1095 matches found
One Signature, Multiple Payments: Demystifying and Detecting Signature Replay Vulnerabilities in Smart Contracts
Smart contracts have significantly advanced blockchain technology, and digital signatures are crucial for reliable verification of contract authority. Through signature verification, smart contracts can ensure that signers possess the required permissions, thus enhancing security and scalability...
SAP S4CORE 安全漏洞
SAP S4CORE is a Managed Procurement Contracts application from SAP, Germany. A security vulnerability exists in SAP S4CORE that stems from a failure to perform required authorization checks on authenticated users, which could result in elevated privileges...
Aether - Adaptive Exploit and Threat Hunting Engine for EVM-based Repositories
Aether is a Python-based framework for analyzing Solidity smart contracts, generating vulnerability findings, producing Foundry-based proof-of-concept PoC tests, and optionally validating those tests on mainnet forks. It combines static analysis, prompt-driven LLM analysis, and AI-ensemble...
Use of a Cryptographic Primitive with a Risky Implementation
Overview Affected versions of this package are vulnerable to Use of a Cryptographic Primitive with a Risky Implementation in the handling of precompiles in the BalanceHandler that can cause prevEventsLen to be overwritten. An attacker can compromise the integrity or confidentiality of the system ...
North Korean Hackers Use EtherHiding to Hide Malware Inside Blockchain Smart Contracts
A threat actor with ties to the Democratic People's Republic of Korea aka North Korea has been observed leveraging the EtherHiding technique to distribute malware and enable cryptocurrency theft, marking the first time a state-sponsored hacking group has embraced the method. The activity has been...
Hackers Abuse Blockchain Smart Contracts to Spread Malware via Infected WordPress Sites
A financially motivated threat actor codenamed UNC5142 has been observed abusing blockchain smart contracts as a way to facilitate the distribution of information stealers such as Atomic AMOS, Lumma, Rhadamanthys aka RADTHIEF, and Vidar, targeting both Windows and Apple macOS systems. "UNC5142 is...
EUVD-2021-1988
Malware in sbrugna...
EUVD-2018-0118
Malware in sbrugna...
EUVD-2021-2492
Malware in sbrugna...
EUVD-2016-0593
Malware in sbrugna...
EUVD-2019-11590
Malware in sbrugna...
EUVD-2021-12717
Malware in sbrugna...
Security Analysis of Ponzi Schemes in Ethereum Smart Contracts
The rapid advancement of blockchain technology has precipitated the widespread adoption of Ethereum and smart contracts across a variety of sectors. However, this has also given rise to numerous fraudulent activities, with many speculators embedding Ponzi schemes within smart contracts, resulting...
EUVD-2023-0188
Malicious code in bioql PyPI...
EUVD-2022-6478
Malicious code in bioql PyPI...
EUVD-2023-1247
Malicious code in bioql PyPI...
EUVD-2022-6503
Malicious code in bioql PyPI...
EUVD-2022-6882
Malicious code in bioql PyPI...