CVE-2016-8889

In Bitcoin Knots v0.11.0.ljr20150711 through v0.13.0.knots20160814 fixed in v0.13.1.knots20161027, the debug console stores sensitive information including private keys and the wallet passphrase in its persistent command history...

CVE-2016-8889

The CVE is for Bitcoin Knots, affecting versions v0.11.0.ljr20150711 through v0.13.0.knots20160814, with a fix in v0.13.1.knots20161027. The issue is that the debug console stores sensitive data (private keys and wallet passphrase) in its persistent command history, enabling potential exposure of...

CVE-2016-8889: Exposure of Sensitive Information to an Unauthorized Actor

In Bitcoin Knots v0.11.0.ljr20150711 through v0.13.0.knots20160814 fixed in v0.13.1.knots20161027, the debug console stores sensitive information including private keys and the wallet passphrase in its persistent command history...

iCloud Phishing Campaign Zycode Back From the Dead

A phishing campaign aimed at Chinese Apple users that was thought to be in hibernation has been roused from its slumber. Researchers in June spotted the campaign, dubbed Zycode, targeting Apple iCloud users. A rash of suspended domains that month led to a lull for the campaign however; researcher...

FBI Encouraging Ransomware Victims To Report Infections

The Federal Bureau of Investigation this week urged victims of ransomware to report infections to federal law enforcement in hopes of better understanding the threat. The agency, in tandem with the Internet Crime Complaint Center IC3, issued a public service announcement on Thursday asking...

OLX: Stored XSS in buy topup OLX Gold Credits

in this link: https://www.olx.ph/payment/wallet/topupaccount/ 1.input in 2 name: " onfocus=prompt1 autofocus bad=" 2.Select a payment 3.tick I accept OLX's Terms and Conditions 4.Click Continue Then go back to this page https://www.olx.ph/payment/wallet/topupaccount/, XSS :...

Bitcoin Exchange Offers $3.5 Million Reward for Information of Stolen Bitcoins

Hong Kong-based Bitcoin exchange 'Bitfinex' that lost around $72 Million worth of its customers’ Bitcoins last week is now offering a reward of $3.5 Million to anyone who can provide information that leads to the recovery of the stolen Bitcoins. Bitfinex revealed on August 2 that the cryptocurren...

Bitcoin Phishing Campaign Uncovered

For the last month, attackers have used a combination of phishing and typosquatting to carry out a campaign aimed at stealing Bitcoin and blockchain wallet credentials. More than 100 phony Bitcoin and blockchain domains have been set up so far, many which mimic legitimate Bitcoin wallets. Most of...

Tinkoff Mobile Wallet - Customized SSL, Dangerous filesystem permissions, Redefined SSL Common Names verifier vulnerabilities

HackApp vulnerability scanner discovered that application Tinkoff Mobile Wallet published at the 'play' market has multiple vulnerabilities...

Sensible Wallet Rewards - Customized SSL, Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Sensible Wallet Rewards published at the 'play' market has multiple vulnerabilities...

Pass2U Wallet for Passbook - Customized SSL, Exported ContentProvider, Redefined SSL Common Names verifier vulnerabilities

HackApp vulnerability scanner discovered that application Pass2U Wallet for Passbook published at the 'play' market has multiple vulnerabilities...

Mobile Recharge & Wallet - Customized SSL, Redefined SSL Common Names verifier, WebView SSL handling enabled vulnerabilities

HackApp vulnerability scanner discovered that application Mobile Recharge & Wallet published at the 'play' market has multiple vulnerabilities...

Dogecoin Wallet - Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application Dogecoin Wallet published at the 'play' market has multiple vulnerabilities...

Xapo · Bitcoin Wallet & Vault - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Xapo · Bitcoin Wallet & Vault published at the 'play' market has multiple vulnerabilities...

Mycelium Bitcoin Wallet - Customized SSL, Redefined SSL Common Names verifier vulnerabilities

HackApp vulnerability scanner discovered that application Mycelium Bitcoin Wallet published at the 'play' market has multiple vulnerabilities...

Bitcoin Wallet - Customized SSL, External URLs, KeyStore usage vulnerabilities

HackApp vulnerability scanner discovered that application Bitcoin Wallet published at the 'play' market has multiple vulnerabilities...

Bitcoin Wallet - Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application Bitcoin Wallet published at the 'play' market has multiple vulnerabilities...

Gift Wallet - Free Reward Card - Customized SSL, Exported ContentProvider, Redefined SSL Common Names verifier vulnerabilities

HackApp vulnerability scanner discovered that application Gift Wallet - Free Reward Card published at the 'play' market has multiple vulnerabilities...

BASE Wallet - Customized SSL, Redefined SSL Common Names verifier vulnerabilities

HackApp vulnerability scanner discovered that application BASE Wallet published at the 'play' market has multiple vulnerabilities...

CoinSpace Bitcoin Wallet - BSD license, MIT license vulnerabilities

HackApp vulnerability scanner discovered that application CoinSpace Bitcoin Wallet published at the 'play' market has multiple vulnerabilities...