https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-11-06T22:48:24.519873+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/fkie_cve-2018-12703 fkie_cve-2018-12703 2026-11-06T22:48:24.521750+00:00

The approveAndCallcode function of a smart contract implementation for Block 18 (18T), an tradable Ethereum ERC20 token, allows attackers to steal assets (e.g., transfer the contract's balances into their account) because the callcode (i.e., _spender.call(_extraData)) is not verified, aka the "evilReflex" issue. NOTE: a PeckShield disclosure states "some researchers have independently discussed the mechanism of such vulnerability."

 https://db.gcve.eu/vuln/ghsa-cq3j-7hw5-fcwp GHSA-cq3j-7hw5-fcwp 2026-11-06T22:48:24.521816+00:00

The approveAndCallcode function of a smart contract implementation for Block 18 (18T), an tradable Ethereum ERC20 token, allows attackers to steal assets (e.g., transfer the contract's balances into their account) because the callcode (i.e., _spender.call(_extraData)) is not verified, aka the "evilReflex" issue. NOTE: a PeckShield disclosure states "some researchers have independently discussed the mechanism of such vulnerability."

 https://db.gcve.eu/vuln/gsd-2018-12703 gsd-2018-12703 2026-11-06T22:48:24.521838+00:00 gsd-2018-12703