https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 22 Oct 2026 02:08:30 +0000 https://cve.radiocsirt.org/vuln/cnvd-2018-07899 cnvd-2018-07899 https://cve.radiocsirt.org/vuln/cnvd-2018-07899 https://cve.radiocsirt.org/vuln/euvd-2026-71086 EUVD-2026-71086 https://cve.radiocsirt.org/vuln/euvd-2026-71086 https://cve.radiocsirt.org/vuln/fkie_cve-2018-1000093 <p>CryptoNote version version 0.8.9 and possibly later contain a local RPC server which does not require authentication, as a result the walletd and the simplewallet RPC daemons will process any commands sent to them, resulting in remote command execution and a takeover of the cryptocurrency wallet if an attacker can trick an application such as a web browser into connecting and sending a command for example. This attack appears to be exploitable via a victim visiting a webpage hosting malicious content that trigger such behavior.</p> <p>CryptoNote version version 0.8.9 and possibly later contain a local RPC server which does not require authentication, as a result the walletd and the simplewallet RPC daemons will process any commands sent to them, resulting in remote command execution and a takeover of the cryptocurrency wallet if an attacker can trick an application such as a web browser into connecting and sending a command for example. This attack appears to be exploitable via a victim visiting a webpage hosting malicious content that trigger such behavior.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2018-1000093 https://cve.radiocsirt.org/vuln/ghsa-pmh5-hfq5-56mq <p>CryptoNote version version 0.8.9 and possibly later contain a local RPC server which does not require authentication, as a result the walletd and the simplewallet RPC daemons will process any commands sent to them, resulting in remote command execution and a takeover of the cryptocurrency wallet if an attacker can trick an application such as a web browser into connecting and sending a command for example. This attack appears to be exploitable via a victim visiting a webpage hosting malicious content that trigger such behavior.</p> <p>CryptoNote version version 0.8.9 and possibly later contain a local RPC server which does not require authentication, as a result the walletd and the simplewallet RPC daemons will process any commands sent to them, resulting in remote command execution and a takeover of the cryptocurrency wallet if an attacker can trick an application such as a web browser into connecting and sending a command for example. This attack appears to be exploitable via a victim visiting a webpage hosting malicious content that trigger such behavior.</p> https://cve.radiocsirt.org/vuln/ghsa-pmh5-hfq5-56mq https://cve.radiocsirt.org/vuln/gsd-2018-1000093 gsd-2018-1000093 https://cve.radiocsirt.org/vuln/gsd-2018-1000093