PT-2025-9235

Name of the Vulnerable Software and Affected Versions Bitaxe ESP-Miner versions prior to 2.5.0 Description The issue allows an attacker to perform a CSRF attack via the "/api/system" API endpoint to update the payout address, also known as stratumUser, for a Bitaxe Bitcoin miner. Additionally, it...

CVE-2025-27579

In Bitaxe ESP-Miner before 2.5.0 with AxeOS, one can use an /api/system CSRF attack to update the payout address aka stratumUser for a Bitaxe Bitcoin miner, or change the frequency and voltage settings...