Fellipe Weno

fweno.onefour.com.br

Current Conditions

São Paulo
céu limpo

16 ℃

79%

Temperatura

Umidade

Fonte: OpenWeatherMap. - 21:30:01

[USD] USD 87,161.62

[BRL] BRL 464,885.21 [USD] USD 87,161.62 [GBP] GBP 66,642.90 [EUR] EUR 75,595.18
Price index provided by blockchain.info.
Disclosure of the details of a bug on 32-bit systems which may, in a rare edge case, cause the node to crash when receiving a pathological block. This bug would be extremely hard to exploit. A fix was released on October 10th 2025 in Bitcoin Core v30.0.
This issue is considered Low severity.

Details
Before writing a block to disk, Bitcoin Core checks that its size is within a normal range. This check would overflow on 32-bit systems for blocks over 1GB, and make the node crash when writing it to disk. Such a block cannot be sent using the BLOCK message, but could in theory be sent as a compact block if the victim node has a non-default large mempool which already contains 1GB of transactions. This would require the victim to have set their -maxmempool option to a value greater than 3GB, while 32-bit systems may have at most 4GiB of memory.
This issue was indirectly prevented by capping the maximum value of the -maxmempool setting on 32-bit systems.

Attribution
Pieter Wuille discovered this bug and disclosed it responsibly.
Antoine Poinsot proposed and implemented a covert mitigation.

Timeline
- 2025-04-24 - Pieter Wuille reports the issue
- 2025-05-16 - Antoine Poinsot opens PR #32530 with a covert fix
- 2025-06-26 - PR #32530 is merged into master
- 2025-09-04 - Version 29.1 is released with the fix
- 2025-10-10 - Version 30.0 is released with the fix
- 2025-10-24 - Public Disclosure

dog - 21:31:40 up 62 days, 6:02, 4 users, load average: 0.11, 0.08, 0.03

[20/11/2025 18:54] EUA retiram tarifas de 40% de café, carnes e outros produtos do Brasil - G1

[20/11/2025 16:00] Após incêndio, ONU diz que local da COP agora é responsabilidade do Brasil - CNN Brasil

[20/11/2025 16:31] Evangélico, André Mendonça dá parabéns a Jorge Messias - Poder360

[20/11/2025 17:59] Bicampeão de asa-delta morre em acidente com parapente em São Conrado - O Globo

[20/11/2025 09:17] PSOL pede prisão imediata de Ramagem após revelação de viagem a Miami; Câmara diz não ter sido informada - CartaCapital

[20/11/2025 11:36] Vieira critica comunicação "agressiva" do governo sobre PL Antifacção - Poder360

[20/11/2025 20:26] Influenciador "Gigante du Grau" é executado a tiros no interior de SP - CNN Brasil

[20/11/2025 15:05] Zelensky recebe plano dos EUA para acabar a guerra e deve falar com Trump - CNN Brasil

[20/11/2025 15:18] Funeral de Dick Cheney reúne ex-presidentes e vices dos EUA; Trump e J.D. Vance não foram convidados - G1

[20/11/2025 14:08] Trump chama democratas de traidores após vídeo sobre ordens ilegais - Metrópoles

[CVE-2025-47281] [Modified: 05-08-2025] [Analyzed] [V3.1 S7.7:HIGH] Kyverno is a policy engine designed for cloud native platform engineering teams. In versions 1.14.1 and below, a Denial of Service (DoS) vulnerability exists due to improper handling of JMESPath variable substitutions. Attackers with permissions to create or update Kyverno policies can craft expressions using the {{@}} variable combined with a pipe and an invalid JMESPath function (e.g., {{@ | non_existent_function }}). This leads to a nil value being substituted into the policy structure. Subsequent processing by internal functions, specifically getValueAsStringMap, which expect string values, results in a panic due to a type assertion failure (interface {} is nil, not string). This crashes Kyverno worker threads in the admission controller and causes continuous crashes of the reports controller pod. This is fixed in version 1.14.2.

