CVE-2018-13877

The doPayouts function of the smart contract implementation for MegaCryptoPolis, an Ethereum game, has a Denial of Service vulnerability. If a smart contract that has a fallback function always causing exceptions buys a land, users cannot buy lands near that contract's land, because those purchas...

Denial of service

The doPayouts function of the smart contract implementation for MegaCryptoPolis, an Ethereum game, has a Denial of Service vulnerability. If a smart contract that has a fallback function always causing exceptions buys a land, users cannot buy lands near that contract's land, because those purchas...

CVE-2018-13877

The CVE-2018-13877 issue affects MegaCryptoPolis (Ethereum game) via the doPayouts() function in its smart contract. A Denial of Service condition arises when a failing fallback function in a neighboring contract prevents Ether payout, causing land-purchase attempts near that contract to fail sin...

CVE-2018-13877

The doPayouts function of the smart contract implementation for MegaCryptoPolis, an Ethereum game, has a Denial of Service vulnerability. If a smart contract that has a fallback function always causing exceptions buys a land, users cannot buy lands near that contract's land, because those purchas...

CVE-2018-13877: Improper Input Validation

The doPayouts function of the smart contract implementation for MegaCryptoPolis, an Ethereum game, has a Denial of Service vulnerability. If a smart contract that has a fallback function always causing exceptions buys a land, users cannot buy lands near that contract's land, because those purchas...

PT-2018-12245

Name of the Vulnerable Software and Affected Versions MegaCryptoPolis affected versions not specified Description The issue concerns a Denial of Service vulnerability in the doPayouts function of the smart contract implementation for MegaCryptoPolis, an Ethereum game. This vulnerability can be...

Code injection

The endCoinFlip function and throwSlammer function of the smart contract implementations for Cryptogs, an Ethereum game, generate random numbers with an old block's hash. Therefore, attackers can predict the random number and always win the game...

Integer overflow

The mintTokens function of a smart contract implementation for SunContract, an Ethereum token, has an integer overflow via the amount variable...

CVE-2018-14576

The mintTokens function of a smart contract implementation for SunContract, an Ethereum token, has an integer overflow via the amount variable...

CVE-2018-14715

The endCoinFlip function and throwSlammer function of the smart contract implementations for Cryptogs, an Ethereum game, generate random numbers with an old block's hash. Therefore, attackers can predict the random number and always win the game...

CVE-2018-14715

The endCoinFlip function and throwSlammer function of the smart contract implementations for Cryptogs, an Ethereum game, generate random numbers with an old block's hash. Therefore, attackers can predict the random number and always win the game...

CVE-2018-14576

The CVE-2018-14576 entry concerns an integer overflow in the mintTokens function of a SunContract Ethereum token smart contract, triggered via the _amount variable. Documents in the connected set corroborate this overflow condition and point to SunContract’s token contract as the affected compone...

CVE-2018-14715

CVE-2018-14715 affects Cryptogs’ Ethereum smart contracts, specifically the endCoinFlip and throwSlammer functions. The vulnerability arises from generating randomness using an old block hash, enabling an attacker to predict outcomes and consistently win the game. The connected CNVD/NVD entries c...

CVE-2018-14576: Integer Overflow or Wraparound

The mintTokens function of a smart contract implementation for SunContract, an Ethereum token, has an integer overflow via the amount variable...

PT-2018-12682

Name of the Vulnerable Software and Affected Versions Cryptogs affected versions not specified Description The issue concerns the generation of random numbers in the smart contract implementations for Cryptogs, an Ethereum game. Specifically, the endCoinFlip function and throwSlammer function use...

Security Bulletin: Vulnerability in IBM WebSphere Application Server Affects IBM Emptoris Sourcing, IBM Emptoris Contract Management, IBM Emptoris Spend Analysis, IBM Emptoris Program Management and IBM Emptoris Service Procurement (CVE-2018-1621)

Summary The IBM Emptoris Sourcing, IBM Emptoris Contract Management, IBM Emptoris Spend Analysis, IBM Emptoris Program Management and IBM Emptoris Service Procurement products are affected by a vulnerability that exists in the IBM WebSphere Application Server. The security bulletin includes issue...

Security Bulletin: Vulnerability in IBM WebSphere Application Server Affects IBM Emptoris Sourcing, IBM Emptoris Contract Management, IBM Emptoris Spend Analysis, IBM Emptoris Program Management and IBM Emptoris Service Procurement (CVE-2018-1614)

Summary The IBM Emptoris Sourcing, IBM Emptoris Contract Management, IBM Emptoris Spend Analysis, IBM Emptoris Program Management and IBM Emptoris Service Procurement products are affected by a vulnerability that exists in the IBM WebSphere Application Server. The security bulletin includes issue...

KICKICO Hacked: Cybercriminal Steals $7.7 Million from ICO Platform

Again some bad news for cryptocurrency users. KICKICO, a blockchain-based initial coin offering ICO support platform, has fallen victim to a suspected cyber attack and lost more than 70 million KICK tokens or KickCoins worth an estimated $7.7 million. In a statement released on its Medium post on...

KICKICO Hacked: Cybercriminal Steals $7.7 Million from ICO Platform

Again some bad news for cryptocurrency users. KICKICO, a blockchain-based initial coin offering ICO support platform, has fallen victim to a suspected cyber attack and lost more than 70 million KICK tokens or KickCoins worth an estimated $7.7 million. In a statement released on its Medium post on...

CVE-2018-12959

The approveAndCall function of a smart contract implementation for Aditus ADI, an Ethereum ERC20 token, allows attackers to steal assets e.g., transfer all contract balances into their account...