28 matches found
Lucky9io has a logic flaw vulnerability
Lucky9io is an ethereum-based virtual gambling game.A security vulnerability exists in Lucky9io's implementation of a simple lotto smart contract, which stems from the use of a fallback function to generate random values using the publicly readable variable entrynumber. An attacker could exploit...
PT-2019-6203 · Struktur Ag +4 · Libde265 +4
Name of the Vulnerable Software and Affected Versions: libde265 version 1.0.4 Description: The issue is related to a heap buffer overflow fault in the put epel 16 fallback function. This can be exploited via a crafted file, potentially allowing a remote attacker to cause a denial of service...
PT-2019-6186 · Struktur Ag +4 · Libde265 +4
Name of the Vulnerable Software and Affected Versions: libde265 version 1.0.4 Description: The issue is related to a heap buffer overflow in the put weighted pred avg 16 fallback function of the libde265 video codec implementation. This can be exploited by a remote attacker using a specially...
Design/Logic Flaw
The fallback function of a simple lottery smart contract implementation for Lucky9io, an Ethereum gambling game, generates a random value with the publicly readable variable entrynumber. This variable is private, yet it is readable by eth.getStorageAt function. Also, attackers can purchase a tick...
CVE-2018-13877
The doPayouts function of the smart contract implementation for MegaCryptoPolis, an Ethereum game, has a Denial of Service vulnerability. If a smart contract that has a fallback function always causing exceptions buys a land, users cannot buy lands near that contract's land, because those purchas...
Denial of service
The doPayouts function of the smart contract implementation for MegaCryptoPolis, an Ethereum game, has a Denial of Service vulnerability. If a smart contract that has a fallback function always causing exceptions buys a land, users cannot buy lands near that contract's land, because those purchas...
Integer overflow
An issue was discovered in a smart contract implementation for EUC EUC, an Ethereum token. The contract has an integer overflow. If the owner sets the value of buyPrice to a large number in setPrices then the "msg.value buyPrice" will cause an integer overflow in the fallback function...
EUC integer overflow vulnerability
EUC is an ethereum-based digital currency. A security vulnerability exists in the fallback function in the EUC smart contract implementation. No details of the vulnerability are provided at this time...