Fellipe Weno

fweno.onefour.com.br

Current Conditions

São Paulo
nuvens quebradas

22 ℃

71%

Temperatura

Umidade

Fonte: OpenWeatherMap. - 13:30:02

[USD] USD 87,941.34

[BRL] BRL 485,049.26 [USD] USD 87,941.34 [GBP] GBP 65,635.37 [EUR] EUR 74,893.22
Price index provided by blockchain.info.
Disclosure of the details of a bug on 32-bit systems which may, in a rare edge case, cause the node to crash when receiving a pathological block. This bug would be extremely hard to exploit. A fix was released on October 10th 2025 in Bitcoin Core v30.0.
This issue is considered Low severity.

Details
Before writing a block to disk, Bitcoin Core checks that its size is within a normal range. This check would overflow on 32-bit systems for blocks over 1GB, and make the node crash when writing it to disk. Such a block cannot be sent using the BLOCK message, but could in theory be sent as a compact block if the victim node has a non-default large mempool which already contains 1GB of transactions. This would require the victim to have set their -maxmempool option to a value greater than 3GB, while 32-bit systems may have at most 4GiB of memory.
This issue was indirectly prevented by capping the maximum value of the -maxmempool setting on 32-bit systems.

Attribution
Pieter Wuille discovered this bug and disclosed it responsibly.
Antoine Poinsot proposed and implemented a covert mitigation.

Timeline
- 2025-04-24 - Pieter Wuille reports the issue
- 2025-05-16 - Antoine Poinsot opens PR #32530 with a covert fix
- 2025-06-26 - PR #32530 is merged into master
- 2025-09-04 - Version 29.1 is released with the fix
- 2025-10-10 - Version 30.0 is released with the fix
- 2025-10-24 - Public Disclosure

dog - 13:42:44 up 89 days, 22:14, 8 users, load average: 0.00, 0.00, 0.00

[18/12/2025 11:17] PF suspeita que senador Weverton seja sócio oculto do Careca do INSS - Revista Piauí

[18/12/2025 10:46] Quatro bancadas da Câmara acionam STF contra PL da Dosimetria - Agência Brasil

[18/12/2025 08:30] Lula lidera com folga as disputas contra Flávio, Tarcísio e Michelle; veja a nova pesquisa sobre 2026 - CartaCapital

[18/12/2025 11:57] Congresso adia para amanhã sessão para votar Orçamento de 2026 e créditos suplementares - Portal da Câmara dos Deputados

[18/12/2025 09:21] Detrans de todas as regiões do país já operam modelo da CNH do Brasil — Ministério dos Transportes - www.gov.br

[17/12/2025 22:54] Senado aprova redução de incentivos fiscais e maior tributação para bets e fintechs — Senado Notícias - Senado Federal

[18/12/2025 08:44] Trabalhadores dos Correios entram em greve em 9 estados - CNN Brasil

[17/12/2025 16:13] Enel sinaliza que está disposta a enterrar fios mediante 'estratégia compartilhada' com poder público - O Globo

[17/12/2025 11:23] Em última reunião ministerial, Lula diz que 2026 será o ano da verdade - Agência Brasil

[17/12/2025 18:03] Celso Sabino deixa o Ministério do Turismo - Agência Brasil

[CVE-2025-43749] [Modified: 16-12-2025] [Analyzed] [V3.1 S5.3:MEDIUM] Liferay Portal 7.4.0 through 7.4.3.132, and Liferay DXP 2025.Q1.0 through 2025.Q1.1, 2024.Q4.0 through 2024.Q4.7, 2024.Q3.1 through 2024.Q3.13, 2024.Q2.0 through 2024.Q2.13, 2024.Q1.1 through 2024.Q1.14 and 7.4 GA through update 92 allows unauthenticated users (guests) to access via URL files uploaded in the form and stored in document_library

[CVE-2025-54172] [Modified: 08-09-2025] [Analyzed] [V3.1 S4.8:MEDIUM] QuickCMS is vulnerable to Stored XSS in sTitle parameter in page editor functionality. Malicious attacker with admin privileges can inject arbitrary HTML and JS into website, which will be rendered/executed when visiting edited page. Regular admin user is not able to inject any JS scripts into the page. The vendor was notified early about this vulnerability, but didn't respond with the details of vulnerability or vulnerable version range. Only version 6.8 was tested and confirmed as vulnerable, other versions were not tested and might also be vulnerable.

