Proof-generation tool XSS

The vulnerability of the proof-generation tool and the software platform based on Git for collaborative code development in GitLab EE is related to insufficient protection of the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks...

VApps: Verifiable Applications at Internet Scale

Blockchain technology promises a decentralized, trustless, and interoperable infrastructure. However, widespread adoption remains hindered by issues such as limited scalability, high transaction costs, and the complexity of maintaining coherent verification logic across different blockchain layer...

PT-2024-40198 · Sp1 · Sp1

Name of the Vulnerable Software and Affected Versions: SP1 versions prior to 3.0.0 Description: The issue arises during proof generation, where the prover must observe all values sent to the verifier to generate valid Fiat-Shamir challenges. In versions prior to 3.0.0, the cumulative sum of the...

MAL-2022-5485 Malicious code in proof-generation-api (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 720a1d714457c3158b503cd852160e95601dab1be74fdd9c12f1e6388d02a2d1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in proof-generation-api

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malicious code in proof-generation-api (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 720a1d714457c3158b503cd852160e95601dab1be74fdd9c12f1e6388d02a2d1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...