CVE-2018-13126

CVE-2018-13126 concerns the MoxyOnePresale Ethereum smart contract. The connected documents describe an integer overflow in the contract’s mint function, which would allow the contract owner to arbitrarily retrieve minted tokens. The material does not provide version numbers, precise affected fil...

CVE-2018-0114

A vulnerability in the Cisco node-jose open source library before 0.11.0 could allow an unauthenticated, remote attacker to re-sign tokens using a key that is embedded within the token. The vulnerability is due to node-jose following the JSON Web Signature JWS standard for JSON Web Tokens JWTs...