Fellipe Weno

fweno.onefour.com.br

Current Conditions

São Paulo
céu pouco nublado

18 ℃

82%

Temperatura

Umidade

Fonte: OpenWeatherMap. - 21:30:02

[USD] USD 95,211.25

[BRL] BRL 504,276.87 [USD] USD 95,211.25 [GBP] GBP 72,348.94 [EUR] EUR 81,905.67
Price index provided by blockchain.info.
Disclosure of the details of a bug on 32-bit systems which may, in a rare edge case, cause the node to crash when receiving a pathological block. This bug would be extremely hard to exploit. A fix was released on October 10th 2025 in Bitcoin Core v30.0.
This issue is considered Low severity.

Details
Before writing a block to disk, Bitcoin Core checks that its size is within a normal range. This check would overflow on 32-bit systems for blocks over 1GB, and make the node crash when writing it to disk. Such a block cannot be sent using the BLOCK message, but could in theory be sent as a compact block if the victim node has a non-default large mempool which already contains 1GB of transactions. This would require the victim to have set their -maxmempool option to a value greater than 3GB, while 32-bit systems may have at most 4GiB of memory.
This issue was indirectly prevented by capping the maximum value of the -maxmempool setting on 32-bit systems.

Attribution
Pieter Wuille discovered this bug and disclosed it responsibly.
Antoine Poinsot proposed and implemented a covert mitigation.

Timeline
- 2025-04-24 - Pieter Wuille reports the issue
- 2025-05-16 - Antoine Poinsot opens PR #32530 with a covert fix
- 2025-06-26 - PR #32530 is merged into master
- 2025-09-04 - Version 29.1 is released with the fix
- 2025-10-10 - Version 30.0 is released with the fix
- 2025-10-24 - Public Disclosure

dog - 21:33:40 up 56 days, 6:04, 4 users, load average: 0.00, 0.00, 0.00

[14/11/2025 18:48] Trump assina ordem executiva reduzindo tarifas de carne, tomates, café e bananas - O Globo

[14/11/2025 16:33] Supremo forma maioria para tornar Eduardo Bolsonaro réu por coação à Justiça - Correio Braziliense

[14/11/2025 13:56] Integrantes do governo Lula projetam avanço em negociações sobre tarifaço, mas veem fim de sanções a brasileiros com ceticismo - O Globo

[14/11/2025 18:31] Mulher que indicou assassino de mãe para madrasta é presa no RJ - CNN Brasil

[14/11/2025 17:12] Crusoé: Lula reclama de "manter um jovem na cadeia por falta de oportunidade" - O Antagonista

[14/11/2025 19:10] PF considera como foragido presidente de associação apontado como líder do esquema do INSS - Folha de S.Paulo

[14/11/2025 13:27] "Meu neto só chora": animais de estimação somem após explosão no Tatuapé - CNN Brasil

[14/11/2025 16:33] Espancamento, Rei do Pastel, investigação: veja o que se sabe sobre morte de mulher trans em BH - O TEMPO

[14/11/2025 07:41] Rompimento de Mariana: mineradora é responsabilizada pela Justiça inglesa - Estado de Minas

[14/11/2025 11:02] Como o governo Lula ‘virou o jogo’ no debate do PL Antifacção na Câmara - CartaCapital

[CVE-2025-7755] [Modified: 30-07-2025] [Analyzed] [V3.1 S6.3:MEDIUM] A vulnerability was found in code-projects Online Ordering System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /admin/edit_product.php. The manipulation of the argument image leads to unrestricted upload. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.

[CVE-2025-7756] [Modified: 23-10-2025] [Analyzed] [V3.1 S4.3:MEDIUM] A vulnerability classified as problematic has been found in code-projects E-Commerce Site 1.0. Affected is an unknown function. The manipulation leads to cross-site request forgery. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.

[CVE-2025-7757] [Modified: 30-07-2025] [Analyzed] [V3.1 S7.3:HIGH] A vulnerability classified as critical was found in PHPGurukul Land Record System 1.0. Affected by this vulnerability is an unknown functionality of the file /edit-property.php. The manipulation of the argument editid leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.

[CVE-2025-7758] [Modified: 23-07-2025] [Analyzed] [V3.1 S8.8:HIGH] A vulnerability, which was classified as critical, has been found in TOTOLINK T6 up to 4.1.5cu.748_B20211015. Affected by this issue is the function setDiagnosisCfg of the file /cgi-bin/cstecgi.cgi of the component HTTP POST Request Handler. The manipulation of the argument ip leads to buffer overflow. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.

[CVE-2025-7762] [Modified: 23-07-2025] [Analyzed] [V3.1 S8.8:HIGH] A vulnerability, which was classified as critical, has been found in D-Link DI-8100 16.07.26A1. This issue affects some unknown processing of the file /menu_nat_more.asp of the component HTTP Request Handler. The manipulation leads to stack-based buffer overflow. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.

[CVE-2025-7763] [Modified: 25-08-2025] [Analyzed] [V3.1 S4.3:MEDIUM] A vulnerability, which was classified as problematic, was found in thinkgem JeeSite up to 5.12.0. Affected is the function select of the file src/main/java/com/jeesite/modules/cms/web/SiteController.java of the component Site Controller. The manipulation of the argument redirect leads to open redirect. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The patch is identified as 3d06b8d009d0267f0255acc87ea19d29d07cedc3. It is recommended to apply a patch to fix this issue.

