudio-lib =0.1.0 - remix-solidity =0.0.1 Source cves: CVE-2018-19183 Source advisory: OSV:GHSA-2MW7-WGGM-M6W3...
web3.schs.switzerland.k12.in.us XSS vulnerability
Open Bug Bounty ID: OBB-601162 Description| Value ---|--- Affected Website:| web3.schs.switzerland.k12.in.us Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
Riverbed SteelHead VCX File Read
This module exploits an authenticated arbitrary file read in the log module's filter engine. SteelHead VCX VCX255U version 9.6.0a was confirmed as vulnerable. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class...