Exploit for Code Injection in Unicode

This is a PoC exploit for CVE-2021-42574, a vulnerability in the...

MetaMask: Bypass parsing of transaction data, users on the phishing site will transfer/approve ERC20 tokens without being alerted

Vulnerability description not provided...

Malicious Package

Overview mock-solc-0.6 is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this package was...

MAL-2022-6207 Malicious code in solc-0.7.6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8e25ad0ffdd7f47e39cf67577b3ae4ea4e6abac9611809b7289239b55f195e9b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in solc-0.7.6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8e25ad0ffdd7f47e39cf67577b3ae4ea4e6abac9611809b7289239b55f195e9b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-6206 Malicious code in solc-0.4.13 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f485d837345066f125adf36dca7c1ffbcf5f55072852cca5cc1383e1d61b4061 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in solc-0.4.13 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f485d837345066f125adf36dca7c1ffbcf5f55072852cca5cc1383e1d61b4061 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-4659 Malicious code in mock-solc-0.6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 252116288f46e50fdc890ac7683a16796ff2fdd325109640c5d532e01cc615dc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in mock-solc-0.6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 252116288f46e50fdc890ac7683a16796ff2fdd325109640c5d532e01cc615dc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

GHSA-FG47-3C2X-M2WR TimelockController vulnerability in OpenZeppelin Contracts

Impact A vulnerability in TimelockController allowed an actor with the executor role to take immediate control of the timelock, by resetting the delay to 0 and escalating privileges, thus gaining unrestricted access to assets held in the contract. Instances with the executor role set to "open"...

Slither v0.6.7 - Static Analyzer For Solidity

Slither is a Solidity static analysis framework written in Python 3. It runs a suite of vulnerability detectors, prints visual information about contract details, and provides an API to easily write custom analyses. Slither enables developers to find vulnerabilities, enhance their code...

Slither - Static Analyzer For Solidity

Slither is a Solidity static analysis framework written in Python 3. It runs a suite of vulnerability detectors, prints visual information about contract details, and provides an API to easily write custom analyses. Slither enables developers to find vulnerabilities, enhance their code...