Coinbase: Improper Validation of the Referrer header leading to Open URL Redirection

Using a proxy tool such as Burp, set the Target as https://coinbase.com. Then, send the following request: GET /cdn-cgi/l/chkjschl HTTP/1.1 Host: coinbase.com Referer: http://attacker.com Content-Length: 2 Notice the attacker's domain in the Referrer header. This value is not being validated on t...

Coinbase: Information Disclosure That shows the webroot of CoinBase Server

Hello, While I was testing The upload method on https://coinbase.com/merchantsettings , I have found that if you try to upload a php file or any other file html in this shape test.php.jpg , an Information Disclosure will happen showing the webroot of the server. I have provide a screenshot to...

CVE-2012-1909

The Bitcoin protocol, as used in bitcoind before 0.4.4, wxBitcoin, Bitcoin-Qt, and other programs, does not properly handle multiple transactions with the same identifier, which allows remote attackers to cause a denial of service unspendable transaction by leveraging the ability to create a...

CVE-2012-1909

CVE-2012-1909 affects the Bitcoin protocol implementations (e.g., bitcoind before 0.4.4, wxBitcoin, Bitcoin-Qt). The vulnerability arises from improper handling of multiple transactions sharing the same identifier, enabling remote attackers to trigger a denial of service by creating a duplicate c...

CVE-2012-1909

The Bitcoin protocol, as used in bitcoind before 0.4.4, wxBitcoin, Bitcoin-Qt, and other programs, does not properly handle multiple transactions with the same identifier, which allows remote attackers to cause a denial of service unspendable transaction by leveraging the ability to create a...