3000 matches found
CVE-2018-18666: Integer Overflow or Wraparound
The mintToken function of SwftCoin SWFTC aka SwftCoin, an Ethereum token, has an integer overflow that allows the owner of the contract to set the balance of an arbitrary user to any value...
PT-2018-14573
Name of the Vulnerable Software and Affected Versions SwftCoin SWFTC affected versions not specified Description The issue concerns an integer overflow in the mintToken function, which allows the contract owner to manipulate user balances by setting them to any value. Recommendations At the momen...
Shopify: Using GraphQL, STAFF with NO explicit permissions on Store can retrieve Shopify Payments Balance.
Hi, I am reporting this because it looks like a authorization bug in GraphQL. A staff member having no explicit permissions on a Shopify Store may be able to retrieve the Current balances in all currencies for the account for Shopify Payments. Steps 1. STAFF account is created and assigned NO...
PolyAI Integer Overflow Vulnerability
PolyAI AI is an ethereum-based virtual currency. The 'mintToken' function in PolyAI's smart contract implementation suffers from an integer overflow vulnerability that can be exploited by an attacker to set the balance of any user to any value...
CVE-2018-12511
The CVE-2018-12511 entry concerns Substratum (SUB) ERC-20 smart contracts. The vulnerability is in the mintToken function, where an administrator can control mintedAmount, exploit an integer overflow, and arbitrarily modify a user’s balance. This implies a privileged deniation of minting and pote...
PT-2018-11225
Name of the Vulnerable Software and Affected Versions Substratum SUB affected versions not specified Description The issue concerns the mintToken function in a smart contract implementation for Substratum, an Ethereum ERC20 token. It allows the administrator to control the mintedAmount, exploit a...
PT-2018-13863
Name of the Vulnerable Software and Affected Versions PolyAi AI affected versions not specified Description The issue concerns an integer overflow in the mintToken function of a smart contract implementation. This overflow allows the contract owner to set the balance of any user to any value...
CVE-2018-12511: Integer Overflow or Wraparound
In the mintToken function of a smart contract implementation for Substratum SUB, an Ethereum ERC20 token, the administrator can control mintedAmount, leverage an integer overflow, and modify a user account's balance arbitrarily...
CVE-2018-17050: Integer Overflow or Wraparound
The mintToken function of a smart contract implementation for PolyAi AI, an Ethereum token, has an integer overflow that allows the owner of the contract to set the balance of an arbitrary user to any value...
Augur: Indisputable Reporting via Arbitrarily Large Initial Reports
Summary: The initial reporter stake is determined by the REP balance of the specific InitialReporter contract at the time of initial report. This can be arbitrarily controlled via REP transfers at any time between Market creation and the initial report. Right off the bat, an attacker with 33.3......
Bitcoin Red Integer Overflow Vulnerability
Bitcoin Red BTCR is an Ether-based digital currency. An integer overflow vulnerability exists in the 'distributeBTR' function in BTCR's smart contract implementation. An attacker can exploit the vulnerability to increase the balance of their own account...
UBUNTU-CVE-2018-14722
An issue was discovered in evaluateautomountpoint in btrfsmaintenance-functions in btrfsmaintenance through 0.4.1. Code execution as root can occur via a specially crafted filesystem label if btrfs-scrub,balance,trim are set to auto in /etc/sysconfig/btrfsmaintenance this is not the default, thou...
EPPCOIN Integer Overflow Vulnerability
EPPCOIN EPP is an Ether-based digital currency. An integer overflow vulnerability exists in the 'mintToken' function in EPP's smart contract implementation. An attacker can exploit this vulnerability to set the balance of any user to an arbitrary value...
MultiGames Integer Overflow Vulnerability
MultiGames MLT is an ethereum-based digital currency. An integer overflow vulnerability exists in the 'mintToken' function in the smart contract implementation of MLT. An attacker can exploit this vulnerability to set the balance of any user to an arbitrary value...
LadaToken Integer Overflow Vulnerability
LadaToken LDT is an Ether-based digital currency. An integer overflow vulnerability exists in the 'mintToken' function in LDT's smart contract implementation. An attacker can exploit this vulnerability to set the balance of any user to any value...
NGToken Integer Overflow Vulnerability
NGToken is a tradable Ether ERC20 token. An integer overflow vulnerability exists in the multipleTransfer function of NGToken's smart contract implementation. An attacker can exploit this vulnerability to set the balance of an arbitrary user...
Integer overflow
An integer overflow vulnerability exists in the function batchTransfer of SHARKTECH SKT, an Ethereum token smart contract. An attacker could use it to set any user's balance...
CVE-2018-14002
An integer overflow vulnerability exists in the function distribute of MP3 Coin MP3, an Ethereum token smart contract. An attacker could use it to set any user's balance...