A lack of target address verification in the BurnMe() function of Rob The Bank 1.0 allows attackers to steal tokens from victim users via a crafted script.
The product does not sufficiently verify the origin or authenticity of data, in a way that causes it to accept invalid data.
Link | Tags |
---|---|
https://github.com/OSUPlayer/CVEs/blob/master/Suicidal/2019-07-09-01.md | third party advisory exploit |