Skip to content
October 25, 2026
☍ CyberNoz
  • Home
Home›Mix›Bypass parsing of transaction data, users on the phishing site will transfer/approve ERC20 tokens without being alerted
Mix

Bypass parsing of transaction data, users on the phishing site will transfer/approve ERC20 tokens without being alerted

Cybernoz
April 11, 2023 1 min read
Share X / Twitter LinkedIn Reddit WhatsApp Email



MetaMask disclosed a bug submitted by ronnyx2017: https://hackerone.com/reports/1651429 – Bounty: $1000



Source link

Share X / Twitter LinkedIn Reddit WhatsApp Email
« Previous
How to Hack MFA (Multi-Factor Authentication)
Next »
The iceberg of web app exploits

Related Articles

All Mix →
If You’re Agnostic, You’re Probably an Atheist Mix

If You’re Agnostic, You’re Probably an Atheist

Table of Contents Atheism The Difference Between (A)theism and (A)gnosticism Conclusion Notes Related [ 2009-04-12 : I’ve decided to back off this specific argument of…

April 12, 2025 Cybernoz 5 min read
Introducing the 4th Annual Hacker Powered Security Report Mix

Introducing the 4th Annual Hacker-Powered Security Report

This is a time of unprecedented challenges. We face never-before- seen threats in the digital and physical worlds. If this past year has taught us…

May 3, 2023 Cybernoz 3 min read
Abusing http path normalization and cache poisoning to steal rocket Mix

Abusing HTTP Path Normalization and Cache Poisoning to steal Rocket League accounts | Sam Curry

Table of Contents Hunting for bugs on Rocket League Identifying HTTP Cache Poisoning Exploiting HTTP Cache Poisoning Putting the Pieces Together Addendum Over the last…

March 27, 2023 Cybernoz 8 min read
Git: Ignore WordPress Cache Files using .gitignore Mix

Git: Ignore WordPress Cache Files using .gitignore

I’ve had a nagging problem for some time where I couldn’t figure out quite how to ignore my wp-content/cache directory when doing syncs with git.…

April 13, 2025 Cybernoz 1 min read
Hackers take on San Francisco for the 4th Year in Mix

Hacker-Powered Pen Tests and The Power of More

Traditional penetration testing is an important tool in your appsec strategy toolbox. Compliance requires it. Your CIO understands it. Your team is accustomed to it.…

May 25, 2023 Cybernoz 2 min read
Four Types of Project | Daniel Miessler Mix

Four Types of Project | Daniel Miessler

If we classify projects into four categories by important vs. unimportant, and interesting vs. unpleasant, we can assess what happens under open allocation. Important and…

April 23, 2025 Cybernoz 1 min read

Latest Posts

  • Models Are the How, Harnesses Are the What
  • Singapore embraces AI for cyber defence, with one caveat: breach transparency
  • Detect critical application misconfiguration risks
  • Microsoft shares how to fix broken Exchange Online EWS apps
  • Multiple Waves of DDoS Attacks Caused This Week’s Outage in North Korea
  • Agbi
  • ArsTechnica
  • AttackDefense
  • Australiancybersecuritymagazine
  • Bankinfosecurity
  • Bleeping Computer
  • CISOOnline
  • CloudSecurity
  • ComputerWeekly
  • Crowdstrike
  • Cyber Security Ventures
  • CyberDefenseMagazine
  • CyberNews
  • Cyberscoop
  • CyberSecurity-Insiders
  • CyberSecurityDive
  • CyberSecurityNews
  • CyberWire
  • DarkReading
  • ExploitOne
  • GBHackers
  • Genel
  • HackerCombat
  • HackRead
  • HelpnetSecurity
  • IndustrialCyber
  • InfoSecurity
  • ITnews
  • ITSecurityGuru
  • Krebson
  • MalwareBytes
  • Mix
  • OTSecurity
  • PortSwigger
  • Rapid7
  • SCMP
  • securelist
  • Securityaffairs
  • SecurityWeek
  • techcrunch
  • TheCyberExpress
  • TheHackerNews
  • ThreatIntelligence-IncidentResponse
  • Tldrsec
  • Unit42
  • VendorResearch
  • welivesecurity
  • Wired
  • Zerosalarium
☍ CyberNoz

Cybersecurity News

  • Agbi
  • ArsTechnica
  • AttackDefense
  • Australiancybersecuritymagazine
  • Bankinfosecurity
  • Bleeping Computer
  • CISOOnline
  • CloudSecurity
  • ComputerWeekly
  • Crowdstrike
  • Cyber Security Ventures
  • CyberDefenseMagazine
  • CyberNews
  • Cyberscoop
  • CyberSecurity-Insiders
  • CyberSecurityDive
  • CyberSecurityNews
  • CyberWire
  • DarkReading
  • ExploitOne
  • GBHackers
  • Genel
  • HackerCombat
  • HackRead
  • HelpnetSecurity
  • IndustrialCyber
  • InfoSecurity
  • ITnews
  • ITSecurityGuru
  • Krebson
  • MalwareBytes
  • Mix
  • OTSecurity
  • PortSwigger
  • Rapid7
  • SCMP
  • securelist
  • Securityaffairs
  • SecurityWeek
  • techcrunch
  • TheCyberExpress
  • TheHackerNews
  • ThreatIntelligence-IncidentResponse
  • Tldrsec
  • Unit42
  • VendorResearch
  • welivesecurity
  • Wired
  • Zerosalarium
Archive
  • October 2026
  • September 2026
  • August 2026
  • July 2026
  • June 2026
  • May 2026
  • April 2026
  • March 2026
  • February 2026
  • January 2026
  • December 2025
  • November 2025
  • October 2026
  • September 2026
  • August 2026
  • July 2026
  • June 2026
  • May 2026
  • April 2026
  • March 2026
  • February 2026
  • January 2026
  • December 2025
  • November 2025
  • October 2025
  • September 2025
  • August 2025
  • July 2025
  • June 2025
  • May 2025
  • April 2025
  • March 2025
  • February 2025
  • January 2025
  • December 2024
  • November 2024
  • October 2024
  • September 2024
  • August 2024
  • July 2024
  • June 2024
  • May 2024
  • April 2024
  • March 2024
  • February 2024
  • January 2024
  • December 2023
  • November 2023
  • October 2023
  • September 2023
  • August 2023
  • July 2023
  • June 2023
  • May 2023
  • April 2023
  • March 2023
  • February 2023
  • January 2023
  • December 2022
© 2026 Cybernoz. All rights reserved.