Fellipe Weno

fweno.onefour.com.br

Current Conditions

São Paulo
nuvens quebradas

16 ℃

81%

Temperatura

Umidade

Fonte: OpenWeatherMap. - 05:00:02

[USD] USD 91,876.03

[BRL] BRL 488,973.44 [USD] USD 91,876.03 [GBP] GBP 69,893.87 [EUR] EUR 79,281.76
Price index provided by blockchain.info.
Disclosure of the details of a bug on 32-bit systems which may, in a rare edge case, cause the node to crash when receiving a pathological block. This bug would be extremely hard to exploit. A fix was released on October 10th 2025 in Bitcoin Core v30.0.
This issue is considered Low severity.

Details
Before writing a block to disk, Bitcoin Core checks that its size is within a normal range. This check would overflow on 32-bit systems for blocks over 1GB, and make the node crash when writing it to disk. Such a block cannot be sent using the BLOCK message, but could in theory be sent as a compact block if the victim node has a non-default large mempool which already contains 1GB of transactions. This would require the victim to have set their -maxmempool option to a value greater than 3GB, while 32-bit systems may have at most 4GiB of memory.
This issue was indirectly prevented by capping the maximum value of the -maxmempool setting on 32-bit systems.

Attribution
Pieter Wuille discovered this bug and disclosed it responsibly.
Antoine Poinsot proposed and implemented a covert mitigation.

Timeline
- 2025-04-24 - Pieter Wuille reports the issue
- 2025-05-16 - Antoine Poinsot opens PR #32530 with a covert fix
- 2025-06-26 - PR #32530 is merged into master
- 2025-09-04 - Version 29.1 is released with the fix
- 2025-10-10 - Version 30.0 is released with the fix
- 2025-10-24 - Public Disclosure

dog - 05:03:15 up 60 days, 13:34, 4 users, load average: 0.00, 0.00, 0.00

[18/11/2025 18:55] Gleisi diz que 6º relatório de Derrite ainda é 'lambança', enfraquece PF e dificulta combate às facções - O Globo

[18/11/2025 17:16] Pacheco diz a Lula que encerrará carreira política em 2026 e PT busca 'plano B' para disputa em Minas - CartaCapital

[18/11/2025 16:20] MEC aciona PF e anula três questões do segundo dia do Enem - Correio Braziliense

[18/11/2025 12:02] Faltou tempo para chanceler conhecer 'beleza deslumbrante' da Amazônia, diz governo alemão após crítica a Belém - BBC

[18/11/2025 12:14] Moraes vota para condenar nove dos dez réus do núcleo 3 da trama golpista - CNN Brasil

[18/11/2025 20:25] Dono do Banco Master vai cooperar com as autoridades, diz defesa - Poder360

[18/11/2025 20:12] Bolsonaro não tem medo da Papuda, diz Magno Malta - Poder360

[18/11/2025 06:23] PM entra armada em escola em SP após queixa de pai sobre desenho de orixá - CartaCapital

[18/11/2025 02:00] Defesa de Bolsonaro projeta prisão do ex-presidente na próxima semana Vídeo - Metrópoles

[18/11/2025 07:37] Quem é Andrei Rodrigues, diretor da PF que será ouvido pela CPI do Crime Organizado nesta terça - CartaCapital

[CVE-2025-38352] [Modified: 04-11-2025] [Analyzed] [V3.1 S7.4:HIGH] In the Linux kernel, the following vulnerability has been resolved: posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del() If an exiting non-autoreaping task has already passed exit_notify() and calls handle_posix_cpu_timers() from IRQ, it can be reaped by its parent or debugger right after unlock_task_sighand(). If a concurrent posix_cpu_timer_del() runs at that moment, it won't be able to detect timer->it.cpu.firing != 0: cpu_timer_task_rcu() and/or lock_task_sighand() will fail. Add the tsk->exit_state check into run_posix_cpu_timers() to fix this. This fix is not needed if CONFIG_POSIX_CPU_TIMERS_TASK_WORK=y, because exit_task_work() is called before exit_notify(). But the check still makes sense, task_work_add(&tsk->posix_cputimers_work.work) will fail anyway in this case.