[CVE-2025-54174] [Modified: 08-09-2025] [Analyzed] [V3.1 S4.3:MEDIUM] QuickCMS is vulnerable to Cross-Site Request Forgery in article creation functionality. Malicious attacker can craft special website, which when visited by the admin, will automatically send a POST request creating a malicious article with content defined by the attacker. The vendor was notified early about this vulnerability, but didn't respond with the details of vulnerability or vulnerable version range. Only version 6.8 was tested and confirmed as vulnerable, other versions were not tested and might also be vulnerable.

[CVE-2025-54175] [Modified: 08-09-2025] [Analyzed] [V3.1 S6.1:MEDIUM] QuickCMS.EXT is vulnerable to Reflected XSS in sFileName parameter in thumbnail viewer functionality. An attacker can craft a malicious URL that results in arbitrary JavaScript execution in the victim's browser when opened. The vendor was notified early about this vulnerability, but didn't respond with the details of vulnerability or vulnerable version range. Only version 6.8 was tested and confirmed as vulnerable, other versions were not tested and might also be vulnerable.

[CVE-2025-55483] [Modified: 21-08-2025] [Analyzed] [V3.1 S7.5:HIGH] Tenda AC6 V15.03.06.23_multi is vulnerable to Buffer Overflow in the function formSetMacFilterCfg via the parameters macFilterType and deviceList.

[CVE-2025-55499] [Modified: 21-08-2025] [Analyzed] [V3.1 S6.5:MEDIUM] Tenda AC6 V15.03.06.23_multi was discovered to contain a buffer overflow via the ntpServer parameter in the fromSetSysTime function.

[CVE-2025-55503] [Modified: 21-08-2025] [Analyzed] [V3.1 S7.3:HIGH] Tenda AC6 V15.03.06.23_multi has a stack overflow vulnerability via the deviceName parameter in the saveParentControlInfo function.

[CVE-2025-1139] [Modified: 03-09-2025] [Analyzed] [V3.1 S6.1:MEDIUM] IBM Edge Application Manager 4.5 could allow a local user to read or modify resources that they should not have authorization to access due to incorrect permission assignment.

[CVE-2025-1142] [Modified: 03-09-2025] [Analyzed] [V3.1 S5.4:MEDIUM] IBM Edge Application Manager 4.5 is vulnerable to server-side request forgery (SSRF). This may allow an authenticated attacker to send unauthorized requests from the system, potentially leading to network enumeration or facilitating other attacks.

[CVE-2025-36114] [Modified: 01-12-2025] [Analyzed] [V3.1 S6.5:MEDIUM] IBM QRadar SOAR Plugin App 1.0.0 through 5.6.0 could allow a remote attacker to traverse directories on the system. An attacker could send a specially crafted URL request containing "dot dot" sequences (/../) to view arbitrary files on the system.

[CVE-2025-43748] [Modified: 16-12-2025] [Analyzed] [V3.1 S6.8:MEDIUM] Insufficient CSRF protection for omni-administrator users in Liferay Portal 7.0.0 through 7.4.3.119, and Liferay DXP 2024.Q1.1 through 2024.Q1.6, 2023.Q4.0 through 2023.Q4.9, 2023.Q3.1 through 2023.Q3.9, 7.4 GA through update 92, 7.3 GA through update 36, and older unsupported versions allows attackers to execute Cross-Site Request Forgery

