1938 matches found
编号撤回
btcd is an alternative node-wide Bitcoin implementation written in Go golang open-sourced by Bitcoin in Go. This CVE number has been withdrawn...
CVE-2024-35202
Bitcoin Core before 25.0 allows remote attackers to cause a denial of service blocktxn message-handling assertion and node exit by including transactions in a blocktxn message that are not committed to in a block's merkle root. FillBlock can be called twice for one PartiallyDownloadedBlock instan...
CVE-2024-35202
CVE-2024-35202 affects Bitcoin Core prior to 25.0. The vulnerability allows remote attackers to cause a denial of service by including transactions in a blocktxn message that are not committed to in a block’s merkle root, triggering a blocktxn-handling assertion and node exit. The issue is associ...
CVE-2024-35202
Bitcoin Core before 25.0 allows remote attackers to cause a denial of service blocktxn message-handling assertion and node exit by including transactions in a blocktxn message that are not committed to in a block's merkle root. FillBlock can be called twice for one PartiallyDownloadedBlock instan...
PT-2024-26378
Name of the Vulnerable Software and Affected Versions Bitcoin Core versions prior to 25.0 Description A high-severity software bug in Bitcoin Core allows remote attackers to cause a denial of service by including transactions in a blocktxn message that are not committed to in a block's merkle roo...
Key Group: another ransomware group using leaked builders
Key Group, or keygroup777, is a financially motivated ransomware group primarily targeting Russian users. The group is known for negotiating with victims on Telegram and using the Chaos ransomware builder. The first public report on Key Group's activity was released in 2023 by BI.ZONE, a...
Malicious code in bitcoin-message (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e20fe5a331a209f88ded16d3d0a0317fb3bbd42e9b2d3177deb803a64a453728 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2024-8745 Malicious code in bitcoin-message (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e20fe5a331a209f88ded16d3d0a0317fb3bbd42e9b2d3177deb803a64a453728 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2024-8746 Malicious code in bitcoin-sign (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 74442949ce3a767cf9c14049b9366b2e803d270991e37e5e2ab09131131a488a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in bitcoin-sign-message (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 87f9bac919ce1d304232e5c64601a20dad72ee9131683b31b35162d6717d84a0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in bitcoin-address-validator (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3bb543ed42a9c4e7386578dde42e2f9f8c6274c88b87358bff00e48a6fa2ea87 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2024-8744 Malicious code in bitcoin-address-validator (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3bb543ed42a9c4e7386578dde42e2f9f8c6274c88b87358bff00e48a6fa2ea87 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in bitcoin-sign (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 74442949ce3a767cf9c14049b9366b2e803d270991e37e5e2ab09131131a488a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2024-8810 Malicious code in wif-bitcoin (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6c7e0c4c13dfffd62d73e2bfdddc8c8ac3bc967eb7a87935ec05c506fc618ad2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Sextortion Scams Now Include Photos of Your Home
An old but persistent email scam known as "sextortion " has a new personalized touch: The missives, which claim that malware has captured webcam footage of recipients pleasuring themselves, now include a photo of the target's home in a bid to make threats about publishing the videos more...
Ex-Engineer Charged in Missouri for Failed $750,000 Bitcoin Extortion Attempt
A 57-year-old man from the U.S. state of Missouri has been arrested in connection with a failed data extortion campaign that targeted his former employer. Daniel Rhyne of Kansas City, Missouri, has been charged with one count of extortion in relation to a threat to cause damage to a protected...
New macOS Malware TodoSwift Linked to North Korean Hacking Groups
Cybersecurity researchers have uncovered a new macOS malware strain dubbed TodoSwift that they say exhibits commonalities with known malicious software used by North Korean hacking groups. "This application shares several behaviors with malware we've seen that originated in North Korea DPRK —...
Miniscript 安全漏洞
Miniscript is a Rust Bitcoin open source library for working with Miniscript. A security vulnerability exists in versions of Miniscript prior to 12.2.0 that stems from a failure to properly track the depth of a tree, thereby consuming the stack...
Bitcoin: Denial of Service
Background Bitcoin Core consists of both "full-node" software for fully validating the blockchain as well as a bitcoin wallet. Description Please review the CVE identifier referenced below for details. Impact Bitcoin Core, when debug mode is not used, allows attackers to cause a denial of service...