[CVE-2025-7900] [Modified: 07-10-2025] [Analyzed] [V3.1 S6.5:MEDIUM] The femanager extension for TYPO3 allows Insecure Direct Object Reference resulting in unauthorized modification of userdata. This issue affects femanager version 6.4.1 and below, 7.0.0 to 7.5.2 and 8.0.0 to 8.3.0

[CVE-2025-8017] [Modified: 01-08-2025] [Analyzed] [V3.1 S8.8:HIGH] A vulnerability was found in Tenda AC7 15.03.06.44. It has been classified as critical. Affected is the function formSetMacFilterCfg of the file /goform/setMacFilterCfg of the component httpd. The manipulation of the argument deviceList leads to stack-based buffer overflow. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.

[CVE-2025-8018] [Modified: 29-07-2025] [Analyzed] [V3.1 S6.3:MEDIUM] A vulnerability was found in code-projects Food Ordering Review System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /user/reservation_page.php. The manipulation of the argument reg_Id leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Other parameters might be affected as well.

[CVE-2025-51463] [Modified: 11-09-2025] [Analyzed] [V3.1 S7.0:HIGH] Path Traversal in restore_run_backup() in AIM 3.28.0 allows remote attackers to write arbitrary files to the server's filesystem via a crafted backup tar file submitted to the run_instruction API, which is extracted without path validation during restoration.

[CVE-2025-51480] [Modified: 08-10-2025] [Analyzed] [V3.1 S8.8:HIGH] Path Traversal vulnerability in onnx.external_data_helper.save_external_data in ONNX 1.17.0 allows attackers to overwrite arbitrary files by supplying crafted external_data.location paths containing traversal sequences, bypassing intended directory restrictions.

[CVE-2025-8019] [Modified: 20-08-2025] [Analyzed] [V3.1 S8.8:HIGH] A vulnerability was found in Shenzhen Libituo Technology LBT-T300-T310 2.2.3.6. It has been rated as critical. Affected by this issue is the function sub_40B6F0 of the file at/appy.cgi. The manipulation of the argument wan_proto leads to buffer overflow. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.

[CVE-2025-51481] [Modified: 07-10-2025] [Analyzed] [V3.1 S6.6:MEDIUM] Local File Inclusion in dagster._grpc.impl.get_notebook_data in Dagster 1.10.14 allows attackers with access to the gRPC server to read arbitrary files by supplying path traversal sequences in the notebook_path field of ExternalNotebookData requests, bypassing the intended extension-based check.

[CVE-2025-51482] [Modified: 07-10-2025] [Analyzed] [V3.1 S8.8:HIGH] Remote Code Execution in letta.server.rest_api.routers.v1.tools.run_tool_from_source in letta-ai Letta 0.7.12 allows remote attackers to execute arbitrary Python code and system commands via crafted payloads to the /v1/tools/run endpoint, bypassing intended sandbox restrictions.

[CVE-2025-6523] [Modified: 08-10-2025] [Analyzed] [V3.1 S7.7:HIGH] Use of weak credentials in emergency authentication component in Devolutions Server allows an unauthenticated attacker to bypass authentication via brute forcing the short emergency codes generated by the server within a feasible timeframe. This issue affects the following versions : * Devolutions Server 2025.2.2.0 through 2025.2.3.0 * Devolutions Server 2025.1.11.0 and earlier

[CVE-2025-6741] [Modified: 08-10-2025] [Analyzed] [V3.1 S7.7:HIGH] Improper access control in secure message component in Devolutions Server allows an authenticated user to steal unauthorized entries via the secure message entry attachment feature This issue affects the following versions : * Devolutions Server 2025.2.2.0 through 2025.2.4.0 * Devolutions Server 2025.1.11.0 and earlier

[CVE-2024-38335] [Modified: 14-08-2025] [Analyzed] [V3.1 S4.5:MEDIUM] IBM Security QRadar Network Threat Analytics 1.0.0 through 1.3.1 could allow a privileged user to cause a denial of service due to improper allocation of resources.

[CVE-2025-51464] [Modified: 11-09-2025] [Analyzed] [V3.1 S8.8:HIGH] Cross-site Scripting (XSS) in aimhubio Aim 3.28.0 allows remote attackers to execute arbitrary JavaScript in victims browsers via malicious Python code submitted to the /api/reports endpoint, which is interpreted and executed by Pyodide when the report is viewed. No sanitisation or sandbox restrictions prevent JavaScript execution via pyodide.code.run_js().

[CVE-2025-51459] [Modified: 11-09-2025] [Analyzed] [V3.1 S6.5:MEDIUM] File Upload vulnerability in agent.hub.controller.refresh_plugins in eosphoros-ai DB-GPT 0.7.0 allows remote attackers to execute arbitrary code via a malicious plugin ZIP file uploaded to the /v1/personal/agent/upload endpoint, interacting with plugin_hub._sanitize_filename and plugins_util.scan_plugins.

[CVE-2025-51479] [Modified: 09-10-2025] [Analyzed] [V3.1 S5.4:MEDIUM] Authorization bypass in update_user_group in onyx-dot-app Onyx Enterprise Edition 0.27.0 allows remote authenticated attackers to modify arbitrary user groups via crafted PATCH requests to the /api/manage/admin/user-group/id endpoint, bypassing intended curator-group assignment checks.

[CVE-2025-51458] [Modified: 11-09-2025] [Analyzed] [V3.1 S6.5:MEDIUM] SQL Injection in editor_sql_run and query_ex in eosphoros-ai DB-GPT 0.7.0 allows remote attackers to execute arbitrary SQL statements via crafted input passed to the /v1/editor/sql/run or /v1/editor/chart/run endpoints, interacting with api_editor_v1.editor_sql_run, editor_chart_run, and datasource.rdbms.base.query_ex.

[CVE-2025-51472] [Modified: 09-10-2025] [Analyzed] [V3.1 S6.5:MEDIUM] Code Injection in AgentTemplate.eval_agent_config in TransformerOptimus SuperAGI 0.0.14 allows remote attackers to execute arbitrary Python code via malicious values in agent template configurations such as the goal, constraints, or instruction field, which are evaluated using eval() without validation during template loading or updates.

[CVE-2025-51475] [Modified: 09-10-2025] [Analyzed] [V3.1 S5.0:MEDIUM] Arbitrary File Overwrite (AFO) in superagi.controllers.resources.upload in TransformerOptimus SuperAGI 0.0.14 allows remote attackers to overwrite arbitrary files via unsanitised filenames submitted to the file upload endpoint, due to improper handling of directory traversal in os.path.join() and lack of path validation in get_root_input_dir().

[CVE-2025-51462] [Modified: 09-10-2025] [Analyzed] [V3.1 S6.1:MEDIUM] Stored Cross-site Scripting (XSS) vulnerability in api.apps.dialog_app.set_dialog in RAGFlow 0.17.2 allows remote attackers to execute arbitrary JavaScript via crafted input to the assistant greeting field, which is stored unsanitised and rendered using a markdown component with rehype-raw.

[CVE-2025-8037] [Modified: 28-07-2025] [Analyzed] [V3.1 S9.1:CRITICAL] Setting a nameless cookie with an equals sign in the value shadowed other cookies. Even if the nameless cookie was set over HTTP and the shadowed cookie included the `Secure` attribute. This vulnerability affects Firefox < 141, Firefox ESR < 140.1, Thunderbird < 141, and Thunderbird < 140.1.