CVE-2018-13224

The sell function of a smart contract implementation for Virtual Energy Units VEU Contract Name: VEUTokenERC20, an Ethereum token, has an integer overflow in which "amount sellPrice" can be zero, consequently reducing a seller's assets...

Integer overflow

The sell function of a smart contract implementation for DestiNeed DSN, an Ethereum token, has an integer overflow in which "amount sellPrice" can be zero, consequently reducing a seller's assets...

Integer overflow

The sell function of a smart contract implementation for TiTok - Ticket Token Contract Name: MyAdvancedToken7, an Ethereum token, has an integer overflow in which "amount sellPrice" can be zero, consequently reducing a seller's assets...

Integer overflow

The sell function of a smart contract implementation for Extreme Coin XT Contract Name: ExtremeToken, an Ethereum token, has an integer overflow in which "amount sellPrice" can be zero, consequently reducing a seller's assets...

CVE-2018-13206

The sell function of a smart contract implementation for ProvidenceCasino PVE, an Ethereum token, has an integer overflow in which "amount sellPrice" can be zero, consequently reducing a seller's assets...

CVE-2018-13214

The CVE-2018-13214 entry concerns GMile, an Ethereum token, where the sell function in its smart contract suffers an integer overflow due to the expression amount * sellPrice, which can evaluate to zero and unintentionally reduce a seller’s assets. This vulnerability is documented across multiple...

CVE-2018-13219

The CVE-2018-13219 entry concerns the sell function of a YourCoin ICO smart contract (Contract Name: ETH033). The vulnerability is an integer overflow where amount * sellPrice can evaluate to zero, potentially reducing a seller’s assets. The description and linked references confirm this in the E...

CVE-2018-13220

CVE-2018-13220 concerns the sell function of a MAVCash Ethereum token smart contract. The vulnerability is an integer overflow in which the expression, amount * sellPrice, can evaluate to zero, thereby unintentionally reducing a seller’s assets. The description and connected documents provide no ...

CVE-2018-13226

The CVE describes an integer overflow in the sell function of the YLCToken smart contract (Ethereum token). The vulnerability arises from the calculation amount * sellPrice, which can evaluate to zero, enabling an attacker to reduce the seller’s assets. Affected component: the sell path in YLCTok...

CVE-2018-13221

The CVE-2018-13221 entry concerns Extreme Token (Extreme Coin XT) on Ethereum, where the sell function of the ExtremeToken contract suffers an integer overflow in the calculation amount * sellPrice, which can evaluate to zero and thereby reduce a seller’s assets. The affected component is the sma...

CVE-2018-13231

The CVE-2018-13231 entry concerns EnterToken (EnterToken ETHERC20-like token) where the sell function in its smart contract has an integer overflow vulnerability: the product of amount and sellPrice can evaluate to zero, potentially reducing a seller’s assets. Documents consistently identify Ente...

CVE-2018-13215

The CVE-2018-13215 entry concerns a smart contract in Sample Token (STK), Contract Name: cashBackMintable. The sell function contains an integer overflow where amount * sellPrice can reach zero, thereby reducing a seller’s assets. This vulnerability affects the Ethereum token implementation as de...

CVE-2018-13206

The CVE-2018-13206 entry concerns ProvidenceCasino (PVE), an Ethereum ERC-20 token. The vulnerability is an integer overflow in the contract’s sell function, where the expression amount * sellPrice can evaluate to zero, allowing an attacker to reduce a seller’s assets. Affected component: the PVE...

CVE-2018-13201

The CVE pertains to TiTok - Ticket Token (Contract Name: MyAdvancedToken7), an Ethereum token, where the sell function has an integer overflow in the calculation amount * sellPrice, which can result in the sale value evaluating to zero and thereby reducing a seller’s assets. This issue is documen...

CVE-2018-13202

The sell function of a smart contract implementation for MyBO, an Ethereum token, has an integer overflow in which "amount sellPrice" can be zero, consequently reducing a seller's assets...

CVE-2018-13201

The sell function of a smart contract implementation for TiTok - Ticket Token Contract Name: MyAdvancedToken7, an Ethereum token, has an integer overflow in which "amount sellPrice" can be zero, consequently reducing a seller's assets...

CVE-2018-13221

The sell function of a smart contract implementation for Extreme Coin XT Contract Name: ExtremeToken, an Ethereum token, has an integer overflow in which "amount sellPrice" can be zero, consequently reducing a seller's assets...

Five Ways Imperva Attack Analytics Helps You Cut Through the Event Noise

The maddening volume of events security teams have to deal with each day is growing at an exponential pace, making it increasingly difficult to effectively analyze and process credible threats. As more organizations move to cloud-based solutions, applications now reside at multiple locations – on...

Exploit Targets Nvidia Tegra-Based Nintendo Systems

UPDATE – Nvidia sought to downplay a vulnerability discovered in its Tegra X1-based systems in a recently published notice. “A researcher indicates that a person with physical access to older Tegra-based processors could connect to the device’s USB port, bypass the secure boot and execute...

Suppressing the Adversary via Threat Hunt Teams

What a brave new world. Global cyber insurgencies continue unabated. Decreasing dwell time is imperative in 2018. In order to achieve this goal, we must embrace the hunt. Every organization should stand up a threat hunt team. The team must be multidisciplinary with experience in e-forensics and...