6114 matches found
Unspecified vulnerability in ROC 'request_divend' function
ROC aka Rasputin Online Coin is a virtual currency. There is a security vulnerability in the 'requestdivend' function in ROC's smart contract implementation. An attacker could use this vulnerability to steal the entire contract's Ether...
KoreaShow Integer Overflow Vulnerability
KoreaShow is a system for trading cryptocurrencies. An integer overflow vulnerability exists in the 'transferMulti' function of the smart contract implementation in KoreaShow. An attacker can exploit this vulnerability to increase digital assets with the help of the 'value' parameter...
Design/Logic Flaw
The requestdividend function of a smart contract implementation for ROC aka Rasputin Online Coin, an Ethereum ERC20 token, allows attackers to steal all of the contract's Ether...
CVE-2018-10944
The requestdividend function of a smart contract implementation for ROC aka Rasputin Online Coin, an Ethereum ERC20 token, allows attackers to steal all of the contract's Ether...
CVE-2018-10944
The requestdividend function of a smart contract implementation for ROC aka Rasputin Online Coin, an Ethereum ERC20 token, allows attackers to steal all of the contract's Ether...
CVE-2018-10944
CVE-2018-10944 concerns ROC (Rasputin Online Coin), an Ethereum ERC20 token. The smart contract’s request_dividend() function is vulnerable: it computes holder_token_balance and holder_profit and then sends Ether to the address without updating the sender’s balance, and it is declared public with...
PT-2018-10200
Name of the Vulnerable Software and Affected Versions Rasputin Online Coin ROC smart contract implementation affected versions not specified Description The issue concerns the request dividend function of the smart contract implementation, which allows attackers to steal all of the contract's...
CVE-2018-10944: Undefined Security Weakness
The requestdividend function of a smart contract implementation for ROC aka Rasputin Online Coin, an Ethereum ERC20 token, allows attackers to steal all of the contract's Ether...
Aurora DAO Denial of Service Vulnerability
Aurora DAO AURA is a decentralized trading system for Ether ECR-20 tokens. A security vulnerability exists in the Owned smart contract implementation in AURA. An attacker could exploit the vulnerability to gain ownership of the contract, causing a denial of service...
Integer overflow
An integer overflow in the transferMulti function of a smart contract implementation for Social Chain SCA, an Ethereum ERC20 token, allows attackers to accomplish an unauthorized increase of digital assets, aka the "multiOverflow" issue...
Integer overflow
An integer overflow in the transferMulti function of a smart contract implementation for KoreaShow, an Ethereum ERC20 token, allows attackers to accomplish an unauthorized increase of digital assets via crafted value parameters...
CVE-2018-10706
An integer overflow in the transferMulti function of a smart contract implementation for Social Chain SCA, an Ethereum ERC20 token, allows attackers to accomplish an unauthorized increase of digital assets, aka the "multiOverflow" issue...
CVE-2018-10973
An integer overflow in the transferMulti function of a smart contract implementation for KoreaShow, an Ethereum ERC20 token, allows attackers to accomplish an unauthorized increase of digital assets via crafted value parameters...
CVE-2018-10706
An integer overflow in the transferMulti function of a smart contract implementation for Social Chain SCA, an Ethereum ERC20 token, allows attackers to accomplish an unauthorized increase of digital assets, aka the "multiOverflow" issue...
CVE-2018-10973
An integer overflow in the transferMulti function of a smart contract implementation for KoreaShow, an Ethereum ERC20 token, allows attackers to accomplish an unauthorized increase of digital assets via crafted value parameters...
CVE-2018-10706
Summary: CVE-2018-10706 concerns an integer overflow in the transferMulti function of Social Chain (SCA) ERC20 smart contracts. The overflow allows an attacker to cause an unauthorized increase of tokens. The Seebug writeup describes the vulnerable transferMulti() function, where multiplying valu...
CVE-2018-10973
KoreaShow (an Ethereum ERC20 token) is affected by CVE-2018-10973 due to an integer overflow in the transferMulti function. The vulnerability arises from accumulating _value into amount with a for loop and then transferring funds, allowing a crafted _value array to overflow the total and bypass b...
PT-2018-10217
Name of the Vulnerable Software and Affected Versions KoreaShow affected versions not specified Description The issue is related to an integer overflow in the transferMulti function of a smart contract implementation. This allows attackers to increase digital assets without authorization by...
Code injection
The Owned smart contract implementation for Aurora DAO AURA, an Ethereum ERC20 token, allows attackers to acquire contract ownership because the setOwner function is declared as public. An attacker can then conduct a lockBalances denial of service attack...
CVE-2018-10705
The Owned smart contract implementation for Aurora DAO AURA, an Ethereum ERC20 token, allows attackers to acquire contract ownership because the setOwner function is declared as public. An attacker can then conduct a lockBalances denial of service attack...