check smart project check smart vulnerabilities and exploits

(subscribe to this query)

check_smart prior to 6.9.1 allows unintended drive access by an unprivileged user because it only checks for a substring match of a device path (the /dev/bus substring and a number), aka an unanchored regular expression.

Check Smart Project Check Smart

The "Smart related articles" extension 1.1 for Joomla! does not prevent direct requests to dialog.php (there is a missing _JEXEC check).

Smart Related Articles Project Smart Related Articles 1.1

The owned function of a smart contract implementation for DDQ, an tradable Ethereum ERC20 token, allows malicious users to change the owner of the contract, because the function does not check the caller's identity.

Ddq Project Ddq -

An wrong logical check identified in the transferFrom function of a smart contract implementation for RemiCoin (RMC), an Ethereum ERC20 token, allows the malicious user to steal tokens or conduct resultant integer underflow attacks.

Remicoin Project Remicoin -

The quaker function of a smart contract implementation for BOMBBA (BOMB), an tradable Ethereum ERC20 token, allows malicious users to change the owner of the contract, because the function does not check the caller's identity.

Bombba Project Bombba -

The NETM() function of a smart contract implementation for NewIntelTechMedia (NETM), an tradable Ethereum ERC20 token, allows malicious users to change the owner of the contract, because the function does not check the caller's identity.

Newinteltechmedia Project Newinteltechmedia -

The ToOwner() function of a smart contract implementation for Cryptbond Network (CBN), an tradable Ethereum ERC20 token, allows malicious users to change the owner of the contract, because the function does not check the caller's identity.

Cryptbond Network Project Cryptbond Network -

OpenSC prior to 0.20.0 has a double free in coolkey_free_private_data because coolkey_add_object in libopensc/card-coolkey.c lacks a uniqueness check.

Opensc Project Opensc

The UBSexToken() function of a smart contract implementation for Business Alliance Financial Circle (BAFC), an tradable Ethereum ERC20 token, allows malicious users to change the owner of the contract, because the function is public (by default) and does not check the caller'...

Business Alliance Financial Circle Project Business Alliance Financial Circle -

1 Github repository

1 2 3 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook