BlockDev Sp. Z o.o

BlockDev Sp. Z o.o 的公开漏洞报告、类别分布与常见资产。

攻击面

弱点类别分布

• 其他弱点6
• 身份认证3
• 业务逻辑3
• 拒绝服务2
• 信息泄露2
• 服务端请求伪造1
• SQL 注入1
• 访问控制1

主要弱点

• Unlabeled3
• 业务逻辑错误3
• 输入校验不当2
• 认证尝试次数未限制2
• 信息泄露2
• 资源消耗失控2
• Insecure Temporary File1
• Authentication Bypass Using an Alternate Path or Channel1
• 权限提升1
• SSRF1

常见资产

• blog.makerdao.comURL · 9
• chat.makerdao.comURL · 4
• forum.makerdao.comURL · 1
• MCD_ENDOTHER · 1
• MCD_FLAPOTHER · 1
• MCD_FLIPOTHER · 1
• MCD_POTOTHER · 1
• Medians (OSM sources)OTHER · 1

高票报告

当前状态 5 份 · 全部 19

1. 466
   Steal ALL collateral during liquidation by exploiting lack of validation in `flip.kick`其他弱点 · 2019-10-02 · 严重
   $0输入校验不当
2. 152
   Steal collateral during `end` process, by earning DSR interest after `flow`.业务逻辑 · 2019-09-10 · 高危
   $0业务逻辑错误
3. 63
   Earn free DAI interest (inflation) through instant CDP+DSR in one tx业务逻辑 · 2019-08-13 · 高危
   $0业务逻辑错误
4. 55
   Steal all MKR from `flap` during liquidation by exploiting lack of validation in `flap.kick`其他弱点 · 2019-09-26 · 高危
   $0输入校验不当
5. 14
   xmlrpc.php FILE IS enabled it will used for Bruteforce attack and Denial of Service(DoS)拒绝服务 · 2021-02-12 · 严重
   $500资源消耗失控