2 matches found
Monero: ZMQ get_output_distribution duplicate amount DoS
The ZMQ getoutputdistribution RPC was vulnerable to a memory exhaustion denial-of-service attack. The method accepted an unbounded amounts array and returned a separate distribution for each entry, allowing a small request to expand into a very large response by repeatedly including the amount 0...
5.9AI score
SaveExploits0
Tokens can get stuck in NFTXMintRequestEligibility
Handle @cmichelio Vulnerability details Vulnerability Details When dealing with ERC721 instead of 1155 the amounts array is ignored, which leads to an issue. User can call NFTXMintRequestEligibility.requestMint for an ERC721 with amountsi = 0. The ERC721.transferFrom is still executed but user...
7AI score
SaveExploits0
20