CVE-2019-15080

An issue was discovered in a smart contract implementation for MORPH Token through 2019-06-05, an Ethereum token. A typo in the constructor of the Owned contract which is inherited by MORPH Token allows attackers to acquire contract ownership. A new owner can subsequently obtain MORPH Tokens for...

CVE-2019-15080

An issue was discovered in a smart contract implementation for MORPH Token through 2019-06-05, an Ethereum token. A typo in the constructor of the Owned contract which is inherited by MORPH Token allows attackers to acquire contract ownership. A new owner can subsequently obtain MORPH Tokens for...

CVE-2019-15078

An issue was discovered in a smart contract implementation for AIRDROPX BORN through 2019-05-29, an Ethereum token. The name of the constructor has a typo wrong case: XBornID versus XBORNID that allows an attacker to change the owner of the contract and obtain cryptocurrency for free...

CVE-2019-15079

A typo exists in the constructor of a smart contract implementation for EAI through 2019-06-05, an Ethereum token. This vulnerability could be used by an attacker to acquire EAI tokens for free...

Double free

A typo exists in the constructor of a smart contract implementation for EAI through 2019-06-05, an Ethereum token. This vulnerability could be used by an attacker to acquire EAI tokens for free...

Code injection

An issue was discovered in a smart contract implementation for MORPH Token through 2019-06-05, an Ethereum token. A typo in the constructor of the Owned contract which is inherited by MORPH Token allows attackers to acquire contract ownership. A new owner can subsequently obtain MORPH Tokens for...

Design/Logic Flaw

An issue was discovered in a smart contract implementation for AIRDROPX BORN through 2019-05-29, an Ethereum token. The name of the constructor has a typo wrong case: XBornID versus XBORNID that allows an attacker to change the owner of the contract and obtain cryptocurrency for free...

CVE-2019-15080

An issue was discovered in a smart contract implementation for MORPH Token through 2019-06-05, an Ethereum token. A typo in the constructor of the Owned contract which is inherited by MORPH Token allows attackers to acquire contract ownership. A new owner can subsequently obtain MORPH Tokens for...

CVE-2019-15080

The CVE describes a vulnerability in MORPH Token (Ethereum) where a typo in the constructor of the Owned contract, inherited by MORPH Token, allows an attacker to acquire contract ownership. This new owner can obtain MORPH Tokens for free and can trigger a DoS attack. Details are limited to the d...

CVE-2019-15079

Technical details (affected product, vulnerable component, root cause specifics, impact, or patch information) are not provided in the supplied documents. Monitor for updates.

CVE-2019-15078

The CVE-2019-15078 issue affects the AIRDROPX BORN Ethereum token contract (through 2019-05-29). The root cause is a typo in the contract’s constructor name (XBornID vs XBORNID), which allows an attacker to take ownership of the contract and drain cryptocurrency. Documents consistently describe t...

CVE-2019-15078

An issue was discovered in a smart contract implementation for AIRDROPX BORN through 2019-05-29, an Ethereum token. The name of the constructor has a typo wrong case: XBornID versus XBORNID that allows an attacker to change the owner of the contract and obtain cryptocurrency for free...

CVE-2017-14451

An exploitable out-of-bounds read vulnerability exists in libevm Ethereum Virtual Machine of CPP-Ethereum. A specially crafted smart contract code can cause an out-of-bounds read which can subsequently trigger an out-of-bounds write resulting in remote code execution. An attacker can create/send...

Out-of-bounds

An exploitable out-of-bounds read vulnerability exists in libevm Ethereum Virtual Machine of CPP-Ethereum. A specially crafted smart contract code can cause an out-of-bounds read which can subsequently trigger an out-of-bounds write resulting in remote code execution. An attacker can create/send...

CVE-2017-14451

An exploitable out-of-bounds read vulnerability exists in libevm Ethereum Virtual Machine of CPP-Ethereum. A specially crafted smart contract code can cause an out-of-bounds read which can subsequently trigger an out-of-bounds write resulting in remote code execution. An attacker can create/send...

CVE-2017-14451

CVE-2017-14451 is an exploitable out-of-bounds read in libevm (CPP‑Ethereum). The root cause, per TALOS/Red Hat/NVD details, is the pow2N function returning exp[_n] without bounds checks, with exp defined as size 6. The _type parameter (0–255) can drive laneCount/laneWidth to values beyond the ar...

ElevateCoin Digital Error Vulnerability

ElevateCoin is an ethereum-based digital currency. An integer overflow vulnerability exists in the 'mintToken' function in ElevateCoin's smart contract implementation. An attacker could use this vulnerability to set the balance of any user to an arbitrary value...

PornCoin Digital Error Vulnerability

PornCoin PRNC is an ethereum-based digital currency. An integer overflow vulnerability exists in the 'mintToken' function in PRNC's smart contract implementation. An attacker can exploit the vulnerability to set the balance of any user to an arbitrary value...

Flow Number Error Vulnerability

Flow is an ethereum-based digital currency. An integer overflow vulnerability exists in the 'mintToken' function in Flow's smart contract implementation. An attacker can exploit this vulnerability to set the balance of any user to an arbitrary value...

PinkyToken Number Error Vulnerability

PinkyToken is an ethereum-based digital currency. An integer overflow vulnerability exists in the 'mintToken' function in PinkyToken's smart contract implementation. An attacker can exploit this vulnerability to set the balance of any user to an arbitrary value...