Fellipe Weno

fweno.onefour.com.br

Current Conditions

São Paulo
nuvens quebradas

23 ℃

73%

Temperatura

Umidade

Fonte: OpenWeatherMap. - 17:30:01

[USD] USD 84,670.79

[BRL] BRL 457,560.95 [USD] USD 84,670.79 [GBP] GBP 64,629.30 [EUR] EUR 73,502.12
Price index provided by blockchain.info.
Disclosure of the details of a bug on 32-bit systems which may, in a rare edge case, cause the node to crash when receiving a pathological block. This bug would be extremely hard to exploit. A fix was released on October 10th 2025 in Bitcoin Core v30.0.
This issue is considered Low severity.

Details
Before writing a block to disk, Bitcoin Core checks that its size is within a normal range. This check would overflow on 32-bit systems for blocks over 1GB, and make the node crash when writing it to disk. Such a block cannot be sent using the BLOCK message, but could in theory be sent as a compact block if the victim node has a non-default large mempool which already contains 1GB of transactions. This would require the victim to have set their -maxmempool option to a value greater than 3GB, while 32-bit systems may have at most 4GiB of memory.
This issue was indirectly prevented by capping the maximum value of the -maxmempool setting on 32-bit systems.

Attribution
Pieter Wuille discovered this bug and disclosed it responsibly.
Antoine Poinsot proposed and implemented a covert mitigation.

Timeline
- 2025-04-24 - Pieter Wuille reports the issue
- 2025-05-16 - Antoine Poinsot opens PR #32530 with a covert fix
- 2025-06-26 - PR #32530 is merged into master
- 2025-09-04 - Version 29.1 is released with the fix
- 2025-10-10 - Version 30.0 is released with the fix
- 2025-10-24 - Public Disclosure

dog - 17:43:00 up 64 days, 2:14, 4 users, load average: 0.00, 0.00, 0.00

[22/11/2025 16:07] Bolsonaro é preso por risco de fuga após violação de tornozeleira e Flávio convocar vigília: o que acontece agora? - BBC

[22/11/2025 06:00] Análise: Plano de paz de Trump dá à Rússia quase tudo o que ela quer - CNN Brasil

[22/11/2025 00:04] Ex-aliada de Trump anuncia renúncia devido a divergências sobre o caso Epstein - Estadão

[21/11/2025 19:59] Crise diplomática: como a China está usando a cultura e a economia para atingir o Japão - Gazeta do Povo

[21/11/2025 20:00] “Concordamos em mais do que imaginaria”, diz Trump sobre Mamdani - Poder360

[22/11/2025 13:47] Vorcaro rebate acusações e diz que não há fraude de R$ 12 bilhões - Metrópoles

[22/11/2025 10:30] Salão do Automóvel 2025 abre as portas: veja ingressos, horários e atrações - UOL

[22/11/2025 04:00] Ex-presidente do BRB se pronuncia sobre investigações da Polícia Federal - Correio Braziliense

[22/11/2025 05:00] 13º salário: confira o calendário de pagamento da gratificação dos servidores municipais, estaduais e federais - Extra online

[21/11/2025 11:19] iPhone 17e pode chegar em breve com algumas configurações conhecidas - TudoCelular.com

[CVE-2025-36727] [Modified: 26-08-2025] [Analyzed] [V3.1 S8.3:HIGH] Inclusion of Functionality from Untrusted Control Sphere vulnerability in Simplehelp.This issue affects Simplehelp: before 5.5.12.

[CVE-2025-36728] [Modified: 26-08-2025] [Analyzed] [V3.1 S6.3:MEDIUM] Cross-Site Request Forgery (CSRF) vulnerability in Simplehelp.This issue affects Simplehelp: before 5.5.11.

[CVE-2025-45892] [Modified: 07-08-2025] [Analyzed] [V3.1 S6.1:MEDIUM] OpenCart version 4.1.0.4 is vulnerable to a Stored Cross-Site Scripting (XSS) attack via the blog editor. The vulnerability arises because input in the blog's editor is not properly sanitized or escaped before being rendered. This allows attackers to inject malicious JavaScript code

[CVE-2025-45893] [Modified: 07-08-2025] [Analyzed] [V3.1 S6.1:MEDIUM] OpenCart version 4.1.0.4 is vulnerable to a Stored Cross-Site Scripting (XSS) attack via SVG file uploads used in blog posts. The vulnerability arises because SVG files uploaded through the media manager are not properly sanitized. Attackers can craft a malicious SVG file containing embedded JavaScript

[CVE-2025-45960] [Modified: 14-10-2025] [Analyzed] [V3.1 S6.1:MEDIUM] Cross Site Scripting vulnerability in tawk.to Live Chat v.1.6.1 allows a remote attacker to execute arbitrary code via the web application stores and displays user-supplied input without proper input validation or encoding

[CVE-2025-8161] [Modified: 28-08-2025] [Analyzed] [V3.1 S6.3:MEDIUM] A vulnerability classified as critical was found in deerwms deer-wms-2 up to 3.3. Affected by this vulnerability is an unknown functionality of the file /system/role/export. The manipulation of the argument params[dataScope] leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.

