Bitotal Number Error Vulnerability

Bitotal TFUND is an ethereum-based digital currency.An integer overflow vulnerability exists in the 'mint' function in TFUND. An attacker can exploit the vulnerability to retrieve generated tokens...

[SECURITY] [DSA 4676-1] salt security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4676-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso May 06, 2020 https://www.debian.org/security/faq -...

Exploit for CVE-2020-11651

CVE-2020-11651 An issue was discovered in SaltStack Salt befo...

PYSEC-2020-102

An issue was discovered in SaltStack Salt before 2019.2.4 and 3000 before 3000.2. The salt-master process ClearFuncs class does not properly validate method calls. This allows a remote user to access some methods without authentication. These methods can be used to retrieve user tokens from the...

CVE-2020-1772

It's possible to craft Lost Password requests with wildcards in the Token value, which allows attacker to retrieve valid Tokens, generated by users which already requested new passwords. This issue affects: OTRS Community Edition 5.0.41 and prior versions, 6.0.26 and prior versions. OTRS: 7.0.15...

CVE-2020-1772

It's possible to craft Lost Password requests with wildcards in the Token value, which allows attacker to retrieve valid Tokens, generated by users which already requested new passwords. This issue affects: OTRS Community Edition 5.0.41 and prior versions, 6.0.26 and prior versions. OTRS: 7.0.15...

CVE-2020-1772 Information Disclosure

It's possible to craft Lost Password requests with wildcards in the Token value, which allows attacker to retrieve valid Tokens, generated by users which already requested new passwords. This issue affects: OTRS Community Edition 5.0.41 and prior versions, 6.0.26 and prior versions. OTRS: 7.0.15...

CVE-2020-1772: Improper Neutralization of Wildcards or Matching Symbols

It's possible to craft Lost Password requests with wildcards in the Token value, which allows attacker to retrieve valid Tokens, generated by users which already requested new passwords. This issue affects: OTRS Community Edition 5.0.41 and prior versions, 6.0.26 and prior versions. OTRS: 7.0.15...

Cross-Site Scripting (XSS)

web-console is vulnerable to cross-site scripting. The vulnerability, caused by missing X-Frame-Options and CSRF protections, in the oauth/token/request endpoint could allow a remote attacker to retrieve a token for CLI usage when using non default configs...

Integer overflow

ATLANT ATL is a smart contract running on Ethereum. The mint function has an integer overflow that allows minted tokens to be arbitrarily retrieved by the contract owner...

CVE-2018-13126

MoxyOnePresale is a smart contract running on Ethereum. The mint function has an integer overflow that allows minted tokens to be arbitrarily retrieved by the contract owner...

CVE-2018-13130

Bitotal TFUND is a smart contract running on Ethereum. The mintTokens function has an integer overflow that allows minted tokens to be arbitrarily retrieved by the contract owner...

Integer overflow

SpadePreSale is a smart contract running on Ethereum. The mint function has an integer overflow that allows minted tokens to be arbitrarily retrieved by the contract owner...

Integer overflow

Spadeico is a smart contract running on Ethereum. The mint function has an integer overflow that allows minted tokens to be arbitrarily retrieved by the contract owner...

CVE-2018-11335

CVE-2018-11335 describes a vulnerability in GVToken Genesis Vision (GVT), a smart contract on Ethereum. The mint function contains an integer overflow that allows the contract owner to arbitrarily retrieve minted tokens. The issue is rooted in arithmetic handling within mint, enabling the owner t...

Spadeico Integer Overflow Vulnerability

Spadeico is a smart contract that runs on Ether. An integer overflow vulnerability exists in the mint function in Spadeico. An attacker could use this vulnerability to arbitrarily retrieve casting tokens...

GVToken Genesis Vision (GVT) Integer Overflow Vulnerability

GVToken Genesis Vision GVT is a smart contract that runs on Ether. An integer overflow vulnerability exists in the mint function in GVToken Genesis Vision GVT. The vulnerability can be exploited by the contract owner to arbitrarily retrieve a minted token...

CVE-2018-11429

CVE-2018-11429 affects the ATLANT (ATL) smart contract running on Ethereum. The vulnerability is an integer overflow in the mint function that allows the contract owner to arbitrarily retrieve minted tokens. Affected component: the mint function of ATLANT (ATL); root cause: overflow in integer ar...

CVE-2018-13132

Spadeico is a smart contract running on Ethereum. The mint function has an integer overflow that allows minted tokens to be arbitrarily retrieved by the contract owner...

PT-2018-10494

Name of the Vulnerable Software and Affected Versions GVToken Genesis Vision GVT affected versions not specified Description The issue concerns an integer overflow in the mint function of the GVToken Genesis Vision GVT smart contract, which runs on Ethereum. This overflow allows the contract owne...