[CVE-2025-53537] [Modified: 05-08-2025] [Analyzed] [V3.1 S7.5:HIGH] LibHTP is a security-aware parser for the HTTP protocol and its related bits and pieces. In versions 0.5.50 and below, there is a traffic-induced memory leak that can starve the process of memory, leading to loss of visibility. To workaround this issue, set `suricata.yaml app-layer.protocols.http.libhtp.default-config.lzma-enabled` to false. This issue is fixed in version 0.5.51.

[CVE-2025-53942] [Modified: 21-08-2025] [Analyzed] [V3.1 S7.4:HIGH] authentik is an open-source Identity Provider that emphasizes flexibility and versatility, with support for a wide set of protocols. In versions 2025.4.4 and earlier, as well as versions 2025.6.0-rc1 through 2025.6.3, deactivated users who registered through OAuth/SAML or linked their accounts to OAuth/SAML providers can still retain partial access to the system despite their accounts being deactivated. They end up in a half-authenticated state where they cannot access the API but crucially they can authorize applications if they know the URL of the application. To workaround this issue, developers can add an expression policy to the user login stage on the respective authentication flow with the expression of return request.context["pending_user"].is_active. This modification ensures that the return statement only activates the user login stage when the user is active. This issue is fixed in versions authentik 2025.4.4 and 2025.6.4.

[CVE-2025-54377] [Modified: 11-09-2025] [Analyzed] [V3.1 S7.8:HIGH] Roo Code is an AI-powered autonomous coding agent that lives in users' editors. In versions 3.23.18 and below, RooCode does not validate line breaks (\n) in its command input, allowing potential bypass of the allow-list mechanism. The project appears to lack parsing or validation logic to prevent multi-line command injection. When commands are evaluated for execution, only the first line or token may be considered, enabling attackers to smuggle additional commands in subsequent lines. This is fixed in version 3.23.19.

[CVE-2025-54365] [Modified: 09-10-2025] [Analyzed] [V3.1 S7.5:HIGH] fastapi-guard is a security library for FastAPI that provides middleware to control IPs, log requests, detect penetration attempts and more. In version 3.0.1, the regular expression patched to mitigate the ReDoS vulnerability by limiting the length of string fails to catch inputs that exceed this limit. This type of patch fails to detect cases in which the string representing the attributes of a <script> tag exceeds 100 characters. As a result, most of the regex patterns present in version 3.0.1 can be bypassed. This is fixed in version 3.0.2.

[CVE-2025-0765] [Modified: 08-08-2025] [Analyzed] [V3.1 S4.3:MEDIUM] An issue has been discovered in GitLab CE/EE affecting all versions from 17.9 before 18.0.5, 18.1 before 18.1.3, and 18.2 before 18.2.1 that could have allowed an unauthorized user to access custom service desk email addresses.

[CVE-2025-1299] [Modified: 28-07-2025] [Analyzed] [V3.1 S4.3:MEDIUM] An issue has been discovered in GitLab CE/EE affecting all versions starting from 15.4 before 18.0.5, all versions starting from 18.1 before 18.1.3, all versions starting from 18.2 before 18.2.1 that, under circumstances, could have allowed an unauthorized user to read deployment job logs by sending a crafted request.

[CVE-2025-4976] [Modified: 28-07-2025] [Analyzed] [V3.1 S4.3:MEDIUM] An issue has been discovered in GitLab EE affecting all versions from 17.0 before 18.0.5, 18.1 before 18.1.3, and 18.2 before 18.2.1 that, under certain circumstances, could have allowed an attacker to access internal notes in GitLab Duo responses.

[CVE-2025-7001] [Modified: 28-07-2025] [Analyzed] [V3.1 S4.3:MEDIUM] An issue has been discovered in GitLab CE/EE affecting all versions from 15.0 before 18.0.5, 18.1 before 18.1.3, and 18.2 before 18.2.1 that could have allowed priviledged users to access certain resource_group information through the API which should have been unavailable.

