PT-2018-10996

Name of the Vulnerable Software and Affected Versions Target Coin TGT affected versions not specified Description The issue concerns the mintToken function of a smart contract implementation, which lacks a period constraint. This allows the owner to arbitrarily increase the total supply of digita...

CVE-2018-12084: Undefined Security Weakness

The mintToken function of a smart contract implementation for BitAsean BAS, a tradable Ethereum ERC20 token, has no period constraint, which allows the owner to increase the total supply of the digital assets arbitrarily so as to make profits, aka the "tradeTrap" issue...

CVE-2018-12079: Undefined Security Weakness

The mintToken function of a smart contract implementation for Substratum SUB, a tradable Ethereum ERC20 token, has no period constraint, which allows the owner to increase the total supply of the digital assets arbitrarily so as to make profits, aka the "tradeTrap" issue...

Security Bulletin: TSM Server CPU Utilization (CVE-2014-0963)

Summary The IBM Tivoli Storage Manager TSM server and storage agent are affected by a problem related to the SSL implementation which, under very specific conditions, can cause CPU utilization to rapidly increase. Vulnerability Details CVE ID: CVE-2014-0963 DESCRIPTION: TSM server and storage age...

A week in security (May 28 – June 3)

Last week on Labs, we talked about the significance of SEO poisoning in the world of search marketing, blackmail attempts against financial institutions in Canada, voice command flaws in smart assistants, survey and potential phishing scams on Instagram, and the latest changes in Office 365. We...

SUSE-SU-2018:1486-1 Security update for HA kernel modules

This update provides rebuilds of HA kernel modules with retpoline support to mitigate Spectre Variant 2 CVE-2017-5715 bsc1068032 cluster fs also received these bugfixes: - backport patch to fix dlmglue false deadlock bnc962257 - Fix for online increase of filesystem in kernel mode fails bsc936517...

Hexagon '_transfer' function integer overflow vulnerability

Hexagon HXG is an Ether-based ERC20 token. An integer overflow vulnerability exists in the Hexagon 'transfer' function. An attacker can exploit this vulnerability to unauthorized increase of data assets by providing the 'to' and 'value' parameters...

CVE-2018-11239

An integer overflow in the transfer function of a smart contract implementation for Hexagon HXG, an Ethereum ERC20 token, allows attackers to accomplish an unauthorized increase of digital assets by providing a to argument in conjunction with a large value argument, as exploited in the wild in Ma...

Integer overflow

An integer overflow in the transfer function of a smart contract implementation for Hexagon HXG, an Ethereum ERC20 token, allows attackers to accomplish an unauthorized increase of digital assets by providing a to argument in conjunction with a large value argument, as exploited in the wild in Ma...

CVE-2018-11239

An integer overflow in the transfer function of a smart contract implementation for Hexagon HXG, an Ethereum ERC20 token, allows attackers to accomplish an unauthorized increase of digital assets by providing a to argument in conjunction with a large value argument, as exploited in the wild in Ma...

CVE-2018-11239

The Hexagon (HXG) Ethereum ERC20 token is vulnerable to an integer overflow in its _transfer function, known as the "burnOverflow" issue. By providing a large _value argument (e.g., 0xffff...fffe) in conjunction with a _to argument, an attacker can trigger an overflow when the contract calculates...

PT-2018-10417

Name of the Vulnerable Software and Affected Versions Hexagon HXG affected versions not specified Description The issue is related to an integer overflow in the transfer function of a smart contract implementation, which allows attackers to increase digital assets unauthorized by providing a to...

CVE-2018-11239: Integer Overflow or Wraparound

An integer overflow in the transfer function of a smart contract implementation for Hexagon HXG, an Ethereum ERC20 token, allows attackers to accomplish an unauthorized increase of digital assets by providing a to argument in conjunction with a large value argument, as exploited in the wild in Ma...

VulnCheck KEV: CVE-2018-11239

An integer overflow in the transfer function of a smart contract implementation for Hexagon HXG, an Ethereum ERC20 token, allows attackers to accomplish an unauthorized increase of digital assets by providing a to argument in conjunction with a large value argument, as exploited in the wild in Ma...

KoreaShow Integer Overflow Vulnerability

KoreaShow is a system for trading cryptocurrencies. An integer overflow vulnerability exists in the 'transferMulti' function of the smart contract implementation in KoreaShow. An attacker can exploit this vulnerability to increase digital assets with the help of the 'value' parameter...

Social Chain Integer Overflow Vulnerability

Social Chain SCA is a system for cryptocurrency trading. An integer overflow vulnerability exists in the 'transferMulti' function in SCA. An attacker can exploit the vulnerability to increase digital assets...

Integer overflow

An integer overflow in the transferMulti function of a smart contract implementation for KoreaShow, an Ethereum ERC20 token, allows attackers to accomplish an unauthorized increase of digital assets via crafted value parameters...

Integer overflow

An integer overflow in the transferMulti function of a smart contract implementation for Social Chain SCA, an Ethereum ERC20 token, allows attackers to accomplish an unauthorized increase of digital assets, aka the "multiOverflow" issue...

CVE-2018-10973

An integer overflow in the transferMulti function of a smart contract implementation for KoreaShow, an Ethereum ERC20 token, allows attackers to accomplish an unauthorized increase of digital assets via crafted value parameters...

CVE-2018-10706

An integer overflow in the transferMulti function of a smart contract implementation for Social Chain SCA, an Ethereum ERC20 token, allows attackers to accomplish an unauthorized increase of digital assets, aka the "multiOverflow" issue...