TGViewer
Hackerone Reports Hackerone Reports @hackeronereports · 243 subscribers
Post #740 18
🎯 New Report #3241102: Reported Denial of Service
🔺Severity: null
👽 Reporter: jehrenhofermagicgrants
⭐️ Reputation: 114
🛠 State: resolved
💼 Team: Monero
💵 Bounty: null
🕐 Submitted: 2025-07-08
⏰ Disclosed: 2026-04-06 17:23:31
📝 Summary: A vulnerability was reported in the Monero RPC server that could cause a denial of service. The issue was found in the "calc pow" RPC endpoint, where specially crafted input could cause the server to crash with the message "Cryptonight variant 1 needs at least 43 bytes of data". The problem was that the function did not properly validate the length of the input data, leading to an unexpected exit condition.
📂 Report JSON File: 3241102
@hackeronereports
More from @hackeronereports
  1. Oct 16, 2026🎯 New Report #3966599: Unauthenticated go-httpbin servers : Leads to Cookie Tossing on *.…
  2. Oct 16, 2026🎯 New Report #3730301: SQL Injection vulnerability found on IBM.com subdomain 🔺Severity:…
  3. Oct 16, 2026🎯 New Report #4028616: Memory exhaustion (DoS) via unbounded file read in `EncodingDiscov…
  4. Oct 15, 2026🎯 New Report #3972760: Open redirect on app.hey.com bypasses HEY desktop's internal-origi…
  5. Oct 15, 2026🎯 New Report #3972558: Burp Suite OpenAPI Event Log HTML injection triggers Windows SMB a…
  6. Oct 15, 2026🎯 New Report #3938927: An organization admin can create an attacker-controlled organizati…
Threads Profile ViewerView any public Threads profile without an account.Open ThreadLook →Writing with AI? Make it sound human.Metric37 rewrites AI drafts so they read naturally. Free AI detector, 1,500 words free.Try Metric37 →