CVE-2018-13128

Etherty Token ETY is a smart contract running on Ethereum. The mint function has an integer overflow that allows minted tokens to be arbitrarily retrieved by the contract owner...

Etherty Token (ETY) Integer Overflow Vulnerability

Etherty Token ETY is a smart contract that runs on Ether. An integer overflow vulnerability exists in the mint function in Etherty Token ETY. An attacker could use this vulnerability to arbitrarily retrieve a minted token...

CVE-2018-13132

Spadeico is a smart contract running on Ethereum. The mint function has an integer overflow that allows minted tokens to be arbitrarily retrieved by the contract owner...

CVE-2018-13126

CVE-2018-13126 concerns the MoxyOnePresale Ethereum smart contract. The connected documents describe an integer overflow in the contract’s mint function, which would allow the contract owner to arbitrarily retrieve minted tokens. The material does not provide version numbers, precise affected fil...

CVE-2018-13132

CVE-2018-13132 concerns the Spadeico Ethereum smart contract, where the mint function has an integer overflow that can let the contract owner arbitrarily retrieve minted tokens. The vulnerability is described across multiple feeds as affecting the Spadeico mint path, enabling token extraction by ...

CVE-2018-13128

Etherty Token ETY is a smart contract running on Ethereum. The mint function has an integer overflow that allows minted tokens to be arbitrarily retrieved by the contract owner...

MoxyOnePresale Integer Overflow Vulnerability

MoxyOnePresale is a smart contract that runs on Ether. An integer overflow vulnerability exists in the mint function in MoxyOnePresale. An attacker could use this vulnerability to arbitrarily retrieve casting tokens...

CVE-2018-13131

SpadePreSale is a smart contract running on Ethereum. The mint function has an integer overflow that allows minted tokens to be arbitrarily retrieved by the contract owner...

CVE-2018-11335

GVToken Genesis Vision GVT is a smart contract running on Ethereum. The mint function has an integer overflow that allows minted tokens to be arbitrarily retrieved by the contract owner...

GVToken Genesis Vision (GVT) Integer Overflow Vulnerability

GVToken Genesis Vision GVT is a smart contract that runs on Ether. An integer overflow vulnerability exists in the mint function in GVToken Genesis Vision GVT. The vulnerability can be exploited by the contract owner to arbitrarily retrieve a minted token...

CVE-2018-11335

CVE-2018-11335 describes a vulnerability in GVToken Genesis Vision (GVT), a smart contract on Ethereum. The mint function contains an integer overflow that allows the contract owner to arbitrarily retrieve minted tokens. The issue is rooted in arithmetic handling within mint, enabling the owner t...

CVE-2018-11429

CVE-2018-11429 affects the ATLANT (ATL) smart contract running on Ethereum. The vulnerability is an integer overflow in the mint function that allows the contract owner to arbitrarily retrieve minted tokens. Affected component: the mint function of ATLANT (ATL); root cause: overflow in integer ar...

Spadeico Integer Overflow Vulnerability

Spadeico is a smart contract that runs on Ether. An integer overflow vulnerability exists in the mint function in Spadeico. An attacker could use this vulnerability to arbitrarily retrieve casting tokens...

CVE-2018-13126

MoxyOnePresale is a smart contract running on Ethereum. The mint function has an integer overflow that allows minted tokens to be arbitrarily retrieved by the contract owner...

Xxe

Schneider Electric SoMachine Basic prior to v1.6 SP1 suffers from an XML External Entity XXE vulnerability using the DTD parameter entities technique resulting in disclosure and retrieval of arbitrary data on the affected node via out-of-band OOB attack. The vulnerability is triggered when input...

CVE-2018-7783

Schneider Electric SoMachine Basic prior to v1.6 SP1 suffers from an XML External Entity XXE vulnerability using the DTD parameter entities technique resulting in disclosure and retrieval of arbitrary data on the affected node via out-of-band OOB attack. The vulnerability is triggered when input...

KYOCERA Multi-Set Template Editor 3.4 Out-Of-Band XML External Entity Injection

Summary KYOCERA Net Admin is Kyocera's unified device management software that uses a web-based platform to give network administrators easy and uncomplicated control to handle a fleet for up to 10,000 devices. Tasks that used to require multiple programs or walking to each printer can now be...

Pure python post-exploitation RAT for macOS & OSX: EvilOSX

A pure python, post-exploitation, RAT Remote Administration Tool for macOS / OSX. Features Emulate a simple terminal instance Undetected by anti-virus OpenSSL AES-256 encrypted payloads, HTTPS communication Multi-threaded No client dependencies pure python Persistent Simple extendable module syst...

Security Bulletin: IBM Security Proventia Network Active Bypass is affected by vulnerabilities in OpenSSL (CVE-2014-0160 and CVE-2014-0076)

Summary Security vulnerabilities have been discovered in OpenSSL. Vulnerability Details CVE-ID: CVE-2014-0160 DESCRIPTION: OpenSSL could allow a remote attacker to obtain sensitive information, caused by an error in the TLS/DTLS heartbeat functionality. An attacker could exploit this vulnerabilit...

Security Bulletin: IBM Tealeaf Customer Experience is affected by a security vulnerability (CVE-2015-4989)

Summary The IBM Tealeaf Customer Experience portal is affected by a security vulnerability that might allow unauthorized access to images of charts generated by other users. Vulnerability Details CVEID: CVE-2015-4989 DESCRIPTION: The IBM Tealeaf Customer Experience portal allows an attacker with...