smart-contract-attack-vectors

智能合约攻击向量 本仓库的目标是汇集所有可能的智能合约漏洞以及相应的学习资源。 欢迎随时提交 pull request，无论是小修复，还是您想添加的文档或工具。 安全漏洞列表 访问控制 使用 tx.origin 进行身份验证 默认可见性 签名验证 未受保护的 Ether 提取 未受保护的 SELFDESTRUCT 指令 遗漏的修饰器 不正确的修饰器名称 权限过大的角色 低级调用的账户存在性检查 使用函数变量的任意跳转 断言违例 绕过合约大小检查 无效果的代码 复杂修饰器 拒绝服务（DOS） 意外回滚 区块 Gas 上限 无 Gas 补贴的外部调用 脏的高阶位 熵错觉 / 不安全的随机性...

CVE-2016-20097

creationtimestamp| type| source ---|---|--- 2026-08-14 20:00:19+00:00| exploited| https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/72a4432a-2124-4b6e-9cab-fd09b4ac5fa6 2026-09-03 01:02:31+00:00| exploited|...

CVE-2022-50997

creationtimestamp| type| source ---|---|--- 2026-08-14 18:00:21+00:00| exploited| https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/9b0c9d28-d532-4f72-ac99-6d75bcb0281c 2026-08-30 01:01:35+00:00| exploited|...

CVE-2013-3821

creationtimestamp| type| source ---|---|--- 2026-08-07 11:00:20+00:00| exploited| https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/b5eb8264-164c-4d3e-b562-e6bfed5d81bd...

CVE-2026-60454

CVE-2026-60454 affects Oracle HTTP Server (Core) in Oracle Fusion Middleware. Affected versions are 12.2.1.4.0 and 14.1.2.0.0. The vulnerability is described as easily exploitable with a low-privilege attacker who can log on to the infrastructure where Oracle HTTP Server runs, potentially leading...

CVE-2026-54992

creationtimestamp| type| source ---|---|--- 2026-07-14 19:01:41+00:00| seen| https://advisories.ncsc.nl/advisory?id=NCSC-2026-0231 2026-07-14 22:02:12+00:00| seen| https://www.thezdi.com/blog/2026/7/14/the-july-2026-security-update-review 2026-07-14 23:00:36+00:00| exploited|...

CVE-2026-15410

creationtimestamp| type| source ---|---|--- 2026-07-14 17:48:47+00:00| seen| https://bsky.app/profile/blackhatnews.tokyo/post/3mqmrct2poa2b 2026-07-14 18:59:52+00:00| seen| https://bsky.app/profile/hapsis.bsky.social/post/3mqmvbuce4c2u 2026-07-14 20:00:01+00:00| exploited|...

CVE-2020-13483

creationtimestamp| type| source ---|---|--- 2026-06-30 12:40:19+00:00| exploited| https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/4428c0a7-ddcc-40e0-b8cd-dbe31a0f005d...

EDB-52074

creationtimestamp| type| source ---|---|--- 2026-06-30 12:19:18+00:00| exploited| https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/eeccf09a-5ad9-4893-b383-6217a2e76c74...

CNVD-2021-14544

creationtimestamp| type| source ---|---|--- 2026-06-30 10:00:28+00:00| exploited| https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/6b22d18a-6361-42df-91ca-23ce420fecab...

SSV-89107

creationtimestamp| type| source ---|---|--- 2026-06-30 09:59:44+00:00| exploited| https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/e6517e24-b941-4f21-b78b-d5e147929595...

EDB-48857

creationtimestamp| type| source ---|---|--- 2026-06-30 09:59:35+00:00| exploited| https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/08fec6cd-60db-48e0-adee-f94db4ca16e6...

CNVD-2021-49564

creationtimestamp| type| source ---|---|--- 2026-06-30 09:59:00+00:00| exploited| https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/12107853-e1f8-4031-84ea-c8105ed20f02...

EDB-22127

creationtimestamp| type| source ---|---|--- 2026-06-30 09:42:17+00:00| exploited| https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/6226706d-87aa-4a23-bc83-21efa362effa...

EDB-50753

creationtimestamp| type| source ---|---|--- 2026-06-30 09:23:54+00:00| exploited| https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/3ebadbe6-561c-4380-b248-848132fc78fb...

CNVD-2023-27598

creationtimestamp| type| source ---|---|--- 2026-06-30 09:23:11+00:00| exploited| https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/d00febbd-741a-4af5-a5f6-82b4ca156c88...

EDB-48260

creationtimestamp| type| source ---|---|--- 2026-06-30 09:22:50+00:00| exploited| https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/29b6053e-8cc7-4ace-8a04-da56fd5deb27...

CVE-2021-35327

creationtimestamp| type| source ---|---|--- 2026-06-23 14:06:18+00:00| exploited| https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/aa0203c2-14f0-4d9e-8df1-cc101cebddcf 2026-06-30 12:18:19+00:00| exploited|...

CVE-2022-1883

creationtimestamp| type| source ---|---|--- 2026-06-23 14:06:15+00:00| exploited| https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/139c7085-bd75-4258-9bb8-e7f8d045d965 2026-06-30 12:19:14+00:00| exploited|...

CVE-2006-4326

creationtimestamp| type| source ---|---|--- 2026-06-19 16:45:42+00:00| exploited| https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/352332dc-aacc-4feb-af4a-f78272b32dbd 2026-06-23 14:04:18+00:00| exploited|...