CVE-2022-23327

A design flaw in Go-Ethereum 1.10.12 and older versions allows an attacker node to send 5120 future transactions with a high gas price in one message, which can purge all of pending transactions in a victim node's memory pool, causing a denial of service DoS...

Design/Logic Flaw

A design flaw in all versions of Go-Ethereum allows an attacker node to send 5120 pending transactions of a high gas price from one account that all fully spend the full balance of the account to a victim Geth node, which can purge all of pending transactions in a victim node's memory pool and th...

Design/Logic Flaw

A design flaw in Go-Ethereum 1.10.12 and older versions allows an attacker node to send 5120 future transactions with a high gas price in one message, which can purge all of pending transactions in a victim node's memory pool, causing a denial of service DoS...

CVE-2022-23328

CVE-2022-23328 describes a design flaw in all versions of Go-Ethereum whereby an attacker node can inject 5,120 pending transactions with high gas prices from a single account. This behavior can purge the victim node’s memory pool of pending transactions and then saturate the pool, blocking new t...

CVE-2022-23328

A design flaw in all versions of Go-Ethereum allows an attacker node to send 5120 pending transactions of a high gas price from one account that all fully spend the full balance of the account to a victim Geth node, which can purge all of pending transactions in a victim node's memory pool and th...

CVE-2022-23327

A design flaw in Go-Ethereum 1.10.12 and older versions allows an attacker node to send 5120 future transactions with a high gas price in one message, which can purge all of pending transactions in a victim node's memory pool, causing a denial of service DoS...

CVE-2022-23327

Go-Ethereum versions 1.10.12 and earlier contain a design flaw that allows an attacker node to flood a victim’s memory pool by sending 5,120 future transactions with high gas price in a single message, causing memory pool purge and denial of service (DoS). Affected software is Go-Ethereum; root c...

CVE-2022-23327

A design flaw in Go-Ethereum 1.10.12 and older versions allows an attacker node to send 5120 future transactions with a high gas price in one message, which can purge all of pending transactions in a victim node's memory pool, causing a denial of service DoS...

Go-Ethereum 代码问题漏洞

Ethereum Go-ethereum is a codebase from the Ethereum community that implements the ethereum protocol in the Go language. A code issue vulnerability exists in Go-Ethereum that stems from a product that allows an attacking node to send 5,120 future high-oil transactions in a single message, which c...

PT-2022-15930

Name of the Vulnerable Software and Affected Versions Go-Ethereum versions 1.10.12 and older Description A design flaw allows an attacker node to send 5120 future transactions with a high gas price in one message, which can purge all of pending transactions in a victim node's memory pool, causing...

Ethereum Go-ethereum 资源管理错误漏洞

Ethereum Go-ethereum is a codebase from the Ethereum community that implements the ethereum protocol in the Go language. A resource management error vulnerability exists in Ethereum Go-Ethereum that stems from when sending 5,120 unfinished HFO transactions from an account that uses up the entire...

Hackers Who Broke Into NVIDIA's Network Leak DLSS Source Code Online

American chipmaking company NVIDIA on Tuesday confirmed that its network was breached as a result of a cyber attack, enabling the perpetrators to gain access to sensitive data, including source code purportedly associated with its Deep Learning Super Sampling DLSS technology. "We have no evidence...

Miners Can Manipulate tx.gasprice to Drain Users' Wallets in postIncomingMessages()

Lines of code Vulnerability details Impact The postIncomingMessages function is used to broadcast signed data indicating that a funds on an schain will be moved to mainnet. While the function performs proper signature verification, it doesn't prevent any arbitrary user from frontrunning the...

[WP-H2] When transferring tokens native on SKALE to Ethereum with TokenManagerERC20.exitToMainERC20(), the tokens on the schain will be frozen on TokenManagerERC20, but they will not receive tokens on Ethereum

Lines of code Vulnerability details In the current implementation of TokenManagerERC20, it allows exitToMainERC20tokenOnSchain, amount. At L277 of TokenManagerERC20.sol in exitToMainERC20, if tokenOnSchain is minted on SKALE schain natively, there are no such require statement that prevents the...

Gas Pricing Can Be Used To Extort Funds From Users of SChain Owner

Lines of code Vulnerability details Impact The function refundGasByUser can be exploited by the message sender to drain nodes and SChain owners of their balances when processing incoming messages. When a node collates a set of exits from an SChain to Ethereum, they are submitted on-chain via...

WordPress Ethereum Wallet plugin <= 4.0.8 - Sensitive Information Disclosure vulnerability

Sensitive Information Disclosure vulnerability discovered in WordPress Ethereum Wallet plugin versions = 4.0.8. Solution Update the WordPress Ethereum Wallet plugin to the latest available version at least 4.0.9...

WordPress Ethereum Wallet plugin <= 4.0.8 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress Ethereum Wallet plugin versions = 4.0.8. Solution Update the WordPress Ethereum Wallet plugin to the latest available version at least 4.0.9...

Ex-Crypto CEO accused of 2016’s $11 billion Ethereum DAO hack

By Waqas According to journalist Laura Shin and Blockchain data security firm Chainalysis, in 2016, a programmer, Toby Hoenisch, allegedly… This is a post from HackRead.com Read the original post: Ex-Crypto CEO accused of 2016s $11 billion Ethereum DAO hack...

Hackers Stole $1.7 Million Worth of NFTs from Users of OpenSea Marketplace

Malicious actors took advantage of a smart contract upgrade process in the OpenSea NFT marketplace to carry out a phishing attack against 17 of its users that resulted in the theft of virtual assets worth about $1.7 million. NFTs, short for non-fungible tokens, are digital tokens that act like...

Croatian Police arrests minor over A1 Telecom data breach & ransom demand

By Waqas The 14-year-old schoolboy was accused of stealing data of 100,000 Tele Operator A1 customers and demanding 150 Ethereum… This is a post from HackRead.com Read the original post: Croatian Police arrests minor over A1 Telecom data breach & ransom demand...