CVE-2019-15078: Xbornid

High severity, CVSS 7.5. EPSS: 1.2% chance of exploitation in the next 30 days.

An issue was discovered in a smart contract implementation for AIRDROPX BORN through 2019-05-29, an Ethereum token. The name of the constructor has a typo (wrong case: XBornID versus XBORNID) that allows an attacker to change the owner of the contract and obtain cryptocurrency for free.

Affected products

• Xbornid Xbornid: up to and including 2019-05-29

Published 2020-12-30. Last modified 2026-06-17.