CVE-2025-5719

The wallet has an authentication bypass vulnerability that allows access to specific pages...

CVE-2025-5719

CVE-2025-5719 relates to Vivo Wallet with an authentication bypass that could grant access to specific pages. Connected sources confirm the vulnerability class (authentication bypass) and name the affected software as Vivo Wallet/mobile wallet. The Red Hat and PT-Security entries corroborate the ...

CVE-2025-5719

The wallet has an authentication bypass vulnerability that allows access to specific pages...

CVE-2025-5719: Missing Authentication for Critical Function

The wallet has an authentication bypass vulnerability that allows access to specific pages...

Vivo wallet 安全漏洞

Vivo wallet is a mobile wallet application from the Chinese company Vivo. A security vulnerability exists in Vivo wallet, which stems from an authentication bypass that could lead to accessing specific pages...

MAL-2025-4645 Malicious code in lib-wallet-pay-btc (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1867a5dee260868eb8f3e51c3df89b8f1e5752dd2c8529cbdc4ac73ab18d7394 Any computer that has this package installed or running should be considered...

Next Generation Authentication for Data Spaces: an Authentication Flow Based on Grant Negotiation and Authorization Protocol for Verifiable Presentations (GNAP4VP)

Identity verification in Data Spaces is a fundamental aspect of ensuring security and privacy in digital environments. This paper presents an identity verification protocol tailored for shared data environments within Data Spaces. This protocol extends the Grant Negotiation and Authorization...

Malicious code in wallet-connector-rce (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7da34a4136664074d4841726a150a99a3bc33e88c131fc32766950633e0f9558 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4535 Malicious code in wallet-connector-rce (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7da34a4136664074d4841726a150a99a3bc33e88c131fc32766950633e0f9558 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in fernets (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 95fc75ed8a4cfcccc988b2241772effbc15eb3700a6a96f3183981a1b4c7fba7 If imported, the module starts a multi-stage infostealer, exfiltrating browser data as well as crypto wallets, and also attempts to monitor clipboard looking f...

CVE-2024-32446

Cross-Site Request Forgery CSRF vulnerability in WP Swings Wallet System for WooCommerce.This issue affects Wallet System for WooCommerce: from n/a through 2.5.9...

CVE-2024-7747

The Wallet for WooCommerce plugin for WordPress is vulnerable to incorrect conversion between numeric types in all versions up to, and including, 1.5.6. This is due to a numerical logic flaw when transferring funds to another user. This makes it possible for authenticated attackers, with...

CVE-2024-23660

The Binance Trust Wallet app for iOS in commit 3cd6e8f647fbba8b5d8844fcd144365a086b629f, git tag 0.0.4 misuses the trezor-crypto library and consequently generates mnemonic words for which the device time is the only entropy source, leading to economic losses, as exploited in the wild in July 202...

CVE-2023-36199

An issue in skalenetwork sgxwallet v.1.9.0 and below allows an attacker to cause a denial of service via the trustedGenerateEcdsaKey component...

CVE-2023-27892

Insufficient length checks in the ShapeShift KeepKey hardware wallet firmware before 7.7.0 allow a global buffer overflow via crafted messages. Flaws in cfconfirmExecTx in ethereumcontracts.c can be used to reveal arbitrary microcontroller memory on the device screen or crash the device. With...

CVE-2022-25642

Obyte formerly Byteball Wallet before 3.4.1 allows XSS. A crafted chat message can lead to remote code execution...

CVE-2022-1673

The WooCommerce Green Wallet Gateway WordPress plugin before 1.0.2 does not escape the errorenvision query parameter before outputting it to the page, leading to a Reflected Cross-Site Scripting vulnerability...

CVE-2022-30330

In the KeepKey firmware before 7.3.2,Flaws in the supervisor interface can be exploited to bypass important security restrictions on firmware operations. Using these flaws, malicious firmware code can elevate privileges, permanently make the device inoperable or overwrite the trusted bootloader...

CVE-2022-35913

Samourai Wallet Stonewallx2 0.99.98e allows a denial of service via a P2P coinjoin. The attacker and victim must follow each other's paynym. Then, the victim must try to collaborate with the attacker for a Stonewallx2 transaction. Next, the attacker broadcasts a tx, spending the inputs used in...

CVE-2021-36689

An issue discovered in com.samourai.wallet.PinEntryActivity.java in Streetside Samourai Wallet 0.99.96i allows attackers to view sensitive information and decrypt data via a brute force attack that uses a recovered samourai.dat file. The PIN is 5 to 8 digits, which may be insufficient in this...