MAL-2023-1672 Malicious code in cccxt (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx bbf77e85143db2624a1691f94e6382f42d72ab92eec168499ba0ac0b1f0081d3 Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

Malicious code in cccxt (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx bbf77e85143db2624a1691f94e6382f42d72ab92eec168499ba0ac0b1f0081d3 Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

Malicious code in ccxtt (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 6e773dfbf272510462161ef414375e503b05178db70661f62abc709494f507c0 Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

Malicious code in ccxxt (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 2f0475928d01aa7735ccbbd11aea089aa02c703d8449177cd3e5d32636246059 Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

MAL-2023-1679 Malicious code in ccxxt (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 2f0475928d01aa7735ccbbd11aea089aa02c703d8449177cd3e5d32636246059 Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

CVE-2021-37492

An issue discovered in src/wallet/wallet.cpp in Ravencoin Core 4.3.2.1 and earlier allows attackers to view sensitive information via CWallet::CreateTransactionAll function...

CVE-2021-37492

The CVE-2021-37492 entry pertains to Ravencoin Core (

CVE-2021-37491

An issue discovered in src/wallet/wallet.cpp in Dogecoin Project Dogecoin Core 1.14.3 and earlier allows attackers to view sensitive information via CWallet::CreateTransaction function...

Ravencoin 安全漏洞

Ravencoin is an experimental digital currency open-sourced by RavenProject that allows instant payments to anyone, anywhere in the world. A security vulnerability exists in Ravencoin Core 4.3.2.1 and earlier versions, which stems from an issue in src/wallet/wallet.cpp that can be exploited by an...

CVE-2021-37492: Undefined Security Weakness

An issue discovered in src/wallet/wallet.cpp in Ravencoin Core 4.3.2.1 and earlier allows attackers to view sensitive information via CWallet::CreateTransactionAll function...

CVE-2021-37491: Undefined Security Weakness

An issue discovered in src/wallet/wallet.cpp in Dogecoin Project Dogecoin Core 1.14.3 and earlier allows attackers to view sensitive information via CWallet::CreateTransaction function...

CVE-2021-37491

CVE-2021-37491 affects Dogecoin Core 1.14.3 and earlier, with a root cause in src/wallet/wallet.cpp (CWallet::CreateTransaction()) that can allow an attacker to view sensitive information. The issue is documented across multiple sources (NVD/NVD CVE entry) and is categorized as high impact (CVSS ...

CVE-2022-36401

Cross-Site Request Forgery CSRF vulnerability in TeraWallet – For WooCommerce plugin = 1.3.24 versions...

WordPress Plugin TeraWallet For WooCommerce 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site request forger...

Titan Stealer: A New Golang-Based Information Stealer Malware Emerges

A new Golang-based information stealer malware dubbed Titan Stealer is being advertised by threat actors through their Telegram channel. "The stealer is capable of stealing a variety of information from infected Windows machines, including credential data from browsers and crypto wallets, FTP...

CRYPTBOT Information-Stealing Malware Targeting Your Browser and Crypto-Wallet

Threat Level Attack Report For a detailed threat advisory, download the pdf file here Summary CRYPTBOT is malware that steals personal information by gathering browser credentials, cookies, cryptocurrency wallets, and system information. It then compresses the collected data into a zip file and...

Exploring the Vulnerabilities of Seaport: A Technical Analysis of a Fake Signature Attack on Non-Fungible Tokens

Lines of code Vulnerability details Impact This finding aims to provide a comprehensive analysis of the sc4m trend, which emerged in August 2022, and has since been a prevalent issue in the WEB3 space. Despite efforts to combat this phenomenon, bad actors continue to engage in illicit activities,...

Google Ads Malware Wipes NFT Influencer’s Crypto Wallet

By Habiba Rashid NFT influencer @NFTGOD downloaded malware through Google Ads while attempting to download OBS, an open-source video streaming software. This is a post from HackRead.com Read the original post: Google Ads Malware Wipes NFT Influencers Crypto Wallet...

piWallet SQL注入漏洞

piWallet is a popular secure open source online torrents wallet for jfm individual developers. piWallet suffers from a SQL injection vulnerability that stems from incorrect manipulation of the parameter key resulting in sql injection...

Relayers can steal extra fees from smart contract wallets on every transaction

Lines of code Vulnerability details Impact Relayers can take signed transactions and append zeroes to the signature parameter to artificially increase the gas cost and startGas estimation. This causes additional cost for the signer and increases the relayers reimbursement. The cost/reimbursement...