EUVD-2016-5739

Malware in sbrugna...

EUVD-2024-54369

Malicious code in bioql PyPI...

EUVD-2023-25612

Malicious code in bioql PyPI...

EUVD-2024-54366

Malicious code in bioql PyPI...

EUVD-2024-54367

Malicious code in bioql PyPI...

EUVD-2022-6780

Malicious code in bioql PyPI...

EUVD-2025-8533

Malicious code in bioql PyPI...

EUVD-2022-52605

Malicious code in bioql PyPI...

EUVD-2022-37810

Malicious code in bioql PyPI...

EUVD-2025-8118

Malicious code in bioql PyPI...

EUVD-2024-39635

Malicious code in bioql PyPI...

EUVD-2022-7529

Malicious code in bioql PyPI...

EUVD-2025-18201

Malicious code in bioql PyPI...

CVE-2025-40918 Authen::SASL::Perl::DIGEST_MD5 versions 2.04 through 2.1800 for Perl generates the cnonce insecurely

Authen::SASL::Perl::DIGESTMD5 versions 2.04 through 2.1800 for Perl generates the cnonce insecurely. The cnonce client nonce is generated from an MD5 hash of the PID, the epoch time and the built-in rand function. The PID will come from a small set of numbers, and the epoch time may be guessed, i...

A Formal Refutation of the Blockchain Trilemma

The so-called blockchain trilemma asserts the impossibility of simultaneously achieving scalability, security, and decentralisation within a single blockchain protocol. In this paper, we formally refute that proposition. Employing predicate logic, formal automata theory, computational complexity...

Quantum Enhanced Entropy Pool for Cryptographic Applications and Proofs

This paper investigates the integration of quantum randomness into Verifiable Random Functions VRFs using the Ed25519 elliptic curve to strengthen cryptographic security. By replacing traditional pseudorandom number generators with quantum entropy sources, we assess the impact on key security and...

Use Of Insufficiently Random Values

vantage6 is vulnerable to Use of Insufficiently Random Values. The vulnerability is due to insecure randomness of UUID1 for auto-generating JWT secret keys, which is partially predictable and not cryptographically secure...

TencentOS Server 3: libgcrypt (TSSA-2022:0129)

The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2022:0129 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities:...

Vantage6 Server JWT secret not cryptographically secure

Impact The JWT secret key in the vantage6 server is auto-generated unless defined by the user. The auto-generated key is a UUID1, which is not cryptographically secure as it is predictable to some extent Patches No Workarounds You may define JWT secret key in the server configuration file...

CVE-2025-43866 Vantage6 Server JWT secret not cryptographically secure

vantage6 is an open-source infrastructure for privacy preserving analysis. The JWT secret key in the vantage6 server is auto-generated unless defined by the user. The auto-generated key is a UUID1, which is not cryptographically secure as it is predictable to some extent. This vulnerability is...