EUVD-2018-8006

Malware in sbrugna...

EUVD-2018-8105

Malware in sbrugna...

EUVD-2020-23857

Malware in sbrugna...

EUVD-2006-5469

Malware in sbrugna...

EUVD-2022-34153

Malicious code in bioql PyPI...

EUVD-2025-0181

Malicious code in bioql PyPI...

EUVD-2023-2835

Malicious code in bioql PyPI...

EUVD-2025-1595

Malicious code in bioql PyPI...

EUVD-2022-5873

Malicious code in bioql PyPI...

EUVD-2022-29652

Malicious code in bioql PyPI...

EUVD-2024-48649

Malicious code in bioql PyPI...

EUVD-2022-2949

Malicious code in bioql PyPI...

EUVD-2025-29041

Malicious code in bioql PyPI...

EUVD-2023-58486

Malicious code in bioql PyPI...

EUVD-2024-2526

Malicious code in bioql PyPI...

EUVD-2022-6905

Malicious code in bioql PyPI...

EUVD-2022-37807

Malicious code in bioql PyPI...

SLasH-DSA: Breaking SLH-DSA Using an Extensible End-To-End Rowhammer Framework

As quantum computing advances, PQC schemes are adopted to replace classical algorithms. Among them is the SLH-DSA that was recently standardized by NIST and is favored for its conservative security foundations. In this work, we present the first software-only universal forgery attack on SLH-DSA,...

CVE-2025-59058

httpsig-rs is a Rust implementation of IETF RFC 9421 http message signatures. Prior to version 0.0.19, the HMAC signature comparison is not timing-safe. This makes anyone who uses HS256 signature verification vulnerable to a timing attack that allows the attacker to forge a signature. Version...

Timing Attack

Overview Affected versions of this package are vulnerable to Timing Attack in the SharedKey::sign function. An attacker can potentially forge signatures by exploiting differences in processing time during HMAC signature verification. Remediation Upgrade httpsig to version 0.0.19 or higher...