5843 matches found
octopus
Octopus このプロジェクトをスポンサーしてくれたQuoScientに心から感謝します。 Octopusは、WebAssemblyモジュールとブロックチェーンスマートコントラクトのためのセキュリティ分析フレームワークです。 Octopusの目的は、クローズドソースのWebAssemblyモジュールやスマートコントラクトのバイトコードを簡単に分析し、その内部動作をより深く理解する方法を提供することです。 機能 エクスプローラ : ブロックチェーンプラットフォームと通信するためのOctopus JSON-RPCクライアント実装 逆アセンブラ :...
GOATCasino
欢迎来到 GOAT Casino！ 在赌场的各种游戏中试试你的运气（或技巧），赢取丰厚的代币和奖品！ 目前仍在开发中，所以游戏数量可能令人失望，但未来还会有更多游戏，同时也有大量可以利用的东西。 开始： 1. 安装依赖 1. 最新版本的 node 2. sudo apt install npm 3. sudo npm install -g truffle ganache-cli 2. 运行 ./startchallenge.sh 启动 testrpc，将赌场部署到本地测试网，并开始模拟其他玩家 3. 查看 contracts/ 目录中的代码以找到漏洞 4. 编写概念验证脚本，尽可能多地获...
domestic-system
The Domestic System 美しく、ターミナルベースのEthereumウォレット兼スマートコントラクトブラウザ。主権、セキュリティ、そしてスタイルのために構築されました。 ━━━━━━━━━━━━━━━━━━━━ domestic system ━━━━━━━━━━━━━━━━━━━━ 概要 The Domestic...
CVE-2026-9998-Insecure-Deserialization-in-Blockchain-Oracle
10. CVE-2026-9998 – 区块链预言机中的不安全反序列化 概述 区块链预言机节点使用 Python 的 pickle 对来自智能合约事件的数据进行反序列化，从而使攻击者能够执行任意命令。 严重性： 严重（完整节点失陷） 预言机模拟与漏洞利用 !/usr/bin/env python3 """ vulnerableoracle.py - Oracle node that listens to events and deserializes data unsafely. """ import pickle, socketserver, threading, time,...
Proof-Gated Signing: Solver-Checked Transaction Guards That Hold under State Drift for Onchain AI Agents
AI agents that control wallets read attacker-reachable content, so they can be steered into proposing harmful transactions. The usual last line of defense is a pre-signing check: a static allowlist, an LLM reviewer, or a transaction simulation. All three share a gap: the check describes the chain...
CVE-2026-100248
The Rattadan Cosmowarp smart contract before 56c6147 can have a comparison to an unintended value of currentadmin...
CVE-2026-100248
The Rattadan Cosmowarp smart contract before 56c6147 can have a comparison to an unintended value of currentadmin...
CVE-2026-100248
The Rattadan Cosmowarp smart contract before 56c6147 can have a comparison to an unintended value of currentadmin...
EUVD-2026-87152
The Rattadan Cosmowarp smart contract before 56c6147 can have a comparison to an unintended value of currentadmin...
CVE-2026-100248: Comparison Using Wrong Factors
The Rattadan Cosmowarp smart contract before 56c6147 can have a comparison to an unintended value of currentadmin...
Klever-Go Account takeover: `kleverUpdateAccountPermission` authorizes on attacker-controlled `RecipientAddr` instead of the authenticated caller
Description The VM built-in function KleverUpdateAccountPermission registered always-active, creator.go:381-390 / core/vmconstants.go:234 rewrites an account's entire permission set. Its authorization check uses vmInput.RecipientAddr attacker-controlled instead of the authenticated...
PT-2026-97538
Name of the Vulnerable Software and Affected Versions Klever-Go versions prior to 1.7.20 Description An issue exists in the KleverUpdateAccountPermission built-in function where the authorization check incorrectly uses the vmInput.RecipientAddr variable instead of the authenticated...
CVE-2026-87169
Vulnerability in the Oracle Contract Lifecycle Management for Public Sector product of Oracle E-Business Suite component: Wage Determination Online. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows unauthenticated attacker with network access via HT...
CVE-2026-87165
Vulnerability in the Oracle Contract Lifecycle Management for Public Sector product of Oracle E-Business Suite component: ECC For Award and IDV. The supported version that is affected is V16. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromis...
CVE-2026-87162
Vulnerability in the Oracle Contract Lifecycle Management for Public Sector product of Oracle E-Business Suite component: Award/PO. Supported versions that are affected are 12.2.13-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise...
CVE-2026-87149
Vulnerability in the Oracle Contract Lifecycle Management for Public Sector product of Oracle E-Business Suite component: Award/PO. Supported versions that are affected are 12.2.8-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise...
EUVD-2026-79824
Vulnerability in the Oracle Contract Lifecycle Management for Public Sector product of Oracle E-Business Suite component: Wage Determination Online. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows unauthenticated attacker with network access via HT...
EUVD-2026-79820
Vulnerability in the Oracle Contract Lifecycle Management for Public Sector product of Oracle E-Business Suite component: ECC For Award and IDV. The supported version that is affected is V16. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromis...
CVE-2026-87165
CVE-2026-87165 affects Oracle Contract Lifecycle Management for Public Sector (component: ECC For Award and IDV ), version 16 . An easily exploitable vulnerability allows a low-privileged attacker with network access via HTTP to compromise the product, potentially resulting in full takeover with ...
EUVD-2026-79817
Vulnerability in the Oracle Contract Lifecycle Management for Public Sector product of Oracle E-Business Suite component: Award/PO. Supported versions that are affected are 12.2.13-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise...