CVE-2019-16753

An issue was discovered in Decentralized Anonymous Payment System DAPS through 2019-08-26. The content to be signed is composed of a representation of strings, rather than being composed of their binary representations. This is a weak signature scheme design that would allow the reuse of signatur...

CVE-2019-16753

An issue was discovered in Decentralized Anonymous Payment System DAPS through 2019-08-26. The content to be signed is composed of a representation of strings, rather than being composed of their binary representations. This is a weak signature scheme design that would allow the reuse of signatur...

CVE-2019-16752

An issue was discovered in Decentralized Anonymous Payment System DAPS through 2019-08-26. It is possible to force wallets to send HTTP requests to arbitrary locations, both on the local network and on the internet. This is a serious threat to user privacy, since it can possibly leak their IP...

Design/Logic Flaw

An issue was discovered in Decentralized Anonymous Payment System DAPS through 2019-08-26. The content to be signed is composed of a representation of strings, rather than being composed of their binary representations. This is a weak signature scheme design that would allow the reuse of signatur...

CVE-2019-16752

An issue was discovered in Decentralized Anonymous Payment System DAPS through 2019-08-26. It is possible to force wallets to send HTTP requests to arbitrary locations, both on the local network and on the internet. This is a serious threat to user privacy, since it can possibly leak their IP...

CVE-2019-16752

CVE-2019-16752 concerns a vulnerability in Decentralized Anonymous Payment System (DAPS) present through 2019-08-26 that can cause wallets to send HTTP requests to arbitrary locations, potentially leaking a user’s IP and usage. Affected products/versions explicitly mentioned include Dash Core up ...

CVE-2019-16753

An issue was discovered in Decentralized Anonymous Payment System DAPS through 2019-08-26. The content to be signed is composed of a representation of strings, rather than being composed of their binary representations. This is a weak signature scheme design that would allow the reuse of signatur...

CVE-2019-16753

CVE-2019-16753 concerns the Decentralized Anonymous Payment System (DAPS) and affects Private Instant Verified Transactions (PIVX) up to 3.4.0. The root cause is that the data to be signed is formed as a representation of strings rather than their binary representations, creating a weak signature...

PT-2019-14811

Name of the Vulnerable Software and Affected Versions Decentralized Anonymous Payment System DAPS versions through 2019-08-26 Dash Core versions through 0.14.0.3 Private Instant Verified Transactions PIVX versions through 3.4.0 Description An issue allows forcing wallets to send HTTP requests to...

CVE-2019-16752: Cross-Site Request Forgery (CSRF)

An issue was discovered in Decentralized Anonymous Payment System DAPS through 2019-08-26. It is possible to force wallets to send HTTP requests to arbitrary locations, both on the local network and on the internet. This is a serious threat to user privacy, since it can possibly leak their IP...