CVE-2018-12063

The sell function of a smart contract implementation for Internet Node Token INT, a tradable Ethereum ERC20 token, allows a potential trap that could be used to cause financial damage to the seller, because of overflow of the multiplication of its argument amount and a manipulable variable...

CVE-2018-12067

Summary: CVE-2018-12067 affects Substratum (SUB), an Ethereum ERC20 token. Multiple sources describe a vulnerability in the tradeTrap mechanism: the sell function can overflow due to the multiplication of the input amount and a manipulable variable sellPrice, enabling a potential financial loss t...

CVE-2018-12063

Technical details sufficient to assess impact (affected software, root cause, vulnerable components, or fixes) are not publicly provided in the supplied documents. Monitor for updates from official advisories.

CVE-2018-12070

The CVE-2018-12070 entry concerns the sell function of a smart contract implementation for SEC, an Ethereum ERC20 token. The issue is an overflow in the multiplication of the argument amount and a manipulable variable sellPrice, described as the tradeTrap. This overflow could be exploited to caus...

CVE-2018-12062

The sell function of a smart contract implementation for SwftCoin SWFTC, a tradable Ethereum ERC20 token, allows a potential trap that could be used to cause financial damage to the seller, because of overflow of the multiplication of its argument amount and a manipulable variable sellPrice, aka...

CVE-2018-12062

SwftCoin (SWFTC), an ERC20 token, has a tradeTrap vulnerability in its sell function. The root cause is a multiplication overflow involving the argument amount and a manipulable sellPrice, enabling an attacker to cause financial damage to the seller. The issue is documented across multiple source...

CVE-2018-12070

The sell function of a smart contract implementation for SEC, a tradable Ethereum ERC20 token, allows a potential trap that could be used to cause financial damage to the seller, because of overflow of the multiplication of its argument amount and a manipulable variable sellPrice, aka the...

CVE-2018-12067

The sell function of a smart contract implementation for Substratum SUB, a tradable Ethereum ERC20 token, allows a potential trap that could be used to cause financial damage to the seller, because of overflow of the multiplication of its argument amount and a manipulable variable sellPrice, aka...

CVE-2018-12068

The CVE-2018-12068 issue concerns a math overflow in the sell() function of the Target Coin (TGT) ERC20 contract. The vulnerability arises from overflow in multiplying the argument amount by a manipulable sellPrice, enabling a potential trap (tradeTrap) that could cause financial damage to the se...

CVE-2018-12070: Integer Overflow or Wraparound

The sell function of a smart contract implementation for SEC, a tradable Ethereum ERC20 token, allows a potential trap that could be used to cause financial damage to the seller, because of overflow of the multiplication of its argument amount and a manipulable variable sellPrice, aka the...

CVE-2018-11446: Integer Overflow or Wraparound

The buy function of a smart contract implementation for Gold Reward GRX, an Ethereum ERC20 token, allows a potential trap that could be used to cause financial damage to the buyer because of overflow of the multiplication of its argument amount and a manipulable variable buyPrice, aka the...

CVE-2018-12062: Integer Overflow or Wraparound

The sell function of a smart contract implementation for SwftCoin SWFTC, a tradable Ethereum ERC20 token, allows a potential trap that could be used to cause financial damage to the seller, because of overflow of the multiplication of its argument amount and a manipulable variable sellPrice, aka...

CVE-2018-12067: Integer Overflow or Wraparound

The sell function of a smart contract implementation for Substratum SUB, a tradable Ethereum ERC20 token, allows a potential trap that could be used to cause financial damage to the seller, because of overflow of the multiplication of its argument amount and a manipulable variable sellPrice, aka...

CVE-2018-12063: Integer Overflow or Wraparound

The sell function of a smart contract implementation for Internet Node Token INT, a tradable Ethereum ERC20 token, allows a potential trap that could be used to cause financial damage to the seller, because of overflow of the multiplication of its argument amount and a manipulable variable...

Hardware reverse engineering. A tale from the workbench

In line with our previous work on the Tapplock, I decided to have some fun with some electronic locks and ordered a few from a large retail company. Half of these are currently en route to me, on the slowboat from China, but one arrived early. Before I state, let me just say here that I’m not...

Novell NetWare SMB Transaction Secondary Request DoS - Ver2

A vulnerability exists in Novell NetWare. Successful exploitation of this vulnerability could allow a remote attacker to damage users system...

WANem V2.3 Unauthorized Remote Root Access - Ver2

A vulnerability exists in WANem. Successful exploitation of this vulnerability could allow a remote attacker to damage users system...

Damaging Hard Drives with an Ultrasonic Attack

Playing a sound over the speakers can cause computers to crash and possibly even physically damage the hard drive. Academic paper...

Adobe Acrobat and Reader Client Side Request Injection (APSB18-09: CVE-2018-4995)

A Security Bypass vulnerability exists in Adobe Acrobat and Reader. Successful exploitation of this vulnerability could allow a remote attacker to damage users system...

Adobe Acrobat and Reader Buffer Errors (APSB18-09: CVE-2018-4965)

A vulnerability exists in Adobe Acrobat and Reader. Successful exploitation of this vulnerability could allow a remote attacker to damage users system...