CVE-2025-56207

The CVE-2025-56207 entry concerns Money Making Opportunity (MMO), an Ethereum ERC-721 NFT project. The vulnerability is in the contract’s _transfer function, which can cause NFTs to be sent to the zero address, resulting in permanent asset loss and ERC-721 non-compliance. Affected details include...

PT-2025-40008

Name of the Vulnerable Software and Affected Versions Money Making Opportunity versions prior to v0.8.17+commit.8df45f5f Description A flaw exists in the transfer function of a smart contract used by Money Making Opportunity, an Ethereum ERC721 Non-Fungible Token NFT project. This allows for the...

The vulnerability of the Windows Robust Multi-Address Transfer Driver (RMCAST) on Windows operating systems allows a hacker to execute arbitrary code.

The vulnerability of the Windows Robust Multi-Address Transfer Driver RMCAST on Windows operating systems is related to the possibility of using memory after it is freed. Exploiting this vulnerability can allow a remote attacker to execute arbitrary code...

[Tomo-H1] All funds can drain if some conditions matched

Lines of code Vulnerability details function finalizeWithdrawal uint256 l2BlockNumber, uint256 l2MessageIndex, uint16 l2TxNumberInBlock, bytes calldata message, bytes32 calldata merkleProof external nonReentrant senderCanCallFunctionallowList...

Upgraded Q -> M from 873 [1666362235337]

Judge has assessed an item in Issue 873 as Medium risk. The relevant finding follows: Avoid payableaddress.transfer GolomTraderpayEther uses payableaddress.transfer to send native ETH. It's considered a best practice to avoid this pattern for ETH transfers, since it forwards a fixed gas stipend...

Usage of transfer

Handle cmichel Vulnerability details The address.transfer function is used in sweepFees and and swapByQuote to send ETH to an account. It is restricted to a low amount of GAS and might fail if GAS costs change in the future or if feeRecipient is a smart contract and its fallback function handler...

ROS-2-448

2.448 Vulnerability in OpenVPN CVE-2020-11810 1. Vulnerability Description: A corrective release of the OpenVPN Virtual Private Networking Package 2.4.9 has been generated. The new version addresses a vulnerability CVE-2020-11810 that allows a client session to be transferred to a new IP address...

The vulnerability of Xen hypervisors arises from insufficient data processing during the transfer of an address to the TLB reset code, allowing a malicious actor to trigger a service failure.

The vulnerability of Xen hypervisors is related to an error in the address transfer during the TLB flush code. Exploiting this vulnerability can allow an attacker to cause a service failure...