14122 matches found
GROWCHAIN Number Error Vulnerability
GROWCHAIN GROW is an ethereum-based digital currency.An integer overflow vulnerability exists in the 'sell' function in GROW's smart contract implementation. A remote attacker could exploit this vulnerability to set a user's balance to an arbitrary value...
Business Alliance Financial Circle has a logic flaw vulnerability
Business Alliance Financial Circle BAFC is a cryptocurrency.A security vulnerability exists in the 'UBSexToken' function in BAFC's smart contract implementation, which stems from the fact that the function is publicly available and does not check the identity of the caller. The vulnerability can ...
SunContract Digital Error Vulnerability
SunContract is a digital currency.An integer overflow vulnerability exists in the 'mintToken' function in SunContract's smart contract. A remote attacker can exploit this vulnerability to set the balance of any user to an arbitrary value...
Logic Flaw Vulnerability in HashHeroes Tiles
A security vulnerability exists in the 'determineWinner' function in the smart contract implementation of HashHeroes Tiles, an ethereum-based guessing game. An attacker could exploit this vulnerability to control the awarding of prizes by being the last user to make a purchase...
DDQ Authorization Issues Vulnerability
DDQ is a cryptocurrency.A security vulnerability exists in the 'owned' function of DDQ's smart contract implementation, which stems from the fact that the function does not check the identity of the caller. An attacker could use the vulnerability to modify the owner of a smart contract...
Primeo has a flawed logic vulnerability
Primeo PEO is an ethereum-based digital currency.A security vulnerability exists in the 'doAirdrop' function in the smart contract implementation of Primeo PEO. An attacker could exploit the vulnerability to issue any number of virtual currencies...
Coinlancer has a flawed logic vulnerability
Coinlancer CL is an ethereum-based digital currency.A security vulnerability exists in the onlyOwner modifier of CL's smart contract implementation, which stems from the program not correctly comparing msg.sender and owner.An attacker could exploit this vulnerability to execute arbitrary code...
JavaSwapTest Number Error Vulnerability
JavaSwapTest JST is an ethereum-based digital currency.An integer overflow vulnerability exists in the 'mintToken' function of JST's smart contract implementation. A remote attacker could exploit this vulnerability to set a user's balance to an arbitrary value...
NewIntelTechMedia License Issues Vulnerabilities
NewIntelTechMedia NETM is a cryptocurrency.A security vulnerability exists in the 'NETM' function in NETM's smart contract implementation, which stems from the fact that the function does not check the identity of the caller. An attacker could use the vulnerability to modify the owner of the smar...
PFGc Number Error Vulnerability
PFGc is an ethereum-based digital currency.An integer overflow vulnerability exists in the smart contract implementation of PFGc in the 'transfer', 'transferFrom', and 'mint ' functions in the PFGc smart contract implementation suffer from an integer overflow vulnerability. An attacker could...
BOMBBA Authorization Issue Vulnerability
BOMBBA BOMB is a cryptocurrency.A security vulnerability exists in the 'quaker' function of BOMB's smart contract implementation, which stems from the fact that the function does not check the identity of the caller. An attacker could use the vulnerability to modify the owner of the smart contrac...
CryptoBotsBattle Digital Error Vulnerability
CryptoBotsBattle CBTB is an ethereum-based digital currency.An integer overflow vulnerability exists in the 'batchTransfer' function of CBTB's smart contract implementation. An attacker could exploit the vulnerability to create an arbitrary number of tokens for any user...
S. Siedle & Soehne SG 150-0 Smart Gateway Competitive Conditions Issue Vulnerability
S.Siedle & Soehne SG 150-0 Smart Gateway is a home smart gateway product from S.Siedle & Soehne, Germany. A security vulnerability exists in the S.Siedle & Soehne SG 150-0 Smart Gateway versions prior to 1.2.4. The vulnerability can be exploited by an attacker to gain root access to the gateway...
smart-lighting.com.tw Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-1157483 Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website...
CVE-2020-9474
The S. Siedle & Soehne SG 150-0 Smart Gateway before 1.2.4 allows remote code execution via the backup functionality in the web frontend. By using an exploit chain, an attacker with access to the network can get root access on the gateway...
CVE-2020-9475
The S. Siedle & Soehne SG 150-0 Smart Gateway before 1.2.4 allows local privilege escalation via a race condition in logrotate. By using an exploit chain, an attacker with access to the network can get root access on the gateway...
CVE-2020-9475
The S. Siedle & Soehne SG 150-0 Smart Gateway before 1.2.4 allows local privilege escalation via a race condition in logrotate. By using an exploit chain, an attacker with access to the network can get root access on the gateway...
Race condition
The S. Siedle & Soehne SG 150-0 Smart Gateway before 1.2.4 allows local privilege escalation via a race condition in logrotate. By using an exploit chain, an attacker with access to the network can get root access on the gateway...
Remote code execution
The S. Siedle & Soehne SG 150-0 Smart Gateway before 1.2.4 allows remote code execution via the backup functionality in the web frontend. By using an exploit chain, an attacker with access to the network can get root access on the gateway...
CVE-2020-9475
The S. Siedle & Soehne SG 150-0 Smart Gateway (versions before 1.2.4) is affected by a local privilege escalation due to a race condition in logrotate. An attacker with network access can chain exploits to gain root access on the gateway. The issue is documented across multiple sources (e.g., CVE...