Lucene search
K

7 matches found

Prion
Prion
added 2018/07/09 6:29 a.m.8 views

Integer overflow

The mintToken function of a smart contract implementation for FuturXe, an Ethereum token, has an integer overflow that allows the owner of the contract to set the balance of an arbitrary user to any value...

5CVSS7.7AI score0.00237EPSS
Exploits1References2
CVE
CVE
added 2018/07/09 6:0 a.m.38 views

CVE-2018-13718

CVE-2018-13718 concerns the FuturXe Ethereum token where the mintToken function has an integer overflow that lets the contract owner set an arbitrary user’s balance. This is a developer-facing vulnerability in the smart contract implementation, with the root cause described as an integer overflow...

7.5CVSS7.7AI score0.00237EPSS
Exploits1References2Affected Software1
seebug.org
seebug.org
added 2018/07/09 12:0 a.m.42 views

Bugged Smart Contract FuturXE: How Could Someone Mess up with Boolean? (CVE-2018–12025)

Recently SECBIT team found a serious bug about the if condition in a deployed ERC20 smart contract called FuturXE FXE and here is the bugged part: //Function for transer the coin from one address to another function transferFromaddress from, address to, uint value returns bool success //checking...

1.7AI score0.00517EPSS
Exploits1
CNVD
CNVD
added 2018/06/13 12:0 a.m.2 views

FuturXE has an unspecified vulnerability

FuturXE FXE is an ethereum-based virtual currency. A security vulnerability exists in the 'transferFrom' function of the smart contract implementation in FXE, which stems from a logic error in the program. An attacker could exploit the vulnerability to make an unauthorized transfer of digital...

7.5CVSS7.4AI score0.00517EPSS
Exploits1References1
Prion
Prion
added 2018/06/11 10:29 a.m.9 views

Input validation

The transferFrom function of a smart contract implementation for FuturXE FXE, an Ethereum ERC20 token, allows attackers to accomplish an unauthorized transfer of digital assets because of a logic error. The developer messed up with the boolean judgment - if the input value is smaller than or equa...

5CVSS7.5AI score0.00517EPSS
Exploits1References1
Cvelist
Cvelist
added 2018/06/11 10:0 a.m.12 views

CVE-2018-12025

The transferFrom function of a smart contract implementation for FuturXE FXE, an Ethereum ERC20 token, allows attackers to accomplish an unauthorized transfer of digital assets because of a logic error. The developer messed up with the boolean judgment - if the input value is smaller than or equa...

7.5AI score0.00517EPSS
Exploits1References1
CVE
CVE
added 2018/06/11 10:0 a.m.61 views

CVE-2018-12025

The CVE-2018-12025 entry concerns FuturXE (FXE) ERC20 token. Connected sources provide concrete details: transferFrom is vulnerable due to a logic error in the allowance check—the condition if (allowed[from][msg.sender] >= value) return false misorders the logic, allowing an underflow on allow...

7.5CVSS7.5AI score0.00517EPSS
Exploits1References1Affected Software1
Rows per page
Query Builder