Fellipe Weno

fweno.onefour.com.br

Current Conditions

São Paulo
céu limpo

13 ℃

86%

Temperatura

Umidade

Fonte: OpenWeatherMap. - 02:00:01

[USD] USD 63,232.88

[BRL] BRL 329,089.17 [USD] USD 63,232.88 [GBP] GBP 47,328.04 [EUR] EUR 54,753.35
Price index provided by blockchain.info.
After Bitcoin Core 0.14.0 and before Bitcoin Core 29.0, validating a specially-crafted block may cause the node to access previously freed memory.
During validation, necessary data required for checking inputs for each transaction is pre-calculated and cached. For specially crafted invalid blocks, it was possible for this data to be destroyed while it was still being accessed by a background validation thread. An attacker capable of mining a block with sufficient proof-of-work could have exploited this to crash victim nodes. Because of the nature of use-after-free bugs, it is possible that the crash could have been used for remote code execution, though constraints on the input (block) data make this unlikely.
This issue is considered High severity.

Details
By default, script validation for new blocks is dispatched to background threads via a vector of CScriptCheck functors. Each CScriptCheck holds a pointer to a PrecomputedTransactionData object which stores some data needed by each input in the transaction. Because it stores a pointer and not the data itself, care must be taken to ensure that the PrecomputedTransactionData outlives the CScriptCheck.
The script checks lifetime is enforced by an RAII class, CCheckQueueControl. However, the control is intantiated before the precomputed transaction data. Because local objects in C++ are destructed in reverse order of construction, this means the vector of PrecomputedTransactionData is destroyed before the CCheckQueueControl.
This is not an issue when the block is valid, as CCheckQueueControl::Wait() will be called before the function returns and the PrecomputedTransactionData gets destroyed. However, in case of an early return (when a separate check fails) a background script thread may read the precomputed transaction data after it was destroyed. An attacker could exploit this to crash victim nodes at the expense of a valid PoW at tip.

Attribution
Cory Fields (MIT DCI) discovered this vulnerability and responsibly disclosed it in a detailed report containing a proof of concept for reproduction and a proposed mitigation.

Timeline
- 2024-11-02 Cory Fields privately reports the bug
- 2024-11-06 Pieter Wuille pushes a covert fix to already open PR #31112 which works around the issue by removing the early returns
- 2024-12-03 PR #31112 is merged
- 2025-04-12 Bitcoin Core version 29.0 is released with a fix
- 2026-04-19 The last vulnerable Bitcoin Core version (28.x) goes end of life
- 2026-05-05 Public disclosure.

dog - 02:20:02 up 262 days, 10:51, 5 users, load average: 0.00, 0.00, 0.00

[08/06/2026 18:37] Eleição no Peru: Siga a reta final da apuração em tempo real - CNN Brasil

[08/06/2026 23:18] Nunes Marques acata pedido de Flávio Bolsonaro e suspende divulgação de pesquisa eleitoral - Valor Econômico

[08/06/2026 20:22] Atenção para virada radical de tempo em SP - Climatempo

[08/06/2026 17:58] O que se sabe sobre os casos adversos de vacina do Butantan - Poder360

[08/06/2026 10:30] Após alerta de Trump, Irã anuncia 'interrupção' de ataques contra Israel - Correio Braziliense

[08/06/2026 19:07] PF manifesta incômodo com conteúdo da delação de Vorcaro - Revista Oeste

[08/06/2026 00:00] Comissão da Câmara vota redução da maioridade penal e amplia pressão sobre o governo na segurança pública - O Globo

[08/06/2026 13:20] Alckmin anuncia R$ 35 bilhões em crédito para tratores e caminhões - Brasil 247

[08/06/2026 10:24] Flávio Bolsonaro sobre veto à carne: ‘Problema do Lula que vou resolver’ - Estado de Minas

[08/06/2026 14:34] Janja rebate Silas Malafaia após crítica à encontro da primeira-dama com evangélicas: 'Insignificante é ele' - O Globo

[CVE-2026-2200] [Modified: 29-04-2026] [Analyzed] [V3.1 S2.4:LOW] A weakness has been identified in heyewei JFinalCMS 5.0.0. This affects an unknown function of the file /admin/admin/save of the component API Endpoint. Executing a manipulation can lead to cross site scripting. The attack can be launched remotely. The exploit has been made available to the public and could be used for attacks.

[CVE-2026-2201] [Modified: 29-04-2026] [Analyzed] [V3.1 S2.4:LOW] A security vulnerability has been detected in ZeroWdd studentmanager up to 2151560fc0a50ec00426785ec1e01a3763b380d9. This impacts the function addLeave of the file src/main/java/com/wdd/studentmanager/controller/LeaveController.java. The manipulation of the argument Reason for Leave leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed publicly and may be used. This product uses a rolling release model to deliver continuous updates. As a result, specific version information for affected or updated releases is not available. The code repository of the project has not been active for many years.

[CVE-2026-2202] [Modified: 10-02-2026] [Analyzed] [V3.1 S8.8:HIGH] A vulnerability was detected in Tenda AC8 16.03.33.05. Affected is the function fromSetWifiGusetBasic of the file /goform/WifiGuestSet of the component httpd. The manipulation of the argument shareSpeed results in buffer overflow. The attack may be launched remotely. The exploit is now public and may be used.

[CVE-2026-2203] [Modified: 10-02-2026] [Analyzed] [V3.1 S8.8:HIGH] A flaw has been found in Tenda AC8 16.03.33.05. Affected by this vulnerability is an unknown functionality of the file /goform/fast_setting_wifi_set of the component Embedded Httpd Service. This manipulation of the argument timeZone causes buffer overflow. Remote exploitation of the attack is possible. The exploit has been published and may be used.

[CVE-2026-2210] [Modified: 11-02-2026] [Analyzed] [V3.1 S7.2:HIGH] A vulnerability has been found in D-Link DIR-823X 250416. This affects the function sub_4211C8 of the file /goform/set_filtering. Such manipulation leads to os command injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.

[CVE-2025-66601] [Modified: 05-03-2026] [Analyzed] [V3.1 S6.1:MEDIUM] A vulnerability has been found in FAST/TOOLS provided by Yokogawa Electric Corporation. This product does not specify MIME types. When an attacker performs a content sniffing attack, malicious scripts could be executed. The affected products and versions are as follows: FAST/TOOLS (Packages: RVSVRN, UNSVRN, HMIWEB, FTEES, HMIMOB) R9.01 to R10.04

[CVE-2025-66602] [Modified: 05-03-2026] [Analyzed] [V3.1 S9.8:CRITICAL] A vulnerability has been found in FAST/TOOLS provided by Yokogawa Electric Corporation. The web server accepts access by IP address. When a worm that randomly searches for IP addresses intrudes into the network, it could potentially be attacked by the worm. The affected products and versions are as follows: FAST/TOOLS (Packages: RVSVRN, UNSVRN, HMIWEB, FTEES, HMIMOB) R9.01 to R10.04

[CVE-2025-66603] [Modified: 05-03-2026] [Analyzed] [V3.1 S9.8:CRITICAL] A vulnerability has been found in FAST/TOOLS provided by Yokogawa Electric Corporation. The web server accepts the OPTIONS method. An attacker could potentially use this information to carry out other attacks. The affected products and versions are as follows: FAST/TOOLS (Packages: RVSVRN, UNSVRN, HMIWEB, FTEES, HMIMOB) R9.01 to R10.04

[CVE-2025-66604] [Modified: 05-03-2026] [Analyzed] [V3.1 S5.3:MEDIUM] A vulnerability has been found in FAST/TOOLS provided by Yokogawa Electric Corporation. The library version could be displayed on the web page. This information could be exploited by an attacker for other attacks. The affected products and versions are as follows: FAST/TOOLS (Packages: RVSVRN, UNSVRN, HMIWEB, FTEES, HMIMOB) R9.01 to R10.04

[CVE-2025-66605] [Modified: 05-03-2026] [Analyzed] [V3.1 S5.3:MEDIUM] A vulnerability has been found in FAST/TOOLS provided by Yokogawa Electric Corporation. Since there are input fields on this webpage with the autocomplete attribute enabled, the input content could be saved in the browser the user is using. The affected products and versions are as follows: FAST/TOOLS (Packages: RVSVRN, UNSVRN, HMIWEB, FTEES, HMIMOB) R9.01 to R10.04

[CVE-2025-66606] [Modified: 05-03-2026] [Analyzed] [V3.1 S9.6:CRITICAL] A vulnerability has been found in FAST/TOOLS provided by Yokogawa Electric Corporation. This product does not properly encode URLs. An attacker could tamper with web pages or execute malicious scripts. The affected products and versions are as follows: FAST/TOOLS (Packages: RVSVRN, UNSVRN, HMIWEB, FTEES, HMIMOB) R9.01 to R10.04

