CVE-2025-56513-NiceHash-Update-Chain-Compromise

CVE-2025-56513 NiceHash QuickMiner 更新机制中的关键供应链漏洞 作者：Prince T Philip 角色：独立安全研究员 严重性：严重 — CVSS 9.8 影响：远程代码执行 / 供应链攻陷 状态：已公开披露并分配 CVE-2025-56513 执行摘要 CVE-2025-56513 是在 NiceHash QuickMiner v6.12.0 中发现的一个严重漏洞，允许远程攻击者破坏软件更新过程并在受害机器上执行任意代码。 根本原因是应用程序使用未加密的 HTTP 进行更新交付，同时缺乏数字签名验证或完整性检查。...

Exploit for Download of Code Without Integrity Check in Nicehash Quickminer

CVE-2025-56513 Critical Supply-Chain Vulnerability in NiceHash...

EUVD-2025-31754

Malicious code in bioql PyPI...

NiceHash QuickMiner 安全漏洞

NiceHash QuickMiner is a cryptocurrency miner software open source by NiceHash.com. A security vulnerability exists in NiceHash QuickMiner version 6.12.0 that originates from executing a software update over HTTP without verifying digital signatures or hash checking, which could lead to remote co...

CVE-2025-56513

NiceHash QuickMiner 6.12.0 perform software updates over HTTP without validating digital signatures or hash checks. An attacker capable of intercepting or redirecting traffic to the update url and can hijack the update process and deliver arbitrary executables that are automatically executed,...

CVE-2025-56513

CVE-2025-56513 affects NiceHash QuickMiner v6.12.0, where the update mechanism uses HTTP without signature/hash verification, enabling a Network-based MITM to replace updates and execute arbitrary code. Root cause: unencrypted update delivery and absence of digital signatures/integrity checks for...