bitcoin

Bitcoin Core 集成/暂存树 https://bitcoincore.org 如需立即可用的 Bitcoin Core 软件二进制版本，请访问 https://bitcoincore.org/en/download/。 什么是 Bitcoin Core？ Bitcoin Core 连接到比特币点对点网络，以下载并完全验证区块和交易。它还包含一个钱包和图形用户界面，可选构建。 有关 Bitcoin Core 的更多信息，请参见 doc 文件夹。 许可证 Bitcoin Core 在 MIT 许可证条款下发布。更多信息请参见 COPYING 或访问...

ufonet

网站：https://ufonet.03c8.net 描述： UFONet 是一款自由软件、P2P 且基于密码学的破坏性工具包，允许在第 7 层（应用层/HTTP）通过利用第三方网站上的开放重定向漏洞实施 DoS 和 DDoS 攻击，从而充当僵尸网络；并在第 3 层（网络层）滥用协议发起攻击。 它还作为一个加密的暗网（DarkNET），通过基于直接连接 P2P 架构的全局客户端/服务器网络来发布和接收内容。 更多信息请参考以下链接： 常见问题： https://ufonet.03c8.net/FAQ.html CWE-601：开放重定向：...

EphemeralNet

EphemeralNet 一个采用 C++20 构建的安全 P2P 网络，内置面向恶劣 NAT 环境的自定义中继。 为高保证对等存储提供可编程遗忘能力。 为什么选择 EphemeralNet？ Shardian 为那些将删除保证与机密性同等重视的团队设计基础设施。EphemeralNet 是我们用 C++20 打造的研究型守护进程，专为必须 消失的数据而生：一种将强制生存时间（TTL）语义作为一等约束的 P2P 协议。EphemeralNet 不会把 BitTorrent...

ds3-nrssr-rce

更新：黑暗之魂3 1.15.1 黑暗之魂3 于 2022/08/25 发布了新游戏更新 1.15.1，同时恢复了在线服务。该更新修复了 CVE-2022-24125 和 CVE-2022-24126 ，以及游戏中 P2P 网络通信中存在的各种其他潜在安全漏洞（越界读/写）。此外，所有已知的能够损坏其他玩家存档的漏洞利用均已被修复。许多在在线多人游戏中经常遇到的常见低级作弊（例如“诅咒匕首”）也已被修补。 ds3-nrssr-rce 本仓库包含影响 FROM SOFTWARE 游戏的最新 RCE 漏洞利用概念验证代码和文档，即...

CVE-2026-52732 ZEBRA: Mempool transaction admission denial via single-peer inbound queue saturation

ZEBRA is a Zcash node written entirely in Rust. Prior to 4.5.0, one unauthenticated P2P peer can monopolize all 25 MAXINBOUNDCONCURRENCY slots in Zebra's inbound mempool download and verification pipeline. In zebrad/src/components/mempool/downloads.rs, the bounded queue was shared globally withou...

CVE-2026-52878

CVE-2026-52878 affects Klever-Go (versions 1.7.14–1.7.17). A nil RawData sub-message in protobuf Transaction triggers a nil-pointer panic when txVersionChecker.CheckTxVersion dereferences tx.RawData.Version without a nil check, causing a crash in the libp2p pubsub/the node process. The crash prop...

CVE-2026-34067

nimiq-transaction provides the transaction primitive to be used in Nimiq's Rust implementation. Prior to version 1.3.0, HistoryTreeProof::verify panics on a malformed proof where history.len != positions.len due to asserteq!history.len, positions.len. The proof object is derived from untrusted p2...

EUVD-2019-14870

Malware in sbrugna...

