CVE-2024-51425

An issue in the WaterToken smart contract which can be run on the Ethereum blockchain allows remote attackers to have an unspecified impact. NOTE: this is disputed by third parties because the impact is limited to function calls...

CVE-2024-51424

CVE-2024-51424 affects the PepeGxng smart contract running on Ethereum. The vulnerability involves the Owned.setOwner function, with an impact described as unspecified in the sources, and disputed by third parties as being limited to function calls. No exploitation details are provided in the con...

CVE-2024-51425

CVE-2024-51425 affects the WaterToken smart contract on Ethereum (Ethereum v1.12.2). Reported issue: insecure permissions allow remote attackers to escalate privileges via the WaterToken contract, with impact described as unspecified but potentially high. Some sources discuss practical mitigation...

Malicious npm Packages Target Developers' Ethereum Wallets with SSH Backdoor

Cybersecurity researchers have discovered a number of suspicious packages published to the npm registry that are designed to harvest Ethereum private keys and gain remote access to the machine via the secure shell SSH protocol. The packages attempt to "gain SSH access to the victim's machine by...

Malicious code in eth-account-api (PyPI)

--- -= Per source details. Do not edit below this line.=-...

Consensus Attack

github.com/ethereum/go-ethereum is vulnerable to a Consensus Attack. The vulnerability is due to Geth's pre-compiled dataCopy contract performing a shallow copy on invocation, which allows an attacker to manipulate Ethereum Virtual Machine EVM memory and cause a consensus mismatch between nodes...

Incorrect Calculation

github.com/ethereum/go-ethereum is vulnerable to an Incorrect Calculation. The vulnerability is due to a miscalculation of Proof of Work PoW generation caused by an error in the DAG creation process...

Brave Desktop 1.70.117 Security Fixes

Added simulation support for EVM transactions. - Added simulation support for Solana transactions. Upgraded Chromium to 129.0.6668.59 — refer to Google Chrome advisories for inherited CVEs...

GO-2022-0871 Go Ethereum Improper Input Validation in github.com/ethereum/go-ethereum

Go Ethereum Improper Input Validation in github.com/ethereum/go-ethereum...

GO-2022-0814 Go Ethereum Denial of Service in github.com/ethereum/go-ethereum

Go Ethereum Denial of Service in github.com/ethereum/go-ethereum...

GO-2022-0771 Shallow copy bug in geth in github.com/ethereum/go-ethereum

Shallow copy bug in geth in github.com/ethereum/go-ethereum...

GO-2022-0775 Erroneous Proof of Work calculation in geth in github.com/ethereum/go-ethereum

Erroneous Proof of Work calculation in geth in github.com/ethereum/go-ethereum...

GO-2022-0456 DoS via malicious p2p message in Go Ethereum in github.com/ethereum/go-ethereum

DoS via malicious p2p message in Go Ethereum in github.com/ethereum/go-ethereum...

GO-2022-0392 Denial of service in go-ethereum due to CVE-2020-28362 in github.com/ethereum/go-ethereum

Denial of service in go-ethereum due to CVE-2020-28362 in github.com/ethereum/go-ethereum...

CVE-2024-39696

Evmos is a decentralized Ethereum Virtual Machine chain on the Cosmos Network. Prior to version 19.0.0, a user can create a vesting account with a 3rd party account EOA or contract as funder. Then, this user can create an authorization for the contract.CallerAddress, this is the authorization...

CVE-2024-39696 Evmos vulnerable to exploit of smart contract account and vesting

Evmos is a decentralized Ethereum Virtual Machine chain on the Cosmos Network. Prior to version 19.0.0, a user can create a vesting account with a 3rd party account EOA or contract as funder. Then, this user can create an authorization for the contract.CallerAddress, this is the authorization...

ethereum-france.com Cross Site Scripting vulnerability OBB-3939788

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2024-38533

ZKsync Era is a layer 2 rollup that uses zero-knowledge proofs to scale Ethereum. There is possible invalid stack access due to the addresses used to access the stack not properly being converted to cells. This issue has been patched in version 1.5.0...

CVE-2024-38533 ZKsync Era invalid stack addressing conversion

ZKsync Era is a layer 2 rollup that uses zero-knowledge proofs to scale Ethereum. There is possible invalid stack access due to the addresses used to access the stack not properly being converted to cells. This issue has been patched in version 1.5.0...

CVE-2024-38533

The CVE-2024-38533 entry concerns ZKsync Era, a Layer 2 rollup for Ethereum. The issue is an invalid stack access caused by addresses used to access the stack not being properly converted to cells. Affected versions are prior to 1.5.0; the vulnerability is mitigated by upgrading to version 1.5.0....