380 matches found
Monero: Connection Count Bug in Monero Node Enables Outbound Peer Reset Attack
A vulnerability was disclosed that could cause a Monero node's outbound connections to be dropped. The vulnerability was caused by a flaw in how the node incorrectly counted the number of current outbound connections. An attacker could exploit this flaw to trick the node into mistakenly believing...
CVE-2020-26947
monero-wallet-gui in Monero GUI before 0.17.1.0 includes the . directory in an embedded RPATH with a preference ahead of /usr/lib, which allows local users to gain privileges via a Trojan horse library in the current working directory...
Moneros Decentralized P2P Exchanges: Functionality, Adoption, and Privacy Risks
Privacy-focused cryptocurrencies like Monero remain popular, despite increasing regulatory scrutiny that has led to their delisting from major centralized exchanges. The latter also explains the recent popularity of decentralized exchanges DEXs with no centralized ownership structures. These...
Charting the Uncharted: the Landscape of Monero Peer-To-Peer Network
The Monero blockchain enables anonymous transactions through advanced cryptography in its peer-to-peer network, which underpins decentralization, security, and trustless interactions. However, privacy measures obscure peer connections, complicating network analysis. This study proposes a method t...
Monero 18.3.4 Denial of Service
Monero version 18.3.4 suffers from a memory exhaustion vulnerability. Hello, About an hour ago, a group appearing to be named WyRCV2 posted a note on the nostr social network, which can be found at the following link:...
CVE-2025-26819
Monero through 0.18.3.4 before ec74ff4 does not have response limits on HTTP server connections...
CVE-2025-26819
Monero through 0.18.3.4 before ec74ff4 does not have response limits on HTTP server connections...
DEBIAN-CVE-2025-26819
Monero through 0.18.3.4 before ec74ff4 does not have response limits on HTTP server connections...
CVE-2025-26819
Monero through 0.18.3.4 before ec74ff4 does not have response limits on HTTP server connections...
UBUNTU-CVE-2025-26819
Monero through 0.18.3.4 before ec74ff4 does not have response limits on HTTP server connections...
Monero 安全漏洞
Monero is a decentralized cryptocurrency from the Monero project. A security vulnerability exists in Monero 0.18.3.4 and earlier versions that stems from an unresponsive limit on HTTP server connections...
CVE-2025-26819
Monero through 0.18.3.4 before ec74ff4 does not have response limits on HTTP server connections...
CVE-2025-26819
CVE-2025-26819 affects Monero up to version 0.18.3.4, where the HTTP server did not enforce response limits on connections. The public description states the issue exists before the commit ec74ff4. The linked reference points to that commit as the fix. The attack surface is the HTTP server of Mon...
CVE-2025-26819
Monero through 0.18.3.4 before ec74ff4 does not have response limits on HTTP server connections...
CVE-2025-26819
Monero through 0.18.3.4 before ec74ff4 does not have response limits on HTTP server connections...
CVE-2025-26819
Monero through 0.18.3.4 before ec74ff4 does not have response limits on HTTP server connections...
Monero (XMR) 2025 Prediction: What Is in Store for the Top Privacy Coin?
Monero XMR remains the leading privacy cryptocurrency with its unparalleled anonymity and security in a world increasingly financially…...
Supply Chain Attack Hits Rspack, Vant npm Packages with Monero Miner
Popular npm packages, Rspack and Vant, were recently compromised with malicious code. Learn about the attack, the impact, and how to protect your projects from similar threats...
Monero: Remote memory exhaustion in Epee RPC stack under zero Receive Window
The Epee RPC stack in Monero was vulnerable to memory exhaustion attacks. Delayed ACK or zero Receive Window advertisements could cause the server to keep responses in the send queue until memory was exhausted. This could lead to remote crashes of Monero nodes that exposed their RPC interfaces...