14076 matches found
CVE-2018-15125
CVE-2018-15125 affects the Zipato Zipabox Smart Home Controller. The vulnerability is described as a Sensitive Information Disclosure that enables a remote attacker to obtain sensitive information and expand the attack surface. Public details include a network attack vector with low complexity an...
CVE-2018-15125
Sensitive Information Disclosure in Zipato Zipabox Smart Home Controller allows remote attacker get sensitive information that expands attack surface...
CVE-2018-15123
The CVE-2018-15123 entry concerns Zipato Zipabox Smart Home Controller BOARD REV - 1 with System Version -118, where insecure configuration storage is identified as the root cause. According to NVD, the vulnerability has a high to critical impact profile with CVSSv3 base score 9.8 (NETWORK, LOW c...
CVE-2018-15123
Insecure configuration storage in Zipato Zipabox Smart Home Controller BOARD REV - 1 with System Version -118 allows remote attacker perform new attack vectors and take under control device and smart home...
Black Hat 2018: IoT Security Issues Will Lead to Legal ‘Feeding Frenzy’
LAS VEGAS – The troves of insecure internet of things IoT devices have not yet led to widespread legal implications. But that’s set to change, a well-known attorney warned at Black Hat USA last week. Ijay Palansky, partner at the law firm Armstrong Teasdale, said at the conference last week that...
Black Hat 2018: Voice Authentication is Broken, Researchers Say
LAS VEGAS – We live in a world increasingly dominated by voice-enabled smart digital assistants. More and more we rely on Amazon’s Alexa to tell us if we have any new messages. We ask Google Home smart speakers to remind us of calendar appointments. Some banks even allow users to use their voice ...
This Week in Security News: Hijacks and Healthcare
Welcome to our weekly roundup, where we share what you need to know about the cybersecurity news and events that happened over the past few days. This week, Singapore looks into the effectiveness of virtual browsers in an attempt to reduce cyberattacks on healthcare systems. Also, cybercriminals...
Black Hat 2018: Widespread Critical Flaws Found in Smart-City Gear
Smart-city technology continues to roll out in municipalities worldwide – everything from automated alerts about weather hazards and traffic issues to smart lighting and connected trash systems. However, like the rest of the Internet of Things IoT ecosystem, security is always a concern, as...
8 everyday technologies that can make you vulnerable to cyberattacks
The technological advances of the modern world make for an exciting and convenient lifestyle. With each new development, from artificial intelligence to the Internet of Things, we make the mundane and tedious more manageable. The security vulnerabilities of the latest tech have been well...
MyCryptoChamp Information Disclosure Vulnerability
MyCryptoChamp is an ethereum-based blockchain game. An information disclosure vulnerability exists in the 'randMod' function in MyCryptoChamp's smart contract implementation, which stems from the fact that the 'randMod' function generates a publicly readable variable containing a public readable...
CVE-2018-11561
An integer overflow in the unprotected distributeToken function of a smart contract implementation for EETHER EETHER, an Ethereum ERC20 token, will lead to an unauthorized increase of an attacker's digital assets...
Integer overflow
An integer overflow in the unprotected distributeToken function of a smart contract implementation for EETHER EETHER, an Ethereum ERC20 token, will lead to an unauthorized increase of an attacker's digital assets...
CVE-2018-11561
An integer overflow in the unprotected distributeToken function of a smart contract implementation for EETHER EETHER, an Ethereum ERC20 token, will lead to an unauthorized increase of an attacker's digital assets...
CVE-2018-11561
CVE-2018-11561 affects the EETHER ERC20 smart contract; an integer overflow in the unprotected distributeToken function enables an attacker to illegitimately increase their digital assets. The vulnerability is described in multiple sources (NVD/CNVD) as a token-amount overflow in the distributeTo...
Design/Logic Flaw
The randMod function of the smart contract implementation for MyCryptoChamp, an Ethereum game, generates a random value with publicly readable variables such as the current block information and a private variable, which can be read with a getStorageAt call. Therefore, attackers can get powerful...
CVE-2018-12885
The randMod function of the smart contract implementation for MyCryptoChamp, an Ethereum game, generates a random value with publicly readable variables such as the current block information and a private variable, which can be read with a getStorageAt call. Therefore, attackers can get powerful...
CVE-2018-12885
No technical details about CVE-2018-12885 are present in the provided connected documents. Technical specifics, affected products, or remediation are not publicly available here; monitor for updates.
CVE-2018-12885
The randMod function of the smart contract implementation for MyCryptoChamp, an Ethereum game, generates a random value with publicly readable variables such as the current block information and a private variable, which can be read with a getStorageAt call. Therefore, attackers can get powerful...
Ethernet place the JSON-RPC Interface to a variety of stolen currency technique big secret-vulnerability warning-the black bar safety net
In 2010, Laszlo the use of 10,000 bitcoin to buy a $ 25 pizza is considered bitcoin in the real world in the first transaction. In 2017, the block chain technology as the digital currency's price soared and standing on the air above. Who could have imagined that in 2010 that two pieces of pizza,...
CVE-2018-13877
The doPayouts function of the smart contract implementation for MegaCryptoPolis, an Ethereum game, has a Denial of Service vulnerability. If a smart contract that has a fallback function always causing exceptions buys a land, users cannot buy lands near that contract's land, because those purchas...