2629 matches found
Integer overflow
An integer overflow in the transferMulti function of a smart contract implementation for KoreaShow, an Ethereum ERC20 token, allows attackers to accomplish an unauthorized increase of digital assets via crafted value parameters...
CVE-2018-10706
An integer overflow in the transferMulti function of a smart contract implementation for Social Chain SCA, an Ethereum ERC20 token, allows attackers to accomplish an unauthorized increase of digital assets, aka the "multiOverflow" issue...
CVE-2018-10973
An integer overflow in the transferMulti function of a smart contract implementation for KoreaShow, an Ethereum ERC20 token, allows attackers to accomplish an unauthorized increase of digital assets via crafted value parameters...
CVE-2018-10706
Summary: CVE-2018-10706 concerns an integer overflow in the transferMulti function of Social Chain (SCA) ERC20 smart contracts. The overflow allows an attacker to cause an unauthorized increase of tokens. The Seebug writeup describes the vulnerable transferMulti() function, where multiplying valu...
CVE-2018-10706
An integer overflow in the transferMulti function of a smart contract implementation for Social Chain SCA, an Ethereum ERC20 token, allows attackers to accomplish an unauthorized increase of digital assets, aka the "multiOverflow" issue...
CVE-2018-10973: Integer Overflow or Wraparound
An integer overflow in the transferMulti function of a smart contract implementation for KoreaShow, an Ethereum ERC20 token, allows attackers to accomplish an unauthorized increase of digital assets via crafted value parameters...
PT-2018-10217
Name of the Vulnerable Software and Affected Versions KoreaShow affected versions not specified Description The issue is related to an integer overflow in the transferMulti function of a smart contract implementation. This allows attackers to increase digital assets without authorization by...
CVE-2018-10706: Integer Overflow or Wraparound
An integer overflow in the transferMulti function of a smart contract implementation for Social Chain SCA, an Ethereum ERC20 token, allows attackers to accomplish an unauthorized increase of digital assets, aka the "multiOverflow" issue...
John Summers Q&A - Evanta Global CIO Executive Summit
Akamai's John Summers, VP & CTO, spoke at the recent Evanta Global CIO Executive Summit, a gathering of 75 major organization CIOs. His session was titled, "Cloud Security - Adopt Zero Trust and Put Asset-Level Safeguards in Place." Here are some of the key questions he addressed. How do you...
Cockpit Cross-Site Request Forgery Vulnerability
Cockpit is an open source CMS Content Management System for managing structured content. A server-side request forgery vulnerability exists in the /assets/lib/fuc.js.php file in Cockpit versions 0.4.4 through 0.5.5. A remote attacker can exploit this vulnerability to read arbitrary files or send...
PT-2018-18961
Name of the Vulnerable Software and Affected Versions Cockpit versions 0.4.4 through 0.5.5 Description The issue allows remote attackers to read arbitrary files or send TCP traffic to intranet hosts. This is due to an incomplete fix for a previous issue, which was related to version 0.13.0, an...
CVE-2018-10468
The transferFrom function of a smart contract implementation for Useless Ethereum Token UET, an Ethereum ERC20 token, allows attackers to steal assets e.g., transfer all victims' balances into their account because certain computations involving value are incorrect, as exploited in the wild...
CVE-2018-10468
The transferFrom function in the Useless Ethereum Token (UET) smart contract, an Ethereum ERC20 token, contains a logic flaw known as "transferFlaw" . Due to incorrect computations involving the _value parameter, an attacker can cause a balance overflow to steal assets, potentially transferring a...
CVE-2018-10376
An integer overflow in the transferProxy function of a smart contract implementation for SmartMesh aka SMT, an Ethereum ERC20 token, allows attackers to accomplish an unauthorized increase of digital assets via crafted fee and value parameters, as exploited in the wild in April 2018, aka the...
CVE-2018-10376
An integer overflow in the transferProxy function of a smart contract implementation for SmartMesh aka SMT, an Ethereum ERC20 token, allows attackers to accomplish an unauthorized increase of digital assets via crafted fee and value parameters, as exploited in the wild in April 2018, aka the...
CVE-2018-10376: Integer Overflow or Wraparound
An integer overflow in the transferProxy function of a smart contract implementation for SmartMesh aka SMT, an Ethereum ERC20 token, allows attackers to accomplish an unauthorized increase of digital assets via crafted fee and value parameters, as exploited in the wild in April 2018, aka the...
D7 Media - Critical - Remote Code Execution - SA-CONTRIB-2018-020
The Media module provides an extensible framework for managing files and multimedia assets, regardless of whether they are hosted on your own site or a third party site. The module contained a vulnerability similar to SA-CORE-2018-004, leading to a possible remote code execution RCE attack...
Integer overflow
An integer overflow in the batchTransfer function of a smart contract implementation for Beauty Ecosystem Coin BEC, the Ethereum ERC20 token used in the Beauty Chain economic system, allows attackers to accomplish an unauthorized increase of digital assets by providing two receivers arguments in...
CVE-2018-10299
An integer overflow in the batchTransfer function of a smart contract implementation for Beauty Ecosystem Coin BEC, the Ethereum ERC20 token used in the Beauty Chain economic system, allows attackers to accomplish an unauthorized increase of digital assets by providing two receivers arguments in...
CVE-2018-10299
The Beauty Ecosystem Coin (BEC) , an Ethereum ERC20 token, is vulnerable to an integer overflow in its batchTransfer function, known as the "batchOverflow" issue. An attacker can provide two _receivers arguments along with an extremely large _value argument to cause the calculated amount to overf...