418 matches found
CVE-2018-6317
The remote management interface in Claymore Dual Miner 10.5 and earlier is vulnerable to an unauthenticated format string vulnerability, allowing remote attackers to read memory or cause a denial of service...
CVE-2018-6317
CVE-2018-6317 affects Claymore’s Dual Miner remote management interface. Versions 10.5 and earlier are vulnerable to an unauthenticated format-string vulnerability that can read memory or cause a denial of service. A fixed version is 10.6 (per 1337DAY entry). Public references show exploit/media ...
CVE-2018-6317
The remote management interface in Claymore Dual Miner 10.5 and earlier is vulnerable to an unauthenticated format string vulnerability, allowing remote attackers to read memory or cause a denial of service...
Nearly 2000 WordPress Websites Infected with a Keylogger
More than 2,000 WordPress websites have once again been found infected with a piece of crypto-mining malware that not only steals the resources of visitors' computers to mine digital currencies but also logs visitors' every keystroke. Security researchers at Sucuri discovered a malicious campaign...
Malicious Crypto Miner Downloader
Many malicious sites attempt to get users to download crypto miners. These miners will run in the background of the victims machines and highjack their CPU. A successful attack could lead to a loss of performance in the victims machine...
A week in security (January 15 – January 21)
Last week on Labs, we gave you some background information about cookies, specifically which ones to worry about and why. We also warned you about scams surrounding the Mega Millions winner, who promised to donate his money to good causes. We analyzed a cryptocurrency miner using a very old...
CVE-2017-12116
An exploitable improper authorization vulnerability exists in minersetGasPrice API of cpp-ethereum's JSON-RPC commit 4e1015743b95821849d001618a7ce82c7c073768. A JSON request can cause an access to the restricted functionality resulting in authorization bypass. An attacker can send JSON to trigger...
PT-2018-5359 · Ethereum · Cpp-Ethereum
Name of the Vulnerable Software and Affected Versions: cpp-ethereum version affected versions not specified Description: An issue exists in the miner stop API endpoint of cpp-ethereum's JSON-RPC, where improper authorization can be exploited. An attacker can send JSON data to trigger this issue...
PT-2018-5357 · Ethereum · Cpp-Ethereum
Name of the Vulnerable Software and Affected Versions: cpp-ethereum affected versions not specified Description: An improper authorization issue exists in the miner setGasPrice API of cpp-ethereum's JSON-RPC. This allows a JSON request to access restricted functionality, resulting in authorizatio...
PT-2018-5358 · Ethereum · Cpp-Ethereum
Name of the Vulnerable Software and Affected Versions: cpp-ethereum version affected versions not specified Description: An improper authorization issue exists in the miner start API endpoint of cpp-ethereum's JSON-RPC. This allows a JSON request to access restricted functionality, resulting in...
PT-2018-5356 · Ethereum · Cpp-Ethereum
Name of the Vulnerable Software and Affected Versions: cpp-ethereum versions affected versions not specified Description: An issue exists in the miner setEtherbase API endpoint of cpp-ethereum's JSON-RPC, allowing for improper authorization. A JSON request can bypass authorization, resulting in...
Oracle Ships 237 Fixes in Latest Critical Patch Update
Oracle has shipped 237 patches for vulnerabilities impacting hundreds of product versions as part of its latest quarterly critical patch update. Product lines coming in for some of the most fixes include Oracle Financial Services Applications, with 34, Fusion Middleware with 27, MySQL with 25 and...
VulnCheck KEV: CVE-2017-16929
The remote management interface on the Claymore Dual GPU miner 10.1 is vulnerable to an authenticated directory traversal vulnerability exploited by issuing a specially crafted request, allowing a remote attacker to read/write arbitrary files. This can be exploited via ../ sequences in the...
CPP-Ethereum JSON-RPC Incorrect Authorization Vulnerability (CNVD-2018-02800)
CPP-Ethereum is a C++ client for Ethereum Application Programming Platform.JSON-RPC is one of the remote invocation services using JSON as the protocol. An incorrect authorization vulnerability exists in the minerstop API for JSON-RPC in CPP-Ethereum commit version...
CPP-Ethereum JSON-RPC Incorrect Authorization Vulnerability (CNVD-2018-02797)
CPP-Ethereum is a C++ client for Ethereum Application Programming Platform.JSON-RPC is one of the remote invocation services using JSON as the protocol. An incorrect authorization vulnerability exists in the minersetEtherbase API for JSON-RPC in CPP-Ethereum commit version...
CPP-Ethereum JSON-RPC Incorrect Authorization Vulnerability (CNVD-2018-02798)
CPP-Ethereum is a C++ client for Ethereum Application Programming Platform.JSON-RPC is one of the remote invocation services using JSON as the protocol. An incorrect authorization vulnerability exists in the minersetGasPrice API for JSON-RPC in the CPP-Ethereum commit...
CoffeeMiner - Collaborative (MITM) Cryptocurrency Mining Pool In Wifi Networks
Collaborative mitm cryptocurrency mining pool in wifi networks Warning: this project is for academic/research purposes only. A blog post about this project can be read here: http://arnaucode.com/blog/coffeeminer-hacking-wifi-cryptocurrency-miner.html Concept Performs a MITM attack to all selected...
Web Reconnaissance Framework: Recon-ng
Recon-ng is a full-featured Web Reconnaissance framework written in Python. Complete with independent modules, database interaction, built in convenience functions, interactive help, and command completion, Recon-ng provides a powerful environment in which open source web-based reconnaissance can...
CPP-Ethereum JSON-RPC miner_stop improper authorization Vulnerability
Summary An exploitable improper authorization vulnerability exists in minerstop API of cpp-ethereum’s JSON-RPC commit 4e1015743b95821849d001618a7ce82c7c073768. A JSON request can cause an access to the restricted functionality resulting in authorization bypass. An attacker can send JSON to trigge...