CVE-2019-5265

Huawei Share function in P30 9.1.0.193C00E190R2P1 smartphone has an improper access control vulnerability. The function incorrectly controls certain access messages, attackers can simulate a sender to steal P2P network information. Successful exploit may cause information leakage...

btcd did not correctly re-implement Bitcoin Core's "FindAndDelete()" functionality

Impact The btcd Bitcoin client versions 0.10 to 0.24 did not correctly re-implement Bitcoin Core's "FindAndDelete" functionality. This logic is consensus-critical: the difference in behavior with the other Bitcoin clients can lead to btcd clients accepting an invalid Bitcoin block or rejecting a...

GHSA-27VH-H6MC-Q6G8 btcd did not correctly re-implement Bitcoin Core's "FindAndDelete()" functionality

Impact The btcd Bitcoin client versions 0.10 to 0.24 did not correctly re-implement Bitcoin Core's "FindAndDelete" functionality. This logic is consensus-critical: the difference in behavior with the other Bitcoin clients can lead to btcd clients accepting an invalid Bitcoin block or rejecting a...

P2PInfect: Self-Replicating Worm Hits Redis Instances

By Waqas Known as 'P2PInfect,' the worm exploits a critical vulnerability to infiltrate Redis instances and assimilates them into a larger P2P network, enabling it to spread rapidly. This is a post from HackRead.com Read the original post: P2PInfect: Self-Replicating Worm Hits Redis Instances...

Cybercriminals Hijacking Vulnerable SSH Servers in New Proxyjacking Campaign

An active financially motivated campaign is targeting vulnerable SSH servers to covertly ensnare them into a proxy network. "This is an active campaign in which the attacker leverages SSH for remote access, running malicious scripts that stealthily enlist victim servers into a peer-to-peer P2P...

U.S. Government Neutralizes Russia's Most Sophisticated Snake Cyber Espionage Tool

The U.S. government on Tuesday announced the court-authorized disruption of a global network compromised by an advanced malware strain known as Snake wielded by Russia's Federal Security Service FSB. Snake, dubbed the "most sophisticated cyber espionage tool," is the handiwork of a Russian...

Hunting Russian Intelligence “Snake” Malware

SUMMARY The Snake implant is considered the most sophisticated cyber espionage tool designed and used by Center 16 of Russia’s Federal Security Service FSB for long-term intelligence collection on sensitive targets. To conduct operations using this tool, the FSB created a covert peer-to-peer P2P...

artillery-core (>=0.1.2-alpha.3, <=0.1.2), bastion (>=0.3.5, <=0.4.5) +71 more potentially affected by CVE-2022-23486 via libp2p (>=0.18.1, <=0.42.2)

libp2p CARGO version =0.18.1, =0.1.2-alpha.3, =0.3.5, =0.1.0, =0.7.0, =0.1.5, =2.0.0-alpha.3, =0.4.0, =0.2.0, =0.20.0, =0.8.0, =0.8.0, =0.10.0 and more Source cves: CVE-2022-23486 Source advisory: OSV:GHSA-JVGW-GCCV-Q5P8...

FritzFrog: P2P Botnet Hops Back on the Scene

FritzFrog is a peer-to-peer botnet, which means its command and control server is not limited to a single, centralized machine, but rather can be done from every machine in its distributed network. In other words, every host running the malware process becomes part of the network, and is capable ...

Chinese Authorities Arrest Hackers Behind Mozi IoT Botnet Attacks

The operators of the Mozi IoT botnet have been taken into custody by Chinese law enforcement authorities, nearly two years after the malware emerged on the threat landscape in September 2019. News of the arrest, which originally happened in June, was disclosed by researchers from Netlab, the...

CVE-2019-5265

Huawei Share function in P30 9.1.0.193C00E190R2P1 smartphone has an improper access control vulnerability. The function incorrectly controls certain access messages, attackers can simulate a sender to steal P2P network information. Successful exploit may cause information leakage...

Improper access control

Huawei Share function in P30 9.1.0.193C00E190R2P1 smartphone has an improper access control vulnerability. The function incorrectly controls certain access messages, attackers can simulate a sender to steal P2P network information. Successful exploit may cause information leakage...