https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 25 Oct 2026 02:29:43 +0000 https://cve.radiocsirt.org/vuln/cve-2018-12702 <p>The approveAndCallcode function of a smart contract implementation for Globalvillage ecosystem (GVE), an Ethereum ERC20 token, allows attackers to steal assets (e.g., transfer the contract&#39;s balances into their account) because the callcode (i.e., _spender.call(_extraData)) is not verified, aka the &#34;evilReflex&#34; issue. NOTE: a PeckShield disclosure states &#34;some researchers have independently discussed the mechanism of such vulnerability.&#34;</p> <p>The approveAndCallcode function of a smart contract implementation for Globalvillage ecosystem (GVE), an Ethereum ERC20 token, allows attackers to steal assets (e.g., transfer the contract&#39;s balances into their account) because the callcode (i.e., _spender.call(_extraData)) is not verified, aka the &#34;evilReflex&#34; issue. NOTE: a PeckShield disclosure states &#34;some researchers have independently discussed the mechanism of such vulnerability.&#34;</p> https://cve.radiocsirt.org/vuln/cve-2018-12702