Svi - CERT CVE

Rezultati pretraživanja za 'Proizvođač: zenhive'

ID CVSS Sažetak Zadnje ažurirano Objavljeno
CVE-2026-73829 3.7 Time-of-check Time-of-use (TOCTOU) Race Condition in ZenHive mpp allows an unauthenticated remote client to redeem one confirmed on-chain payment for multiple paid-resource accesses. The type="hash" credential path in MPP.Methods.Tempo.verify/2 guar 2026-09-10 18:30:09
CVE-2026-73541 8.2 Allocation of Resources Without Limits or Throttling in ZenHive mpp allows an unauthenticated remote client to drain the fee-payer wallet through concurrent sponsored payments, denying service to legitimate payers once it is empty. MPP.Methods.Tempo 2026-09-10 18:24:36
CVE-2026-73136 7.5 Authentication Bypass by Capture-replay in ZenHive mpp allows an unauthenticated third party to obtain paid resources by replaying a transfer settled by an unrelated payer. MPP.Methods.Tempo normally binds a settled TIP-20 TransferWithMemo to the sp 2026-09-10 18:17:22
CVE-2026-67581 7.5 Authentication Bypass by Capture-replay in ZenHive mpp allows an unauthenticated remote client to obtain paid resources by resubmitting one settled on-chain transfer. MPP.Methods.EVM.verify/2 accepts a transaction-hash credential and matches a trans 2026-09-10 18:00:52
ID CVSS Sažetak Zadnje ažurirano Objavljeno
Stranica
/1
Zapisa po stranici: