Input validation

In SLP Validate npm package slp-validate before version 1.2.2, there is a vulnerability to false-positive validation outcomes for the NFT1 Child Genesis transaction type. A poorly implemented SLP wallet or opportunistic attacker could create a seemingly valid NFT1 child token without burning any ...

CVE-2020-15130

CVE-2020-15130 affects the npm package slpjs prior to version 0.27.4, causing a vulnerability where NFT1 Child Genesis transactions could be validated as valid without burning the required NFT1 Group tokens. Root cause: incorrect/poor validation logic in SLPJS that allows false‑positive outcomes....

CVE-2020-15131 False-positive validity for NFT1 genesis transactions in SLP Validate

In SLP Validate npm package slp-validate before version 1.2.2, there is a vulnerability to false-positive validation outcomes for the NFT1 Child Genesis transaction type. A poorly implemented SLP wallet or opportunistic attacker could create a seemingly valid NFT1 child token without burning any ...

CVE-2020-15131

The CVE-2020-15131 issue affects the npm package slp-validate prior to v1.2.2, where a wallet could yield false‑positive NFT1 Child Genesis validations (NFT1 tokens could appear valid without burning the NFT1 Group token as required by the NFT1 spec). This is a software validation flaw in the NFT...

False-positive validity for NFT1 genesis transactions

Impact In the npm package named "slp-validate", versions prior to 1.2.2 are vulnerable to false-positive validation outcomes for the NFT1 Child Genesis transaction type. A poorly implemented SLP wallet or opportunistic attacker could create a seemingly valid NFT1 child token without burning any o...

False-positive validity for NFT1 genesis transactions in SLPJS

Impact In the npm package named "slpjs", versions prior to 0.27.4 are vulnerable to false-positive validation outcomes for the NFT1 Child Genesis transaction type. A poorly implemented SLP wallet or opportunistic attacker could create a seemingly valid NFT1 child token without burning any of the...

GVToken Genesis Vision Security Vulnerability

GVToken Genesis Vision GVT is an ethereum-based digital currency. An integer overflow vulnerability exists in the 'mint' function in GVT. An attacker can exploit the vulnerability to retrieve generated tokens...

genesis-keyauto.ru Cross Site Scripting vulnerability OBB-1195991

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

Genesis has an XSS vulnerability (CNVD-2020-33965)

Genesis is based on Spring + Spring MVC + Mybatis to build the developer community , forum system . Genesis has an XSS vulnerability that can be exploited by an attacker to obtain sensitive information such as user cookies...

Genesis has an XSS vulnerability

Genesis is based on Spring + Spring MVC + Mybatis to build the developer community , forum system . Genesis has an XSS vulnerability that can be exploited by an attacker to obtain sensitive information such as user cookies...

Neo Genesis Token Digital Error Vulnerability

Neo Genesis Token NGT is an ethereum-based digital currency.An integer overflow vulnerability exists in the 'multipleTransfer' function in NGT. An attacker can use this vulnerability to set the balance of any user...

ICONICS GENESIS (32 & 64) Vulnerabilities

OVERVIEW This advisory is a follow-up to ICS-ALERT-11-080-02 ICONICS GENESIS 32 & 64 Vulnerabilities, published on the ICS-CERT Web site on March 20, 2011. An independent security researcher has published 13 vulnerabilities with proof of concept PoC code for the ICONICS GENESIS32 and GENESIS64...

CVE-2018-14006

An integer overflow vulnerability exists in the function multipleTransfer of Neo Genesis Token NGT, an Ethereum token smart contract. An attacker could use it to set any user's balance...

Integer overflow

An integer overflow vulnerability exists in the function multipleTransfer of Neo Genesis Token NGT, an Ethereum token smart contract. An attacker could use it to set any user's balance...

CVE-2018-14006

CVE-2018-14006 affects Neo Genesis Token (NGT), an Ethereum token smart contract. Connected sources confirm an integer overflow in the multipleTransfer function, which could allow an attacker to set an arbitrary user’s balance. Exploitation details are not provided in the documents. Related CNVD/...

CVE-2018-14006

An integer overflow vulnerability exists in the function multipleTransfer of Neo Genesis Token NGT, an Ethereum token smart contract. An attacker could use it to set any user's balance...

CVE-2018-11335

GVToken Genesis Vision GVT is a smart contract running on Ethereum. The mint function has an integer overflow that allows minted tokens to be arbitrarily retrieved by the contract owner...

GVToken Genesis Vision (GVT) Integer Overflow Vulnerability

GVToken Genesis Vision GVT is a smart contract that runs on Ether. An integer overflow vulnerability exists in the mint function in GVToken Genesis Vision GVT. The vulnerability can be exploited by the contract owner to arbitrarily retrieve a minted token...

CVE-2018-11335

CVE-2018-11335 describes a vulnerability in GVToken Genesis Vision (GVT), a smart contract on Ethereum. The mint function contains an integer overflow that allows the contract owner to arbitrarily retrieve minted tokens. The issue is rooted in arithmetic handling within mint, enabling the owner t...

Chrome V8 Genesis::InitializeGlobal Bugs

Chrome: V8: Bugs in Genesis::InitializeGlobal Bug: The Genesis::InitializeGlobal method initializes the constructor of RegExp as follows: // Builtin functions for RegExp.prototype. Handle regexpfun = InstallFunction global, "RegExp", JSREGEXPTYPE, JSRegExp::kSize + JSRegExp::kInObjectFieldCount...