[CVE-2025-7764] [Modified: 29-07-2025] [Analyzed] [V3.1 S7.3:HIGH] A vulnerability classified as critical has been found in code-projects Online Appointment Booking System 1.0. Affected is an unknown function of the file /admin/deletedoctorclinic.php. The manipulation of the argument clinic leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.

[CVE-2025-7765] [Modified: 29-07-2025] [Analyzed] [V3.1 S7.3:HIGH] A vulnerability classified as critical was found in code-projects Online Appointment Booking System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/addmanagerclinic.php. The manipulation of the argument clinic leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.

[CVE-2025-7767] [Modified: 29-07-2025] [Analyzed] [V3.1 S3.5:LOW] A vulnerability, which was classified as problematic, has been found in PHPGurukul Art Gallery Management System 1.1. Affected by this issue is some unknown functionality of the file /admin/edit-art-medium-detail.php. The manipulation of the argument artmed leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.

[CVE-2024-27779] [Modified: 22-07-2025] [Analyzed] [V3.1 S6.7:MEDIUM] An insufficient session expiration vulnerability [CWE-613] in FortiSandbox FortiSandbox version 4.4.4 and below, version 4.2.6 and below, 4.0 all versions, 3.2 all versions and FortiIsolator version 2.4 and below, 2.3 all versions, 2.2 all versions, 2.1 all versions, 2.0 all versions, 1.2 all versions may allow a remote attacker in possession of an admin session cookie to keep using that admin's session even after the admin user was deleted.

[CVE-2024-32124] [Modified: 22-07-2025] [Analyzed] [V3.1 S4.3:MEDIUM] An improper access control vulnerability [CWE-284] in FortiIsolator version 2.4.4, version 2.4.3, 2.3 all versions logging component may allow a remote authenticated read-only attacker to alter logs via a crafted HTTP request.

[CVE-2025-6226] [Modified: 02-10-2025] [Analyzed] [V3.1 S6.5:MEDIUM] Mattermost versions 10.5.x <= 10.5.6, 10.8.x <= 10.8.1, 10.7.x <= 10.7.3, 9.11.x <= 9.11.16 fail to verify authorization when retrieving cached posts by PendingPostID which allows an authenticated user to read posts in private channels they don't have access to via guessing the PendingPostID of recently created posts.

[CVE-2025-6233] [Modified: 02-10-2025] [Analyzed] [V3.1 S6.8:MEDIUM] Mattermost versions 10.8.x <= 10.8.1, 10.7.x <= 10.7.3, 10.5.x <= 10.5.7, 9.11.x <= 9.11.16 fail to sanitize input paths of file attachments in the bulk import JSONL file, which allows a system admin to read arbitrary system files via path traversal.

[CVE-2025-6227] [Modified: 14-10-2025] [Analyzed] [V3.1 S2.2:LOW] Mattermost versions 10.5.x <= 10.5.7, 9.11.x <= 9.11.16 fail to negotiate a new token when accepting the invite which allows a user that intercepts both invite and password to send synchronization payloads to the server that originally created the invite via the REST API.

[CVE-2025-7785] [Modified: 25-08-2025] [Analyzed] [V3.1 S4.3:MEDIUM] A vulnerability classified as problematic was found in thinkgem JeeSite up to 5.12.0. This vulnerability affects the function sso of the file src/main/java/com/jeesite/modules/sys/web/SsoController.java. The manipulation of the argument redirect leads to open redirect. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The patch is identified as 3d06b8d009d0267f0255acc87ea19d29d07cedc3. It is recommended to apply a patch to fix this issue.

[CVE-2025-46001] [Modified: 14-10-2025] [Analyzed] [V3.1 S9.8:CRITICAL] An arbitrary file upload vulnerability in the is_allowed_file_type() function of Filemanager v2.3.0 allows attackers to execute arbitrary code via uploading a crafted PHP file.

[CVE-2025-46002] [Modified: 14-10-2025] [Analyzed] [V3.1 S6.5:MEDIUM] An issue in Filemanager v2.5.0 and below allows attackers to execute a directory traversal via sending a crafted HTTP request to the filemanager.php endpoint.

[CVE-2025-7784] [Modified: 11-08-2025] [Analyzed] [V3.1 S6.5:MEDIUM] A flaw was found in the Keycloak identity and access management system when Fine-Grained Admin Permissions(FGAPv2) are enabled. An administrative user with the manage-users role can escalate their privileges to realm-admin due to improper privilege enforcement. This vulnerability allows unauthorized elevation of access rights, compromising the intended separation of administrative duties and posing a security risk to the realm.

[CVE-2025-7786] [Modified: 04-09-2025] [Analyzed] [V3.1 S3.5:LOW] A vulnerability, which was classified as problematic, has been found in Gnuboard g6 up to 6.0.10. This issue affects some unknown processing of the file /bbs/scrap_popin_update/qa/ of the component Post Reply Handler. The manipulation leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.

[CVE-2025-46000] [Modified: 14-10-2025] [Analyzed] [V3.1 S6.5:MEDIUM] An arbitrary file upload vulnerability in the component /rsc/filemanager.rsc.class.php of Filemanager commit c75b914 v.2.5.0 allows attackers to execute arbitrary code via uploading a crafted SVG file.