0x-web3 (5.0.0a5), a2ml (>=0.5.0rc5, <=0.5.0rc9) +202 more potentially affected by CVE-2020-25659 via cryptography (2.9.2)

cryptography PYPI version 2.9.2 is affected by a known vulnerability. The following packages have a transitive dependency on cryptography and may be impacted: - 0x-web3 5.0.0a5 - a2ml =0.5.0rc5, =2.6.3, =0.2.3, =0.1.8, =0.110.1b0, =0.9.5, =0.0.6, =1.3.0, =0.4.1, =0.1.0, =0.1.0, =0.1.2 and more...

GHSA-29FH-XCJR-P7RX Malicious Package in web3-eht

All versions of this package contained malware. The package was designed to find and exfiltrate cryptocurrency wallets. Recommendation Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated...

Malicious Package in web3-eht

All versions of this package contained malware. The package was designed to find and exfiltrate cryptocurrency wallets. Recommendation Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated...

qos-web3.exigo.ch Improper Access Control vulnerability OBB-1283576

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

@1hive/wrapper (5.0.0), @300k/dydx-v3-client (>=1.14.2, <=1.14.7) +503 more potentially affected by unknown CVE via web3 (>=1.0.0-beta.24, <=1.5.2)

web3 NPM version =1.0.0-beta.24, =1.14.2, =0.1.2, =1.4.3, =1.1.0-1, =5.0.0, =0.5.0, =1.61.0, =0.0.1-beta, =1.66.0, =1.70.0 and more Source cves: unknown CVE Source advisory: GHSA-27V7-QHFV-RQQ8...

Insecure Credential Storage in web3

All versions of web3 are vulnerable to Insecure Credential Storage. The package stores encrypted wallets in local storage and requires a password to load the wallet. Once the wallet is loaded, the private key is accessible via LocalStorage. Exploiting this vulnerability likely requires a Cross-Si...

@1hive/wrapper (5.0.0), @300k/dydx-v3-client (>=1.14.2, <=1.14.7) +503 more potentially affected by unknown CVE via web3 (>=1.0.0-beta.24, <=1.5.2)

web3 NPM version =1.0.0-beta.24, =1.14.2, =0.1.2, =1.4.3, =1.1.0-1, =5.0.0, =0.5.0, =1.61.0, =0.0.1-beta, =1.66.0, =1.70.0 and more Source cves: unknown CVE Source advisory: OSV:GHSA-27V7-QHFV-RQQ8...

GHSA-27V7-QHFV-RQQ8 Insecure Credential Storage in web3

All versions of web3 are vulnerable to Insecure Credential Storage. The package stores encrypted wallets in local storage and requires a password to load the wallet. Once the wallet is loaded, the private key is accessible via LocalStorage. Exploiting this vulnerability likely requires a Cross-Si...

PT-2019-19989

Name of the Vulnerable Software and Affected Versions web3 versions affected versions not specified Description The issue concerns Insecure Credential Storage. The package stores encrypted wallets in local storage and requires a password to load the wallet. Once the wallet is loaded, the private...

Insecure Credential Storage

Overview All versions of web3 are vulnerable to Insecure Credential Storage. The package stores encrypted wallets in local storage and requires a password to load the wallet. Once the wallet is loaded, the private key is accessible via LocalStorage. Exploiting this vulnerability likely requires a...

web3.schs.switzerland.k12.in.us XSS vulnerability

Open Bug Bounty ID: OBB-601162 Description| Value ---|--- Affected Website:| web3.schs.switzerland.k12.in.us Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Riverbed SteelHead VCX File Read

This module exploits an authenticated arbitrary file read in the log module's filter engine. SteelHead VCX VCX255U version 9.6.0a was confirmed as vulnerable. Module Options msf use auxiliary/scanner/http/riverbed/steelheadvcxfileread msf undefinedsteelheadvcxfileread show actions ...actions... m...