[CVE-2025-51990] [Modified: 11-09-2025] [Analyzed] [V3.1 S4.8:MEDIUM] XWiki through version 17.3.0 is affected by multiple stored Cross-Site Scripting (XSS) vulnerabilities in the Administration interface, specifically under the Presentation section of the Global Preferences panel. An authenticated administrator can inject arbitrary JavaScript payloads into the HTTP Meta Info, Footer Copyright, and Footer Version fields. These inputs are stored and subsequently rendered without proper output encoding or sanitization on public-facing pages. As a result, the injected scripts are persistently executed in the browser context of any visitor to the affected instances including both authenticated and unauthenticated users. No user interaction is required beyond visiting a page that includes the malicious content. Successful exploitation can lead to session hijacking, credential theft, unauthorized actions via session riding, or further compromise of the application through client-side attacks. The vulnerability introduces significant risk in any deployment, especially in shared or internet-facing environments where administrator credentials may be compromised.

[CVE-2025-51991] [Modified: 11-09-2025] [Analyzed] [V3.1 S8.8:HIGH] XWiki through version 17.3.0 is vulnerable to Server-Side Template Injection (SSTI) in the Administration interface, specifically within the HTTP Meta Info field of the Global Preferences Presentation section. An authenticated administrator can inject crafted Apache Velocity template code, which is rendered on the server side without proper validation or sandboxing. This enables the execution of arbitrary template logic, which may expose internal server information or, in specific configurations, lead to further exploitation such as remote code execution or sensitive data leakage. The vulnerability resides in improper handling of dynamic template rendering within user-supplied configuration fields.

[CVE-2025-55482] [Modified: 25-08-2025] [Analyzed] [V3.1 S7.5:HIGH] Tenda AC6 V15.03.06.23_multi is vulnerable to Buffer Overflow in the formSetCfm function.

[CVE-2025-55498] [Modified: 25-08-2025] [Analyzed] [V3.1 S7.5:HIGH] Tenda AC6 V15.03.06.23_multi was discovered to contain a buffer overflow via the time parameter in the fromSetSysTime function.

[CVE-2010-20103] [Modified: 24-09-2025] [Analyzed] [V3.1 S9.8:CRITICAL] A malicious backdoor was embedded in the official ProFTPD 1.3.3c source tarball distributed between November 28 and December 2, 2010. The backdoor implements a hidden FTP command trigger that, when invoked, causes the server to execute arbitrary shell commands with root privileges. This allows remote, unauthenticated attackers to run any OS command on the FTP server host.

[CVE-2025-55731] [Modified: 22-08-2025] [Analyzed] [V3.1 S8.8:HIGH] Frappe is a full-stack web application framework. A carefully crafted request could extract data that the user would normally not have access to, via SQL injection. This vulnerability is fixed in 15.74.2 and 14.96.15.

[CVE-2025-55732] [Modified: 22-08-2025] [Analyzed] [V3.1 S7.5:HIGH] Frappe is a full-stack web application framework. Prior to 15.74.2 and 14.96.15, an attacker could implement SQL injection through specially crafted requests, allowing malicious people to access sensitive information. This vulnerability is a bypass of the official patch released for CVE-2025-52895. This vulnerability is fixed in 15.74.2 and 14.96.15.

[CVE-2025-9233] [Modified: 11-09-2025] [Analyzed] [V3.1 S3.5:LOW] A security vulnerability has been detected in Scada-LTS up to 2.7.8.1. Impacted is an unknown function of the file view_edit.shtm. The manipulation of the argument Name leads to cross site scripting. Remote exploitation of the attack is possible. The exploit has been disclosed publicly and may be used.

[CVE-2025-20269] [Modified: 10-09-2025] [Analyzed] [V3.1 S6.5:MEDIUM] A vulnerability in the web-based management interface of Cisco Evolved Programmable Network Manager (EPNM) and Cisco Prime Infrastructure could allow an authenticated, low-privileged, remote attacker to retrieve arbitrary files from the underlying file system on an affected device. This vulnerability is due to insufficient input validation for specific HTTP requests. An attacker could exploit this vulnerability by sending crafted HTTP requests to the web-based management interface on an affected device. A successful exploit could allow the attacker to access sensitive files from the affected device.