6114 matches found
Critical RCE Flaw Discovered in Blockchain-Based EOS Smart Contract System
Security researchers have discovered a series of new vulnerabilities in EOS blockchain platform, one of which could allow remote hackers to take complete control over the node servers running the critical blockchain-based applications. EOS is an open source smart contract platform, known as...
DimonCoin (FUD) Information Disclosure Vulnerability
DimonCoin FUD is a virtual currency system. A security vulnerability exists in the 'transferFrom' function of the smart contract implementation in DimonCoin FUD, which stems from an error in the computation of the included value. The vulnerability can be exploited by an attacker to steal assets...
CVE-2018-11411
The transferFrom function of a smart contract implementation for DimonCoin FUD, an Ethereum ERC20 token, allows attackers to steal assets e.g., transfer all victims' balances into their account because certain computations involving value are incorrect...
CVE-2018-11411
The transferFrom function of a smart contract implementation for DimonCoin FUD, an Ethereum ERC20 token, allows attackers to steal assets e.g., transfer all victims' balances into their account because certain computations involving value are incorrect...
CVE-2018-11411
DimonCoin (FUD) ERC20 token vulnerable in transferFrom due to incorrect _value computation, enabling overflow to let an attacker steal victims’ balances; no patch details provided in the available documents.
PT-2018-10554
Name of the Vulnerable Software and Affected Versions DimonCoin FUD smart contract implementation affected versions not specified Description The issue concerns incorrect computations involving the value variable in the transferFrom function of the smart contract implementation. This allows...
Backdoors in D-Link’s backyard
"If you want to change the world, start with yourself." In the case of security research this can be rephrased to: "If you want to make the world safer, start with the smart things in your home." Or, to be more specific, start with your router – the core of any home network as well as an...
Ether Cartel Unauthorized Operation Vulnerability
Ether Cartel is a blockchain-based pharmaceutical simulation game. A security vulnerability exists in the 'DrugDealer' function of the smart contract implementation in Ether Cartel. An attacker could use the vulnerability to take control of the contract's ownership and potentially manipulate...
CVE-2018-11329
The DrugDealer function of a smart contract implementation for Ether Cartel, an Ethereum game, allows attackers to take over the contract's ownership, aka ceoAnyone. After that, all the digital assets including Ether balance and tokens might be manipulated by the attackers, as exploited in the wi...
Code injection
The DrugDealer function of a smart contract implementation for Ether Cartel, an Ethereum game, allows attackers to take over the contract's ownership, aka ceoAnyone. After that, all the digital assets including Ether balance and tokens might be manipulated by the attackers, as exploited in the wi...
CVE-2018-11329
The DrugDealer function of a smart contract implementation for Ether Cartel, an Ethereum game, allows attackers to take over the contract's ownership, aka ceoAnyone. After that, all the digital assets including Ether balance and tokens might be manipulated by the attackers, as exploited in the wi...
CVE-2018-11329
The DrugDealer function of a smart contract implementation for Ether Cartel, an Ethereum game, allows attackers to take over the contract's ownership, aka ceoAnyone. After that, all the digital assets including Ether balance and tokens might be manipulated by the attackers, as exploited in the wi...
CVE-2018-11329
The Ether Cartel Ethereum game contains a smart contract vulnerability where the DrugDealer function allows attackers to take over the contract's ownership, referred to as ceoAnyone . This occurs because the function, which was intended to be a constructor, was incorrectly named as a public funct...
CVE-2018-11329: Undefined Security Weakness
The DrugDealer function of a smart contract implementation for Ether Cartel, an Ethereum game, allows attackers to take over the contract's ownership, aka ceoAnyone. After that, all the digital assets including Ether balance and tokens might be manipulated by the attackers, as exploited in the wi...
PT-2018-10488
Name of the Vulnerable Software and Affected Versions Ether Cartel affected versions not specified Description The issue allows attackers to take over the contract's ownership, potentially manipulating all digital assets, including Ether balance and tokens. This has been exploited in the wild...
VulnCheck KEV: CVE-2018-11329
The DrugDealer function of a smart contract implementation for Ether Cartel, an Ethereum game, allows attackers to take over the contract's ownership, aka ceoAnyone. After that, all the digital assets including Ether balance and tokens might be manipulated by the attackers, as exploited in the wi...
Integer overflow
An integer overflow in the transfer function of a smart contract implementation for Hexagon HXG, an Ethereum ERC20 token, allows attackers to accomplish an unauthorized increase of digital assets by providing a to argument in conjunction with a large value argument, as exploited in the wild in Ma...
CVE-2018-11239
An integer overflow in the transfer function of a smart contract implementation for Hexagon HXG, an Ethereum ERC20 token, allows attackers to accomplish an unauthorized increase of digital assets by providing a to argument in conjunction with a large value argument, as exploited in the wild in Ma...
CVE-2018-11239
The Hexagon (HXG) Ethereum ERC20 token is vulnerable to an integer overflow in its _transfer function, known as the "burnOverflow" issue. By providing a large _value argument (e.g., 0xffff...fffe) in conjunction with a _to argument, an attacker can trigger an overflow when the contract calculates...
VulnCheck KEV: CVE-2018-11239
An integer overflow in the transfer function of a smart contract implementation for Hexagon HXG, an Ethereum ERC20 token, allows attackers to accomplish an unauthorized increase of digital assets by providing a to argument in conjunction with a large value argument, as exploited in the wild in Ma...