CVE-2018-13191

The mintToken function of a smart contract implementation for Super Carbon Coin SCC, an Ethereum token, has an integer overflow that allows the owner of the contract to set the balance of an arbitrary user to any value...

Integer overflow

The mintToken function of a smart contract implementation for Super Carbon Coin SCC, an Ethereum token, has an integer overflow that allows the owner of the contract to set the balance of an arbitrary user to any value...

CVE-2018-13191

The CVE-2018-13191 entry concerns the mintToken function of the Super Carbon Coin (SCC) Ethereum token smart contract. A integer overflow in mintToken allows the contract owner to set an arbitrary user’s balance to any value, effectively corrupting token accounting and granting the owner unauthor...

CVE-2018-13191

The mintToken function of a smart contract implementation for Super Carbon Coin SCC, an Ethereum token, has an integer overflow that allows the owner of the contract to set the balance of an arbitrary user to any value...

CVE-2018-13075

The mintToken function of a smart contract implementation for Carbon Exchange Coin Token CEC, an Ethereum token, has an integer overflow that allows the owner of the contract to set the balance of an arbitrary user to any value...

Integer overflow

The mintToken function of a smart contract implementation for Carbon Exchange Coin Token CEC, an Ethereum token, has an integer overflow that allows the owner of the contract to set the balance of an arbitrary user to any value...

CVE-2018-13075

The mintToken function of a smart contract implementation for Carbon Exchange Coin Token CEC, an Ethereum token, has an integer overflow that allows the owner of the contract to set the balance of an arbitrary user to any value...

Medibank Private Finds the Cure for Ransomware with Carbon Black

Editor's Note: A form of this article originally appeared on CSO.com. Like most large businesses, health insurer Medibank Private was regularly experiencing a few of what CISO Stuart Harrison calls “significant incidents” every month. Its predominantly antivirus-based security defences were missi...

Security fix for the ALT Linux 10 package node version 8.11.3-alt1

June 30, 2018 Vitaly Lipatov 8.11.3-alt1 - new version 8.11.3 with rpmgs script - 2018-06-12, Version 8.11.3 'Carbon' LTS, @evanlucas - CVE-2018-7167, CVE-2018-7161, CVE-2018-1000168...

Cb ThreatSight Investigation Reveals RETADUP Worm Leverages AutoIt to Launch Monero Cryptomining Campaign

While monitoring a customer’s environment, the Carbon Black ThreatSight team discovered a series of unusual alerts. Further investigation of the suspect processes revealed these alerts were related to an attacker leveraging the open-source Monero framework to launch a crypto-mining campaign. Afte...

Design/Logic Flaw

A flaw was found in Opendaylight's SDNInterfaceapp SDNI. Attackers can SQL inject the component's database SQLite without authenticating to the controller or SDNInterfaceapp. SDNInterface has been deprecated in OpenDayLight since it was last used in the final Carbon series release. In addition to...

CVE-2018-1132

A flaw was found in Opendaylight's SDNInterfaceapp SDNI. Attackers can SQL inject the component's database SQLite without authenticating to the controller or SDNInterfaceapp. SDNInterface has been deprecated in OpenDayLight since it was last used in the final Carbon series release. In addition to...

Carbon Black Cb Response Code Execution Vulnerability

Carbon Black Cb Response is a scalable endpoint security solution from Carbon Black USA. The solution provides threat monitoring, threat alerts and malicious domain lists. A security vulnerability exists in Carbon Black Cb Response. The vulnerability can be exploited by an attacker to bypass...

Joyent Node.js Denial of Service Vulnerability

Joyent Node.js is the United States Joyent company's set of web applications built on top of the Google V8 JavaScript engine platform. The platform is primarily used for building highly scalable applications and writing code that can handle tens of thousands of simultaneous connections to a singl...

Register for Carbon Black’s 2018 Customer Conference – Cb Connect in NYC – Oct. 10 & 11

Cb Connect, Carbon Black’s premier customer and partner event of the year, heads to New York City this fall for a two-day conference at Center 415, where you’ll join hundreds of security professionals to discuss: Moving your endpoint security to the cloud Best practices for threat hunting and...

Code injection

An issue was discovered in Carbon Black Cb Response. A maliciously crafted Universal/fat binary can evade third-party code signing checks. By not completing full inspection of the Universal/fat binary, the user of the third-party tool will believe that the code is signed by Apple, but the malicio...

CVE-2018-10407

An issue was discovered in Carbon Black Cb Response. A maliciously crafted Universal/fat binary can evade third-party code signing checks. By not completing full inspection of the Universal/fat binary, the user of the third-party tool will believe that the code is signed by Apple, but the malicio...

CVE-2018-10407

CVE-2018-10407 affects Carbon Black Cb Response. A maliciously crafted Universal/Fat binary can bypass third‑party code signing checks, causing the unsigned payload to execute while the signed Apple image is treated as legitimate. Exploitation relies on embedding unsigned Mach‑O binaries inside a...

CVE-2018-10407

An issue was discovered in Carbon Black Cb Response. A maliciously crafted Universal/fat binary can evade third-party code signing checks. By not completing full inspection of the Universal/fat binary, the user of the third-party tool will believe that the code is signed by Apple, but the malicio...

CVE-2018-7167

Calling Buffer.fill or Buffer.alloc with some parameters can lead to a hang which could result in a Denial of Service. In order to address this vulnerability, the implementations of Buffer.alloc and Buffer.fill were updated so that they zero fill instead of hanging in these cases. All versions of...