Exodus Wallet (ElectronJS Framework) - Remote Code Execution

Exodus Wallet ElectronJS Framework - Remote Code Execution window.location = 'exodus://aaaaaaaaa" --gpu-launcher="cmd" --aaaaa='...

New Malware Hijacks Cryptocurrency Mining

This is a clever attack. After gaining control of the coin-mining software, the malware replaces the wallet address the computer owner uses to collect newly minted currency with an address controlled by the attacker. From then on, the attacker receives all coins generated, and owners are none the...

SamSam - The Evolution Continues Netting Over $325,000 in 4 Weeks

This post was written by Vitor Ventura Introduction Talos has been working in conjunction with Cisco IR Services on what we believe to be a new variant of the SamSam ransomware. This ransomware has been observed across multiple industries including Government, Healthcare and ICS. These attacks do...

undergroundshop.dk XSS vulnerability

Open Bug Bounty ID: OBB-528300 Description| Value ---|--- Affected Website:| undergroundshop.dk Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Disclosure Standard:| Coordinated Disclosure...

[SECURITY] Fedora 26 Update: electrum-3.0.5-1.fc26

Electrum is an easy to use Bitcoin client. It protects you from losing coins in a backup mistake or computer failure, because your wallet can be recovered from a secret phrase that you can write on paper or learn by heart. There is no waiting time when you start the client, because it does not...

Monero: remote access to localhost daemon, can issue jsonrpc commands

NOTE! Thanks for submitting a report! Please replace all the square sections below with the pertinent details. Remember, the more detail you provide, the easier it is for us to verify and then potentially issue a bounty, so be sure to take your time filling out the report! Summary: Remotely use...

[SECURITY] Fedora 27 Update: electrum-3.0.5-1.fc27

Electrum is an easy to use Bitcoin client. It protects you from losing coins in a backup mistake or computer failure, because your wallet can be recovered from a secret phrase that you can write on paper or learn by heart. There is no waiting time when you start the client, because it does not...

[SECURITY] Fedora 27 Update: electron-cash-3.1.1-1.fc27

Electron Cash is an easy to use Bitcoin Cash client. It protects you from l osing coins in a backup mistake or computer failure, because your wallet can be recovered from a secret phrase that you can write on paper or learn by heart. There is no waiting time when you start the client, because it...

Fake Bitcoin Wallet Apps Found on Google Play Store

By Uzair Amir After non-stop malware attacks, Android users have a couple of new This is a post from HackRead.com Read the original post: Fake Bitcoin Wallet Apps Found on Google Play Store...

Google Play Boots 3 Fake Bitcoin Wallet Apps

Google moved quickly to kick three fake bitcoin wallet apps from its Google Play marketplace earlier this month after researchers at mobile security firm Lookout discovered them. The apps pretended to be legitimate bitcoin wallets, but instead were fake. Apps were designed to trick sellers to...

smartindiawallet.co.in XSS vulnerability

Open Bug Bounty ID: OBB-456626 Description| Value ---|--- Affected Website:| smartindiawallet.co.in Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Huawei Wallet APP suffers from arbitrary gesture password change vulnerability

Huawei Wallet APP is a mobile shopping platform specially created by Huawei Huawei Wallet APP has a vulnerability of arbitrary change of gesture password. In the process of changing the gesture password of Huawei Wallet APP, the user's Huawei account needs to be verified. An attacker with root...

wallet.google.com Open Redirect vulnerability

Open Bug Bounty ID: OBB-452576 Description| Value ---|--- Affected Website:| wallet.google.com Vulnerable Application:| Custom Code Vulnerability Type:| Open Redirect / CWE-601 CVSSv3 Score:| 3.4 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:N/I:L/A:N Remediation Guide:| OWASP Open Redirect Cheat Sheet...

Blockchain Wallet CoinPouch Hacked; Verge Coins Stolen

By Waqas Another day, another cryptocurrency wallet hacked This time; it This is a post from HackRead.com Read the original post: Blockchain Wallet CoinPouch Hacked; Verge Coins Stolen...

Hundreds of Millions in Digital Currency Remains Frozen

Between $150 million and $300 million in digital currency called ether remains inaccessible today after a user said he “accidentally” triggered a vulnerability that froze the funds in the popular Parity wallet. Parity Technologies issued an advisory warning users about the flaw in the Parity Wall...

Oh, Crap! Someone Accidentally Triggered A Flaw That Locked Up $280 Million In Ethereum

Horrible news for some Ethereum users. About $300 million worth of Ether—the cryptocurrency unit that has become one of the most popular and increasingly valuable cryptocurrencies—from dozens of Ethereum wallets was permanently locked up today. Smart contract coding startup Parity Technologies,...

Bad Rabbit Linked to ExPetr/Not Petya Attacks

A link has been confirmed between the Bad Rabbit ransomware outbreak detected yesterday in major organizations in Russia and Ukraine and this summer’s ExPetr/Not Petya attacks. Researchers at Kaspersky Lab said there are “clear ties” between the two attacks though one major piece of the puzzle is...

Hydrogen Krypton Travel App for Android suffers from an override access vulnerability

Hydrogen Krypton Travel APP is a comprehensive service platform in the field of new energy vehicles. The vulnerability exists in "My Wallet" and "My Orders" in the Android version of Hydrogen Krypton Mobility APP, which allows an attacker to view any user's details by using their cell phone numbe...

How SS7 Flaw Can Be Used to Hack Gmail ID and Bitcoin Wallet

By Waqas An old vulnerability in the Signalling System No. 7 SS7 This is a post from HackRead.com Read the original post: How SS7 Flaw Can Be Used to Hack Gmail ID and Bitcoin Wallet...

Storefront services such as "Peer Resolution Service" does not start.

A new Storefront 3.12 server is added to a server group. The join is successful .However the services do not start. Event Id 7036 The citrix peer resolution service on local computer started and then stopped Other dependent services such as "CitrixCredential Wallet" and "Default Domain Domain...