CVE-2026-35448 WWBN AVideo Provides Unauthenticated Access to Payment Order Data via BlockonomicsYPT check.php

WWBN AVideo is an open source video platform. In versions 26.0 and prior, the BlockonomicsYPT plugin's check.php endpoint returns payment order data for any Bitcoin address without requiring authentication. The endpoint was designed as an AJAX polling helper for the authenticated invoice.php page...

CVE-2026-35448

WWBN AVideo is an open source video platform. In versions 26.0 and prior, the BlockonomicsYPT plugin's check.php endpoint returns payment order data for any Bitcoin address without requiring authentication. The endpoint was designed as an AJAX polling helper for the authenticated invoice.php page...

CVE-2026-35448

CVE-2026-35448 affects WWBN AVideo prior to version 27.x (plugin: BlockonomicsYPT/check.php). The endpoint accepts a Bitcoin address via GET and returns the corresponding payment order data without any authentication or access control. This enables unauthenticated disclosure of sensitive fields s...

Missing Authorization

Overview wwbn/avideo is an Audio and Video Platform or simply "A Video Platform". Affected versions of this package are vulnerable to Missing Authorization via the check.php process. An attacker can access sensitive payment order data, including user IDs, transaction amounts, and status, by sendi...

GHSA-3V7M-QG4X-58H9 AVideo: Unauthenticated Access to Payment Order Data via BlockonomicsYPT check.php

Summary The BlockonomicsYPT plugin's check.php endpoint returns payment order data for any Bitcoin address without requiring authentication. The endpoint was designed as an AJAX polling helper for the authenticated invoice.php page, but it performs no access control checks of its own. Since Bitco...

AVideo: Unauthenticated Access to Payment Order Data via BlockonomicsYPT check.php

Summary The BlockonomicsYPT plugin's check.php endpoint returns payment order data for any Bitcoin address without requiring authentication. The endpoint was designed as an AJAX polling helper for the authenticated invoice.php page, but it performs no access control checks of its own. Since Bitco...

PT-2026-30333

Name of the Vulnerable Software and Affected Versions AVideo versions 26.0 and prior Description The BlockonomicsYPT plugin's check.php endpoint returns payment order data for any Bitcoin address without authentication. The endpoint was intended as an AJAX polling helper for the authenticated...

CVE-2025-46598

Bitcoin Core through 29.0 allows a denial of service via a crafted transaction...

CVE-2025-46597

Bitcoin Core 0.13.0 through 29.x has an integer overflow...

Kardashev Scale Quantum Computing for Bitcoin Mining

Bitcoin already faces a quantum threat through Shor attacks on elliptic-curve signatures. This paper isolates the other component that public discussion often conflates with it: mining. Grover's algorithm halves the exponent of brute-force search, promising a quadratic edge to any quantum miner o...

EUVD-2025-208891

Bitcoin Core 0.13.0 through 29.x has an integer overflow...

CVE-2025-46597

Bitcoin Core 0.13.0 through 29.x has an integer overflow...

EUVD-2025-208889

Bitcoin Core through 29.0 allows a denial of service via a crafted transaction...

CVE-2025-46598

Bitcoin Core through 29.0 allows a denial of service via a crafted transaction...

CVE-2025-46597

Bitcoin Core 0.13.0 through 29.x has an integer overflow...

CVE-2025-46597

Bitcoin Core 0.13.0 through 29.x has an integer overflow...

Bitcoin Core 安全漏洞

Bitcoin Core is an open-source client for verifying the validity of blockchain transactions. Versions of Bitcoin Core 29.x and earlier contain security vulnerabilities, which stem from integer overflow issues...

Bitcoin Core 安全漏洞

Bitcoin Core is an open-source client for verifying the validity of blockchain transactions. Versions of Bitcoin Core prior to 29.0 contain security vulnerabilities; these vulnerabilities stem from specially crafted transactions and could lead to denial-of-service attacks...

CVE-2025-46598

Bitcoin Core through 29.0 allows a denial of service via a crafted transaction...

CVE-2025-46597

Bitcoin Core 0.13.0 through 29.x is affected by an integer overflow (CVE-2025-46597). The CVSS metrics indicate a network-sourced, low-complexity attack with no privileges required and no user interaction, resulting in high availability impact. Connected sources consistently cite the same descrip...