[CVE-2025-8162] [Modified: 28-08-2025] [Analyzed] [V3.1 S6.3:MEDIUM] A vulnerability, which was classified as critical, has been found in deerwms deer-wms-2 up to 3.3. Affected by this issue is some unknown functionality of the file /system/dept/list. The manipulation of the argument params[dataScope] leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.

[CVE-2025-46199] [Modified: 15-08-2025] [Analyzed] [V3.1 S9.8:CRITICAL] Cross Site Scripting vulnerability in grav v.1.7.48 and before allows an attacker to execute arbitrary code via a crafted script to the form fields

[CVE-2025-5449] [Modified: 14-08-2025] [Analyzed] [V3.1 S4.3:MEDIUM] A flaw was found in the SFTP server message decoding logic of libssh. The issue occurs due to an incorrect packet length check that allows an integer overflow when handling large payload sizes on 32-bit systems. This issue leads to failed memory allocation and causes the server process to crash, resulting in a denial of service.

[CVE-2025-8163] [Modified: 28-08-2025] [Analyzed] [V3.1 S6.3:MEDIUM] A vulnerability, which was classified as critical, was found in deerwms deer-wms-2 up to 3.3. This affects an unknown part of the file /system/role/list. The manipulation of the argument params[dataScope] leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.

[CVE-2025-8164] [Modified: 05-08-2025] [Analyzed] [V3.1 S6.3:MEDIUM] A vulnerability has been found in code-projects Public Chat Room 1.0 and classified as critical. This vulnerability affects unknown code of the file send_message.php. The manipulation of the argument ID leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.

[CVE-2025-52446] [Modified: 31-10-2025] [Analyzed] [V3.1 S8.0:HIGH] Authorization Bypass Through User-Controlled Key vulnerability in Salesforce Tableau Server on Windows, Linux (tab-doc api modules) allows Interface Manipulation (data access to the production database cluster).This issue affects Tableau Server: before 2025.1.3, before 2024.2.12, before 2023.3.19.

[CVE-2025-52447] [Modified: 31-10-2025] [Analyzed] [V3.1 S8.1:HIGH] Authorization Bypass Through User-Controlled Key vulnerability in Salesforce Tableau Server on Windows, Linux (set-initial-sql tabdoc command modules) allows Interface Manipulation (data access to the production database cluster). This issue affects Tableau Server: before 2025.1.3, before 2024.2.12, before 2023.3.19.

[CVE-2025-52448] [Modified: 31-10-2025] [Analyzed] [V3.1 S8.1:HIGH] Authorization Bypass Through User-Controlled Key vulnerability in Salesforce Tableau Server on Windows, Linux (validate-initial-sql api modules) allows Interface Manipulation (data access to the production database cluster). This issue affects Tableau Server: before 2025.1.3, before 2024.2.12, before 2023.3.19.

[CVE-2025-52449] [Modified: 31-10-2025] [Analyzed] [V3.1 S8.5:HIGH] Unrestricted Upload of File with Dangerous Type vulnerability in Salesforce Tableau Server on Windows, Linux (Extensible Protocol Service modules) allows Alternative Execution Due to Deceptive Filenames (RCE). This issue affects Tableau Server: before 2025.1.3, before 2024.2.12, before 2023.3.19.

[CVE-2025-52452] [Modified: 31-10-2025] [Analyzed] [V3.1 S8.5:HIGH] Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Salesforce Tableau Server on Windows, Linux (tabdoc api - duplicate-data-source modules) allows Absolute Path Traversal. This issue affects Tableau Server: before 2025.1.3, before 2024.2.12, before 2023.3.19.

[CVE-2025-52453] [Modified: 31-10-2025] [Analyzed] [V3.1 S8.2:HIGH] Server-Side Request Forgery (SSRF) vulnerability in Salesforce Tableau Server on Windows, Linux (Flow Data Source modules) allows Resource Location Spoofing. This issue affects Tableau Server: before 2025.1.3, before 2024.2.12, before 2023.3.19.

[CVE-2025-52454] [Modified: 31-10-2025] [Analyzed] [V3.1 S5.3:MEDIUM] Server-Side Request Forgery (SSRF) vulnerability in Salesforce Tableau Server on Windows, Linux (Amazon S3 Connector modules) allows Resource Location Spoofing. This issue affects Tableau Server: before 2025.1.3, before 2024.2.12, before 2023.3.19.

[CVE-2025-52455] [Modified: 29-10-2025] [Analyzed] [V3.1 S5.3:MEDIUM] Server-Side Request Forgery (SSRF) vulnerability in Salesforce Tableau Server on Windows, Linux (EPS Server modules) allows Resource Location Spoofing. This issue affects Tableau Server: before 2025.1.3, before 2024.2.12, before 2023.3.19.

[CVE-2025-8165] [Modified: 05-08-2025] [Analyzed] [V3.1 S6.3:MEDIUM] A vulnerability was found in code-projects Food Review System 1.0 and classified as critical. This issue affects some unknown processing of the file /admin/approve_reservation.php. The manipulation of the argument occasion leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.