CVE-2021-24679

The Bitcoin / AltCoin Payment Gateway for WooCommerce WordPress plugin before 1.6.1 does not escape the 's' GET parameter before outputting back in the All Masking Rules page, leading to a Reflected Cross-Site Scripting issue...

PT-2021-16190

Name of the Vulnerable Software and Affected Versions Bitcoin / AltCoin Payment Gateway for WooCommerce WordPress plugin versions prior to 1.6.1 Description The issue is related to a Reflected Cross-Site Scripting problem. It occurs because the s GET parameter is not properly escaped before being...

CVE-2021-24679: Improper Neutralization of Input During Web Page Generation

The Bitcoin / AltCoin Payment Gateway for WooCommerce WordPress plugin before 1.6.1 does not escape the 's' GET parameter before outputting back in the All Masking Rules page, leading to a Reflected Cross-Site Scripting issue...

bitcoin-core:blockundo_deserialize: Use-of-uninitialized-value in secp256k1_ec_pubkey_parse

Detailed Report: https://oss-fuzz.com/testcase?key=5037486817017856 Project: bitcoin-core Fuzzing Engine: libFuzzer Fuzz Target: blockundodeserialize Job Type: libfuzzermsanbitcoin-core Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: secp256k1ecpubkeyparse...

bitcoin-core:transaction: Use-of-uninitialized-value in ExtractDestination

Detailed Report: https://oss-fuzz.com/testcase?key=5326834959515648 Project: bitcoin-core Fuzzing Engine: libFuzzer Fuzz Target: transaction Job Type: libfuzzermsanbitcoin-core Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: ExtractDestination...

bitcoin-core:utxo_snapshot: Use-of-uninitialized-value in crc32c::ExtendSse42

Project: https://github.com/bitcoin/bitcoin.git Detailed Report: https://oss-fuzz.com/testcase?key=4804694678044672 Project: bitcoin-core Fuzzing Engine: libFuzzer Fuzz Target: utxosnapshot Job Type: libfuzzermsanbitcoin-core Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address...

btcpay server 跨站脚本漏洞

btcpay server is a free and open source bitcoin payment processor that allows you to accept bitcoins without fees or intermediaries. A cross-site scripting vulnerability exists in btcpay server. The vulnerability stems from the susceptibility to incorrect input neutralization "cross-site scriptin...

bitcoin-core:script: Use-of-uninitialized-value in script_fuzz_target

Project: https://github.com/bitcoin/bitcoin.git Detailed Report: https://oss-fuzz.com/testcase?key=5425545152692224 Project: bitcoin-core Fuzzing Engine: libFuzzer Fuzz Target: script Job Type: libfuzzermsanbitcoin-core Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Cras...

bitcoin-core:rpc: Use-of-uninitialized-value in CPubKey::IsFullyValid

Project: https://github.com/bitcoin/bitcoin.git Detailed Report: https://oss-fuzz.com/testcase?key=5901980472573952 Project: bitcoin-core Fuzzing Engine: libFuzzer Fuzz Target: rpc Job Type: libfuzzermsanbitcoin-core Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash...

bitcoin-core:transaction: Use-of-uninitialized-value in ExtractDestinations

Project: https://github.com/bitcoin/bitcoin.git Detailed Report: https://oss-fuzz.com/testcase?key=4685463735107584 Project: bitcoin-core Fuzzing Engine: libFuzzer Fuzz Target: transaction Job Type: libfuzzermsanbitcoin-core Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address:...

bitcoin-core:psbt: Use-of-uninitialized-value in CPubKey::GetID

Detailed Report: https://oss-fuzz.com/testcase?key=5401747779092480 Project: bitcoin-core Fuzzing Engine: libFuzzer Fuzz Target: psbt Job Type: libfuzzermsanbitcoin-core Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: CPubKey::GetID CreateSig SignStep...

bitcoin-core:txoutcompressor_deserialize: Use-of-uninitialized-value in CPubKey::Decompress

Project: https://github.com/bitcoin/bitcoin.git Detailed Report: https://oss-fuzz.com/testcase?key=6088511858540544 Project: bitcoin-core Fuzzing Engine: libFuzzer Fuzz Target: txoutcompressordeserialize Job Type: libfuzzermsanbitcoin-core Platform Id: linux Crash Type: Use-of-uninitialized-value...

bitcoin-core:descriptor_parse: Use-of-uninitialized-value in CPubKey::IsFullyValid

Project: https://github.com/bitcoin/bitcoin.git Detailed Report: https://oss-fuzz.com/testcase?key=4728082376818688 Project: bitcoin-core Fuzzing Engine: libFuzzer Fuzz Target: descriptorparse Job Type: libfuzzermsanbitcoin-core Platform Id: linux Crash Type: Use-of-uninitialized-value Crash...

bitcoin-core:script_bitcoin_consensus: Use-of-uninitialized-value in GenericTransactionSignatureChecker<CTransaction>::CheckECDSASignature

Project: https://github.com/bitcoin/bitcoin.git Detailed Report: https://oss-fuzz.com/testcase?key=5869156352786432 Project: bitcoin-core Fuzzing Engine: libFuzzer Fuzz Target: scriptbitcoinconsensus Job Type: libfuzzermsanbitcoin-core Platform Id: linux Crash Type: Use-of-uninitialized-value Cra...

The vulnerability of the PreChecks functionality in the standard Bitcoin Core implementation, related to improper authentication, allows a violator to compromise data integrity and cause service failures.

The vulnerability of the PreChecks functionality in the standard Bitcoin Bitcoin Core implementation is related to the incorrect replacement of the child transaction. Exploiting this vulnerability can allow an attacker to compromise data integrity and also cause service failures...

Financial Cybercrime: Following Cryptocurrency via Public Ledgers

This is Part II of a two-part series on how cybercrooks embrace and use cryptocurrency. To read Part I, please click here. While Bitcoin transactions are anonymous, it’s possible to follow the money through public ledgers to see what those transactions actually are and how they flow. This allows ...

bitcoin-core:key: Use-of-uninitialized-value in key_fuzz_target

Project: https://github.com/bitcoin/bitcoin.git Detailed Report: https://oss-fuzz.com/testcase?key=5734826813030400 Project: bitcoin-core Fuzzing Engine: libFuzzer Fuzz Target: key Job Type: libfuzzermsanbitcoin-core Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash...

Cross-site Scripting (XSS) - Stored in btcpayserver/btcpayserver

✍️ Description Accept Bitcoin payments. Free, open-source & self-hosted, Bitcoin payment processor this package is vulnerable for xss 🕵️‍♂️ Proof of Concept 💥 Impact This vulnerability is capable of xss...

Cross-site Scripting (XSS) - Stored in btcpayserver/btcpayserver

✍️ Description Accept Bitcoin payments. Free, open-source & self-hosted, Bitcoin payment processor this package is vulnerable for xss 🕵️‍♂️ Proof of Concept 💥 Impact This vulnerability is capable of stored XSS...

Bitcoin / AltCoin Payment Gateway for WooCommerce < 1.6.1 - Reflected Cross-Site Scripting

The plugin does not escape the 's' GET parameter before outputting back in the All Masking Rules page, leading to a Reflected Cross-Site Scripting issue PoC https://example.com/wp-admin/admin.php?page=cs-woo-altcoin-all-coins="...