octopus

Octopus Muchas gracias a QuoScient por patrocinar este proyecto. Octopus es un marco de análisis de seguridad para módulos WebAssembly y contratos inteligentes de Blockchain. El propósito de Octopus es proporcionar una manera fácil de analizar módulos WebAssembly de código cerrado y bytecode de...

GOATCasino

¡Bienvenido al Casino GOAT! ¡Prueba tu suerte o tus habilidades en los distintos juegos del casino para ganar fabulosos tokens y premios! Esto está en desarrollo, así que por ahora puede haber una cantidad decepcionante de juegos, pero hay más por venir y muchas cosas que explotar mientras tanto...

domestic-system

El Sistema Doméstico Una hermosa billetera Ethereum y navegador de contratos inteligentes basado en terminal, construido para soberanía, seguridad y estilo. ━━━━━━━━━━━━━━━━━━━━ domestic system ━━━━━━━━━━━━━━━━━━━━ Descripción general The Domestic System es una interfaz de usuario de terminal TUI...

CVE-2026-9998-Insecure-Deserialization-in-Blockchain-Oracle

10. CVE-2026-9998 – Deserialización insegura en oráculo de blockchain Resumen Un nodo oráculo de blockchain deserializa datos de un evento de contrato inteligente utilizando pickle de Python, lo que permite a un atacante ejecutar comandos arbitrarios. Severidad: Crítica Compromiso total del nodo...

Proof-Gated Signing: Solver-Checked Transaction Guards That Hold under State Drift for Onchain AI Agents

AI agents that control wallets read attacker-reachable content, so they can be steered into proposing harmful transactions. The usual last line of defense is a pre-signing check: a static allowlist, an LLM reviewer, or a transaction simulation. All three share a gap: the check describes the chain...

CVE-2026-100248

The Rattadan Cosmowarp smart contract before 56c6147 can have a comparison to an unintended value of currentadmin...

CVE-2026-100248

The Rattadan Cosmowarp smart contract before 56c6147 can have a comparison to an unintended value of currentadmin...

CVE-2026-100248

The Rattadan Cosmowarp smart contract before 56c6147 can have a comparison to an unintended value of currentadmin...

EUVD-2026-87152

The Rattadan Cosmowarp smart contract before 56c6147 can have a comparison to an unintended value of currentadmin...

CVE-2026-100248: Comparison Using Wrong Factors

The Rattadan Cosmowarp smart contract before 56c6147 can have a comparison to an unintended value of currentadmin...

Klever-Go Account takeover: `kleverUpdateAccountPermission` authorizes on attacker-controlled `RecipientAddr` instead of the authenticated caller

Description The VM built-in function KleverUpdateAccountPermission registered always-active, creator.go:381-390 / core/vmconstants.go:234 rewrites an account's entire permission set. Its authorization check uses vmInput.RecipientAddr attacker-controlled instead of the authenticated...

PT-2026-97538

Name of the Vulnerable Software and Affected Versions Klever-Go versions prior to 1.7.20 Description An issue exists in the KleverUpdateAccountPermission built-in function where the authorization check incorrectly uses the vmInput.RecipientAddr variable instead of the authenticated...

CVE-2026-87165

Vulnerability in the Oracle Contract Lifecycle Management for Public Sector product of Oracle E-Business Suite component: ECC For Award and IDV. The supported version that is affected is V16. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromis...

CVE-2026-87169

Vulnerability in the Oracle Contract Lifecycle Management for Public Sector product of Oracle E-Business Suite component: Wage Determination Online. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows unauthenticated attacker with network access via HT...

CVE-2026-87162

Vulnerability in the Oracle Contract Lifecycle Management for Public Sector product of Oracle E-Business Suite component: Award/PO. Supported versions that are affected are 12.2.13-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise...

CVE-2026-87149

Vulnerability in the Oracle Contract Lifecycle Management for Public Sector product of Oracle E-Business Suite component: Award/PO. Supported versions that are affected are 12.2.8-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise...

EUVD-2026-79824

Vulnerability in the Oracle Contract Lifecycle Management for Public Sector product of Oracle E-Business Suite component: Wage Determination Online. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows unauthenticated attacker with network access via HT...

EUVD-2026-79820

Vulnerability in the Oracle Contract Lifecycle Management for Public Sector product of Oracle E-Business Suite component: ECC For Award and IDV. The supported version that is affected is V16. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromis...

CVE-2026-87165

CVE-2026-87165 affects Oracle Contract Lifecycle Management for Public Sector (component: ECC For Award and IDV ), version 16 . An easily exploitable vulnerability allows a low-privileged attacker with network access via HTTP to compromise the product, potentially resulting in full takeover with ...

EUVD-2026-79817

Vulnerability in the Oracle Contract Lifecycle Management for Public Sector product of Oracle E-Business Suite component: Award/PO. Supported versions that are affected are 12.2.13-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise...