114 matches found
MoxyOnePresale Integer Overflow Vulnerability
MoxyOnePresale is a smart contract that runs on Ether. An integer overflow vulnerability exists in the mint function in MoxyOnePresale. An attacker could use this vulnerability to arbitrarily retrieve casting tokens...
PT-2018-11619
Name of the Vulnerable Software and Affected Versions SP8DE Token SPX affected versions not specified Description The issue concerns an integer overflow in the mint function of the smart contract, allowing the contract owner to arbitrarily retrieve minted tokens. Recommendations At the moment,...
Etherty Token (ETY) Integer Overflow Vulnerability
Etherty Token ETY is a smart contract that runs on Ether. An integer overflow vulnerability exists in the mint function in Etherty Token ETY. An attacker could use this vulnerability to arbitrarily retrieve a minted token...
CVE-2018-13128
Etherty Token ETY is a smart contract running on Ethereum. The mint function has an integer overflow that allows minted tokens to be arbitrarily retrieved by the contract owner...
CVE-2018-13132
CVE-2018-13132 concerns the Spadeico Ethereum smart contract, where the mint function has an integer overflow that can let the contract owner arbitrarily retrieve minted tokens. The vulnerability is described across multiple feeds as affecting the Spadeico mint path, enabling token extraction by ...
CVE-2018-13126
CVE-2018-13126 concerns the MoxyOnePresale Ethereum smart contract. The connected documents describe an integer overflow in the contract’s mint function, which would allow the contract owner to arbitrarily retrieve minted tokens. The material does not provide version numbers, precise affected fil...
CVE-2018-13126
MoxyOnePresale is a smart contract running on Ethereum. The mint function has an integer overflow that allows minted tokens to be arbitrarily retrieved by the contract owner...
PT-2018-10563
Name of the Vulnerable Software and Affected Versions ATLANT ATL affected versions not specified Description The issue concerns an integer overflow in the mint function of the ATLANT smart contract, allowing the contract owner to arbitrarily retrieve minted tokens. Recommendations At the moment,...
PT-2018-11617
Name of the Vulnerable Software and Affected Versions SP8DE PreSale Token DSPX affected versions not specified Description The issue concerns an integer overflow in the mint function of the smart contract, allowing the contract owner to arbitrarily retrieve minted tokens. Recommendations At the...
Advantech WebAccess 8.3 - SQL Injection
Advantech WebAccess 8.3 - SQL Injection !/usr/bin/python2.7 Exploit Title: Advantech WebAccess BWSCADARest Login Method SQL Injection Authentication Bypass Vulnerability Date: 01-13-2018 Exploit Author: Chris Lyne @lynerc Vendor Homepage: www.advantech.com Software Link:...
PT-2017-12032
Name of the Vulnerable Software and Affected Versions Ivanti Service Desk versions 2016.3 through 2017.3 Description The issue allows a normal user to send requests to a specific URI with the target user's username in an HTTP payload to retrieve a key/token and use it to access or update objects...
PT-2015-3957
Name of the Vulnerable Software and Affected Versions Google Play services SDK versions prior to 2015 Description The issue allows attackers to bypass an intended consent dialog and retrieve tokens for arbitrary OAuth scopes, including the SID and LSID scopes, by setting specific parameters in...
CVE-2014-0105
The authtoken middleware in the OpenStack Python client library for Keystone aka python-keystoneclient before 0.7.0 does not properly retrieve user tokens from memcache, which allows remote authenticated users to gain privileges in opportunistic circumstances via a large number of requests, relat...
DEBIAN-CVE-2014-0105
The authtoken middleware in the OpenStack Python client library for Keystone aka python-keystoneclient before 0.7.0 does not properly retrieve user tokens from memcache, which allows remote authenticated users to gain privileges in opportunistic circumstances via a large number of requests, relat...