[CVE-2025-26397] [Modified: 12-11-2025] [Analyzed] [V3.1 S7.8:HIGH] SolarWinds Observability Self-Hosted is susceptible to Deserialization of Untrusted Data Local Privilege Escalation vulnerability. An attacker with low privileges can escalate privileges to run malicious files copied to a permission-protected folder. This vulnerability requires authentication from a low-level account and local access to the host server.

[CVE-2025-5084] [Modified: 11-08-2025] [Analyzed] [V3.1 S6.1:MEDIUM] The Post Grid Master plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘argsArray['read_more_text']’ parameter in all versions up to, and including, 3.4.13 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link.

[CVE-2025-45731] [Modified: 28-07-2025] [Analyzed] [V3.1 S6.5:MEDIUM] A group deletion race condition in 2FAuth v5.5.0 causes data inconsistencies and orphaned accounts when a group is deleted while other operations are pending.

[CVE-2025-4784] [Modified: 28-07-2025] [Analyzed] [V3.1 S9.8:CRITICAL] Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Moderec Tourtella allows SQL Injection.This issue affects Tourtella: before 26.05.2025.

[CVE-2025-33013] [Modified: 22-08-2025] [Analyzed] [V3.1 S6.2:MEDIUM] IBM MQ Operator LTS 2.0.0 through 2.0.29, MQ Operator CD 3.0.0, 3.0.1, 3.1.0 through 3.1.3, 3.3.0, 3.4.0, 3.4.1, 3.5.0, 3.5.1, 3.6.0, and MQ Operator SC2 3.2.0 through 3.2.13 Container could disclose sensitive information to a local user due to improper clearing of heap memory before release.

[CVE-2025-33109] [Modified: 11-08-2025] [Analyzed] [V3.1 S7.5:HIGH] IBM i 7.2, 7.3, 7.4, 7.5, and 7.6 is vulnerable to a privilege escalation caused by an invalid database authority check. A bad actor could execute a database procedure or function without having all required permissions, in addition to causing denial of service for some database actions.

[CVE-2025-36005] [Modified: 22-08-2025] [Analyzed] [V3.1 S5.9:MEDIUM] IBM MQ Operator LTS 2.0.0 through 2.0.29, MQ Operator CD 3.0.0, 3.0.1, 3.1.0 through 3.1.3, 3.3.0, 3.4.0, 3.4.1, 3.5.0, 3.5.1, 3.6.0, and MQ Operator SC2 3.2.0 through 3.2.13 Internet Pass-Thru could allow a malicious user to obtain sensitive information from another TLS session connection by the proxy to the same hostname and port due to improper certificate validation.

[CVE-2025-51082] [Modified: 28-07-2025] [Analyzed] [V3.1 S5.3:MEDIUM] Tenda AC8V4 V16.03.34.06` was discovered to contain stack overflow at /goform/fast_setting_wifi_set. The manipulation of the argument `timeZone` leads to stack-based buffer overflow.

[CVE-2025-51085] [Modified: 28-07-2025] [Analyzed] [V3.1 S5.3:MEDIUM] Tenda AC8V4 V16.03.34.06` was discovered to contain stack overflow at /goform/SetSysTimeCfg. The manipulation of the argument `timeZone` and `timeType` leads to stack-based buffer overflow.

[CVE-2025-51087] [Modified: 28-07-2025] [Analyzed] [V3.1 S8.6:HIGH] Tenda AC8V4 V16.03.34.06` was discovered to contain stack overflow at /goform/saveParentControlInfo. The manipulation of the argument time leads to stack-based buffer overflow.

[CVE-2025-51088] [Modified: 28-07-2025] [Analyzed] [V3.1 S5.3:MEDIUM] Tenda AC8V4 V16.03.34.06` was discovered to contain stack overflow at /goform/WifiGuestSet. The manipulation of the argument `shareSpeed` leads to stack-based buffer overflow.