EUVD-2025-44818

Malicious code in unknownwildcatz3n npm...

MAL-2025-59157 Malicious code in unknown_wildcat_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7e99983a946f649babb28c987cf9d650ab95aa041be0a9a8f515db5ca7323046 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Sanction Bypass Through Transferring to another account

Lines of code Vulnerability details Impact Wildcat protocol provides lending with lender backed collateral considered as reserves and the ratio must be upheld by the borrower. WildcatMarketTokens are provided to lenders in return for their base assets, these tokens are ERC20 meaning tokens can be...

Sanction Bypass Through Depositing to Authorized Borrower's Market

Lines of code Vulnerability details Impact Wildcat protocol provides lending with lender backed collateral considered as reserves and the ratio must be upheld by the borrower. The protocol team has taken certain steps to prevent interaction with sanctioned users. However, sanction status is only...

Lender can cause unintended behavior for the borrower's transaction

Lines of code Vulnerability details This vulnerability comes in the form of when a borrower wants to remove a lender as a both deposit and withdraw and set them as a withdraw only, to avoid paying more interest on their funds in the market, this plan may not go as planned, based on the nature of...

Malicious initial reserve ratio can be used to rug lenders collateral

Lines of code Vulnerability details Impact Wildcat protocol provides borrowers the ability to adjust annual interest BIPs after market deployment. In order to protect lenders the protocol increases the reserve ratio of ratio of the market to 90% for two weeks. The increased reserve ratio allows...

Incompatibility with Rebase tokens

Lines of code Vulnerability details Impact Borrowers can choose whatever token they want to be the underlying token for a market. The problem comes when those tokens are Rebasing tokens such as Ampleforth. The balances of those tokens are changed rebased by a certain algorithm depending on the...

MAL-2022-3172 Malicious code in free-fortnite-wildcat-skin-codes-2022 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6d0de62fd6004538e6baff898b13439f919fa85f3f53373ec656039edd235007 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

newsletter.wildcat.org XSS vulnerability

Vulnerable URL: http://newsletter.wildcat.org/subscribe.php Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No Check...

panix.com XSS vulnerability

Open Bug Bounty ID: OBB-89763 Description| Value ---|--- Affected Website:| panix.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat Sheet...

Unfixed XSS vulnerability at www.dream4.de

Security researcher Wildcat, has submitted on 12/09/2007 a cross-site-scripting XSS vulnerability affecting www.dream4.de, which at the time of submission ranked 126479 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 17/09/2007. It is currently...