2100 matches found
EUVD-2024-17291
Malicious code in bioql PyPI...
EUVD-2022-28113
Malicious code in bioql PyPI...
EUVD-2022-0551
Malicious code in bioql PyPI...
EUVD-2024-34997
Malicious code in bioql PyPI...
EUVD-2022-28112
Malicious code in bioql PyPI...
EUVD-2022-1575
Malicious code in bioql PyPI...
EUVD-2024-0448
Malicious code in bioql PyPI...
EUVD-2024-34998
Malicious code in bioql PyPI...
EUVD-2025-21807
Malicious code in bioql PyPI...
Linux kernel 安全漏洞
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from an unregistered ECC engine that could lead to reuse after release...
CVE-2025-9231
CVE-2025-9231 describes a timing side-channel in OpenSSL’s SM2 implementation on 64-bit ARM, which could allow remote recovery of the private key under a custom provider scenario. OpenSSL TLS with SM2 certificates is not common, but the issue is considered Moderate. Connected advisories show affe...
Selmer-Inspired Elliptic Curve Generation
Elliptic curve cryptography ECC is foundational to modern secure communication, yet existing standard curves have faced scrutiny for opaque parameter-generation practices. This work introduces a Selmer-inspired framework for constructing elliptic curves that is both transparent and auditable...
K000156613: OpenSSL for PowerPC vulnerability CVE-2025-27587
Security Advisory Description OpenSSL 3.0.0 through 3.3.2 on the PowerPC architecture is vulnerable to a Minerva attack, exploitable by measuring the time of signing of random messages using the EVPDigestSign API, and then using the private key to extract the K value nonce from the signatures...
The vulnerability of the Elliptic Labs Virtual Lock Sensor microprogramming software in ThinkPad laptops allows a intruder to elevate their privileges.
The vulnerability of the Elliptic Labs Virtual Lock Sensor microprogramming software in ThinkPad laptops is related to incorrect permissions. Exploiting this vulnerability can allow attackers to gain increased privileges...
Signature Malleability
github.com/consensys/gnark is vulnerable to signature malleability. The vulnerability is due to improper validation of the S value in EdDSA and ECDSA signatures not enforcing 0 ≤ S order, which allows an attacker to create multiple valid signatures for the same public input, potentially enabling...
ROS-20250908-12
A vulnerability in the code generation library for transferring data between different Mapstruct entities is related to a decoding helper call that outputs the original value of a confidential field. Exploitation of the of the vulnerability could allow an attacker acting remotely to gain access t...
Cryptographic Application of Elliptic Curve with High Rank
Elliptic curve cryptography is better than traditional cryptography based on RSA and discrete logarithm of finite field in terms of efficiency and security. In this paper, we show how to exploit elliptic curve with high rank, which has not been used in cryptography before, to construct...
crypto: ecdsa - Harden against integer overflows in DIV_ROUND_UP()
...
Libgcrypt before 1.6.5 does not properly perform elliptic-point curve multiplication during decryption, which makes it easier for physically proximate attackers to extract ECDH keys by measuring electromagnetic emanations.
...