CVE-2010-5141

The CVE-2010-5141 issue affects bitcoind and wxBitcoin up to version 0.3.4, with the root cause being improper handling of script opcodes in Bitcoin transactions. The vulnerability allows remote attackers to spend bitcoins owned by other users via unspecified vectors, as described in the provided...

CVE-2010-5139

Integer overflow in wxBitcoin and bitcoind before 0.3.11 allows remote attackers to bypass intended economic restrictions and create many bitcoins via a crafted Bitcoin transaction...

CVE-2010-5140

Removed by vendor...

CVE-2010-5141

Removed by vendor...

CVE-2010-5139

Removed by vendor...

CVE-2010-5138

Removed by vendor...

CVE-2010-5140

CVE-2010-5140 affects wxBitcoin and bitcoind prior to 0.3.13. The issue arises when handling bitcoins in transactions with zero confirmations, enabling a remote attacker to trigger a denial-of-service through an invalid-transaction flood by sending low-value transactions without fees. The describ...

PT-2012-3644

Name of the Vulnerable Software and Affected Versions bitcoind versions prior to 0.4.4 Bitcoin-Qt versions prior to 0.4.4 wxBitcoin versions prior to 0.4.4 Description The issue allows remote attackers to cause a denial of service by creating a duplicate coinbase transaction, resulting in an...

CVE-2012-1909: Undefined Security Weakness

The Bitcoin protocol, as used in bitcoind before 0.4.4, wxBitcoin, Bitcoin-Qt, and other programs, does not properly handle multiple transactions with the same identifier, which allows remote attackers to cause a denial of service unspendable transaction by leveraging the ability to create a...

CVE-2010-5138: Undefined Security Weakness

wxBitcoin and bitcoind 0.3.x allow remote attackers to cause a denial of service electricity consumption via a Bitcoin transaction containing multiple OPCHECKSIG script opcodes...

CVE-2010-5140: Improper Restriction of Operations within the Bounds of a Memory Buffer

wxBitcoin and bitcoind before 0.3.13 do not properly handle bitcoins associated with Bitcoin transactions that have zero confirmations, which allows remote attackers to cause a denial of service invalid-transaction flood by sending low-valued transactions without transaction fees...

Researchers Find Serious Flaws in Popular Point-of-Sale System

A security researcher has found several serious vulnerabilities in a widely deployed point-of-sale system that enables an attacker to change transactions, steal card data and take other malicious actions. The attacks could be executed remotely under certain circumstances or done through a local...

CentOS 5 : kernel (CESA-2012:1061)

Updated kernel packages that fix one security issue and multiple bugs are now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having moderate security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severi...

USN-1414-1: Aptdaemon vulnerability

It was discovered that Aptdaemon incorrectly handled installing packages without performing a transaction simulation. An attacker could possibly use this flaw to install altered packages...

CVE-2011-3955

Google Chrome before 17.0.963.46 allows remote attackers to cause a denial of service application crash or possibly have unspecified other impact via vectors that trigger the aborting of an IndexedDB transaction...

Design/Logic Flaw

Google Chrome before 17.0.963.46 allows remote attackers to cause a denial of service application crash or possibly have unspecified other impact via vectors that trigger the aborting of an IndexedDB transaction...

CVE-2011-3955

Google Chrome before 17.0.963.46 allows remote attackers to cause a denial of service application crash or possibly have unspecified other impact via vectors that trigger the aborting of an IndexedDB transaction...

CVE-2011-3955

Removed by vendor...

Postal savings banks the UKEY useless-vulnerability warning-the black bar safety net

Today to the postal Savings Bank postal savings bank of china to go to the opening of the postal green card through the online banking, in order to safeguard the Bank account of the funding security, the requirements for online banking opened UKEY protection, the Bank staff attitude good, and...

Facing Post-Transaction Attacks, Banks Should Reassess Fraud Protection

Banks will have to continue to upgrade their fraud protection controls, especially in the face of new and evolving attacks exclusively designed to evade them, researchers now say. A blog post, penned by Trusteer’s CTO Amit Klein, offers some research on these so-called post-transaction attack...