[CVE-2025-66607] [Modified: 06-03-2026] [Analyzed] [V3.1 S5.3:MEDIUM] A vulnerability has been found in FAST/TOOLS provided by Yokogawa Electric Corporation. The response header contains an insecure setting. Users could be redirected to malicious sites by an attacker. The affected products and versions are as follows: FAST/TOOLS (Packages: RVSVRN, UNSVRN, HMIWEB, FTEES, HMIMOB) R9.01 to R10.04

[CVE-2025-66608] [Modified: 06-03-2026] [Analyzed] [V3.1 S7.5:HIGH] A vulnerability has been found in FAST/TOOLS provided by Yokogawa Electric Corporation. This product does not properly validate URLs. An attacker could send specially crafted requests to steal files from the web server. The affected products and versions are as follows: FAST/TOOLS (Packages: RVSVRN, UNSVRN, HMIWEB, FTEES, HMIMOB) R9.01 to R10.04

[CVE-2026-2211] [Modified: 29-04-2026] [Analyzed] [V3.1 S7.3:HIGH] A vulnerability was determined in code-projects Online Music Site 1.0. Affected is an unknown function of the file /Administrator/PHP/AdminDeleteCategory.php. Executing a manipulation of the argument ID can lead to sql injection. The attack can be executed remotely. The exploit has been publicly disclosed and may be utilized.

[CVE-2026-2212] [Modified: 29-04-2026] [Analyzed] [V3.1 S7.3:HIGH] A vulnerability was identified in code-projects Online Music Site 1.0. Affected by this vulnerability is an unknown functionality of the file /Administrator/PHP/AdminEditCategory.php. The manipulation of the argument ID leads to sql injection. The attack is possible to be carried out remotely. The exploit is publicly available and might be used.

[CVE-2025-66594] [Modified: 06-03-2026] [Analyzed] [V3.1 S5.3:MEDIUM] A vulnerability has been found in FAST/TOOLS provided by Yokogawa Electric Corporation. Detailed messages are displayed on the error page. This information could be exploited by an attacker for other attacks. The affected products and versions are as follows: FAST/TOOLS (Packages: RVSVRN, UNSVRN, HMIWEB, FTEES, HMIMOB) R9.01 to R10.04

[CVE-2025-66595] [Modified: 06-03-2026] [Analyzed] [V3.1 S5.4:MEDIUM] A vulnerability has been found in FAST/TOOLS provided by Yokogawa Electric Corporation. This product is vulnerable to Cross-Site Request Forgery (CSRF). When a user accesses a link crafted by an attacker, the user’s account could be compromised. The affected products and versions are as follows: FAST/TOOLS (Packages: RVSVRN, UNSVRN, HMIWEB, FTEES, HMIMOB) R9.01 to R10.04

[CVE-2025-66596] [Modified: 06-03-2026] [Analyzed] [V3.1 S6.1:MEDIUM] A vulnerability has been found in FAST/TOOLS provided by Yokogawa Electric Corporation. This product does not properly validate request headers. When an attacker inserts an invalid host header, users could be redirected to malicious sites. The affected products and versions are as follows: FAST/TOOLS (Packages: RVSVRN, UNSVRN, HMIWEB, FTEES, HMIMOB) R9.01 to R10.04

[CVE-2025-66597] [Modified: 06-03-2026] [Analyzed] [V3.1 S7.5:HIGH] A vulnerability has been found in FAST/TOOLS provided by Yokogawa Electric Corporation. This product supports weak cryptographic algorithms, potentially allowing an attacker to decrypt communications with the web server. The affected products and versions are as follows: FAST/TOOLS (Packages: RVSVRN, UNSVRN, HMIWEB, FTEES, HMIMOB) R9.01 to R10.04

[CVE-2025-66598] [Modified: 06-03-2026] [Analyzed] [V3.1 S7.5:HIGH] A vulnerability has been found in FAST/TOOLS provided by Yokogawa Electric Corporation. This product supports old SSL/TLS versions, potentially allowing an attacker to decrypt communications with the web server. The affected products and versions are as follows: FAST/TOOLS (Packages: RVSVRN, UNSVRN, HMIWEB, FTEES, HMIMOB) R9.01 to R10.04