251 matches found
The randomIndex() can be determined
Handle s1m0 Vulnerability details Impact The function randomIndex is used to choose which id to mint theoretically randomly. The index can be computed with a smartContract by giving him through arguments the internal/private variables numTokens and nonce gotten with getStorageAt. Note there is al...
Incorrect Stability Assumption
Handle 0xsomeone Vulnerability details Impact An arbitrage opportunity presents itself whereby a user can exaggerate the discrepancy via flash loans between the USDC price reported and the actual USDC price to f.e. acquire a better rate for their loan. The impacted features of the system can be...
@archanova/contracts (>=1.0.0-beta.1, <=1.0.0-beta.3), @archanova/solidity (>=0.0.7, <=0.0.10) +13 more potentially affected by CVE-2020-5232 via @ensdomains/ens (>=0.1.1, <=0.3.11)
@ensdomains/ens NPM version =0.1.1, =1.0.0-beta.1, =0.0.7, =0.0.3, =0.0.3, =1.0.0, =0.0.2, =1.0.11, =1.1.1, =1.0.0, =3.1.0-ens-events.0, =0.6.1, =0.6.0, =0.0.8, =0.0.45 - ethregistrar 1.0.0 Source cves: CVE-2020-5232 Source advisory: OSV:GHSA-8F9F-PC5V-9R5H...
Chainlink: Testnet address being sent in cleartext as http://rinkeby.chain.link/ is missing SSL certificate
Summary: SSL certificate missing for page: http://rinkeby.chain.link/ which is letting an attacker to sniff sensitive information, in this case, user's testnet address as it is being transmitted unencrypted in clear text Description: http://rinkeby.chain.link/ missing SSL encryption, data sent ov...
Chainlink: undisclosed vulnerability (ZAI-2026-6TN6U6)
Not disclosed. Details are not yet publicly disclosed...
Chainlink: undisclosed vulnerability (ZAI-2026-GVWIXS)
Not disclosed. Details are not yet publicly disclosed...
Chainlink: undisclosed vulnerability (ZAI-2026-HPBVG3)
Not disclosed. Details are not yet publicly disclosed...
Chainlink: undisclosed vulnerability (ZAI-2026-GGN7GH)
Not disclosed. Details are not yet publicly disclosed...
Chainlink: undisclosed vulnerability (ZAI-2026-7W8OI8)
Not disclosed. Details are not yet publicly disclosed...