CVE-2018-14063

The increaseApproval function of a smart contract implementation for Tracto TRCT, an Ethereum ERC20 token, has an integer overflow...

Integer overflow

The increaseApproval function of a smart contract implementation for Tracto TRCT, an Ethereum ERC20 token, has an integer overflow...

CVE-2018-14063

The CVE-2018-14063 vulnerability affects the Tracto (TRCT) ERC20 smart contract. The increaseApproval function uses an unsafe addition (allowed[msg.sender][_spender] += _addedValue) that can overflow, as shown in the exploitable code snippet. This indicates a root cause: integer overflow in the s...

CVE-2018-14063

The increaseApproval function of a smart contract implementation for Tracto TRCT, an Ethereum ERC20 token, has an integer overflow...

Code injection

For the Lenovo Smart Assistant Android app versions earlier than 12.1.82, an attacker with physical access to the smart speaker can, by pressing a specific button sequence, enter factory test mode and enable a web service intended for testing the device. As with most test modes, this provides ext...

CVE-2018-9070

For the Lenovo Smart Assistant Android app versions earlier than 12.1.82, an attacker with physical access to the smart speaker can, by pressing a specific button sequence, enter factory test mode and enable a web service intended for testing the device. As with most test modes, this provides ext...

CVE-2018-9070

For the Lenovo Smart Assistant Android app versions earlier than 12.1.82, an attacker with physical access to the smart speaker can, by pressing a specific button sequence, enter factory test mode and enable a web service intended for testing the device. As with most test modes, this provides ext...

CVE-2018-9070

For the Lenovo Smart Assistant Android app versions earlier than 12.1.82, an attacker with physical access to the smart speaker can, by pressing a specific button sequence, enter factory test mode and enable a web service intended for testing the device. As with most test modes, this provides ext...

CVE-2018-9070

For the Lenovo Smart Assistant Android app versions earlier than 12.1.82, an attacker with physical access to the smart speaker can, by pressing a specific button sequence, enter factory test mode and enable a web service intended for testing the device. As with most test modes, this provides ext...

CVE-2018-9070

The CVE-2018-9070 flaw affects Lenovo Smart Assistant Android app versions

Grundig Smart Inter@ctive TV Cross-Site Request Forgery Vulnerability

Grundig Smart Inter@ctive TV is a television device. A cross-site request forgery vulnerability exists in Grundig Smart Inter@ctive TV version 3.0. A remote attacker can exploit this vulnerability by sending a POST request with an ID value to TCP port 8085 to access the TV desktop and perform...

Grundig Smart Inter@ctive 3.0 - Cross-Site Request Forgery

Exploit Title: Grundig Smart Inter@ctive 3.0 - Cross-Site Request Forgery Date: 2018-07-§3 Exploit Author: Ahmethan-Gultekin - t4rkd3vilz Vendor Homepage: https://www.grundig.com/ Software Link: https://play.google.com/store/apps/details?id=arcelik Version: Before Smart Inter@ctive 3.0 Tested on:...

NGToken Integer Overflow Vulnerability

NGToken is a tradable Ether ERC20 token. An integer overflow vulnerability exists in the multipleTransfer function of NGToken's smart contract implementation. An attacker can exploit this vulnerability to set the balance of an arbitrary user...

Grundig Smart Inter@ctive 3.0 - Cross-Site Request Forgery

Grundig Smart Inter@ctive 3.0 - Cross-Site Request Forgery Exploit Title: Grundig Smart Inter@ctive 3.0 - Cross-Site Request Forgery Date: 2018-07-§3 Exploit Author: Ahmethan-Gultekin - t4rkd3vilz Vendor Homepage: https://www.grundig.com/ Software Link:...

Grundig Smart [email protected] 3.0 - Cross-Site Request Forgery Vulnerability

Exploit for hardware platform in category web applications Exploit Title: Grundig Smart email protected 3.0 - Cross-Site Request Forgery Exploit Author: Ahmethan-Gultekin - t4rkd3vilz Vendor Homepage: https://www.grundig.com/ Software Link: https://play.google.com/store/apps/details?id=arcelik...

Lenovo Smart Assistant Factory Test Mode - US

Lenovo Security Advisory: LEN-22172 Potential Impact: Root access of the device Severity: Medium Scope of Impact: Lenovo Smart Assistant CVE Identifier: CVE-2018-9070 Summary Description: Lenovo Smart Assistant is an Amazon Alexa-enabled smart speaker developed by Lenovo. An attacker with physica...

Integer overflow

An integer overflow vulnerability exists in the function batchTransfer of SHARKTECH SKT, an Ethereum token smart contract. An attacker could use it to set any user's balance...

Integer overflow

An integer overflow vulnerability exists in the function transfertokensafterICO of GlobeCoin GLB, an Ethereum token smart contract. An attacker could use it to set any user's balance...

CVE-2018-13836

An integer overflow vulnerability exists in the function multiTransfer of Rocket Coin XRC, an Ethereum token smart contract. An attacker could use it to set any user's balance...

CVE-2018-14005

An integer overflow vulnerability exists in the function transferAny of Malaysia coins Xmc, an Ethereum token smart contract. An attacker could use it to set any user's balance...