56 matches found
Malicious code in anidata-hauli-mul (npm)
Source: amazon-inspector 957d63d9d916beb40c91a3d9c419f1e80cb82ab563a4d520d55f905a6a276225 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...
Malicious code in @zalastax/nolb-mul (npm)
The package @zalastax/nolb-mul was found to contain malicious code. --- Credit: OpenSSF source...
Malicious code in @zalastax/nolb-mul- (npm)
The package @zalastax/nolb-mul- was found to contain malicious code. --- Credit: OpenSSF source...
PYSEC-2026-3285 TensorFlow vulnerable to segfault in `QuantizedMatMul`
Impact If QuantizedMatMul is given nonscalar input for: - mina - maxa - minb - maxb It gives a segfault that can be used to trigger a denial of service attack. python import tensorflow as tf Toutput = tf.qint32 transposea = False transposeb = False Tactivation = tf.quint8 a = tf.constant7,...
CVE-2026-44368
PyQuorum is a cryptographic library for secret sharing and key management. Prior to 0.2.1, the mulmod function implements multiplication via a binary expansion loop whose execution time depends on the Hamming weight of the second operand the exponent. An attacker who can measure the time of...
CVE-2026-44368 PyQuorum: Timing side‑channel in mul_mod
PyQuorum is a cryptographic library for secret sharing and key management. Prior to 0.2.1, the mulmod function implements multiplication via a binary expansion loop whose execution time depends on the Hamming weight of the second operand the exponent. An attacker who can measure the time of...
PyQuorum security vulnerabilities
PyQuorum is an encryption library for key management and secret sharing developed by svvqt individuals. Versions of PyQuorum prior to 0.2.1 contained security vulnerabilities. These vulnerabilities stemmed from the mulmod function, which implemented multiplication through binary expansion loops...
pyquorum: Timing side‑channel in mul_mod
Impact The mulmod function implements multiplication via a binary expansion loop whose execution time depends on the Hamming weight of the second operand the exponent. An attacker who can measure the time of secret‑sharing operations e.g., via a remote service could progressively recover the valu...
GHSA-7R92-3JGR-R65Q pyquorum: Timing side‑channel in mul_mod
Impact The mulmod function implements multiplication via a binary expansion loop whose execution time depends on the Hamming weight of the second operand the exponent. An attacker who can measure the time of secret‑sharing operations e.g., via a remote service could progressively recover the valu...
Timing Attack
Overview pyquorum is a Cryptographic library for secret sharing and key management, powered by Rust Affected versions of this package are vulnerable to Timing Attack via mulmod function implements multiplication via a binary expansion loop whose execution time depends on the Hamming weight of the...
PT-2026-5030
Name of the Vulnerable Software and Affected Versions soroban-fixed-point-math versions 1.3.0 through 1.4.0 Description The mulDivx, y, z function in soroban-fixed-point-math incorrectly handles cases where both the intermediate product x y and the divisor z are negative. The logic incorrectly...
PT-2025-48503
An issue was discovered in Arm Mbed TLS before 2.23.0. A side channel allows recovery of an ECC private key, related to mbedtls ecp check pub priv, mbedtls pk parse key, mbedtls pk parse keyfile, mbedtls ecp mul, and mbedtls ecp mul restartable...
EUVD-2025-143365
Malicious code in anidata-hauli-mul npm...
CVE-2022-50580 blk-throttle: prevent overflow while calculating wait time
In the Linux kernel, the following vulnerability has been resolved: blk-throttle: prevent overflow while calculating wait time There is a problem found by code review in tgwithinbpslimit that 'bpslimit jiffyelapsedrnd' might overflow. Fix the problem by calling mulu64u64divu64 instead...
MAL-2025-12431 Malicious code in @zalastax/nolb-mul (npm)
The package @zalastax/nolb-mul was found to contain malicious code...
MAL-2025-12432 Malicious code in @zalastax/nolb-mul- (npm)
The package @zalastax/nolb-mul- was found to contain malicious code...
MAL-2025-12433 Malicious code in @zalastax/nolb-mul_ (npm)
The package @zalastax/nolb-mul was found to contain malicious code...
Malicious code in @zalastax/nolb-mul (npm)
The package @zalastax/nolb-mul was found to contain malicious code...