18521 matches found
CVE-2026-54496 Missing copy constraint in halo2_gadgets variable-base scalar multiplication allows under-constrained base, breaking Orchard Action circuit soundness
ZEBRA is a Zcash node written entirely in Rust. Prior to zebrad 5.0.0, halo2gadgets 0.5.0, orchard 0.14.0, zcashprimitives 0.28.0, and zcashd 6.20.0, the variable-base scalar multiplication gadget in halo2gadgets/src/ecc/chip/mul/incomplete.rs used assignadvice for the base point without a copy...
CVE-2026-54496
ZEBRA is a Zcash node written entirely in Rust. Prior to zebrad 5.0.0, halo2gadgets 0.5.0, orchard 0.14.0, zcashprimitives 0.28.0, and zcashd 6.20.0, the variable-base scalar multiplication gadget in halo2gadgets/src/ecc/chip/mul/incomplete.rs used assignadvice for the base point without a copy...
GHSA-FF9G-85JQ-R3G3
creationtimestamp| type| source ---|---|--- 2026-07-17 14:00:06+00:00| published-proof-of-concept| https://t.me/bdufstecru/3317 2026-07-18 00:00:29+00:00| published-proof-of-concept| https://t.me/bdufstecru/3317...
CVE-2026-54540
creationtimestamp| type| source ---|---|--- 2026-07-16 22:35:07+00:00| published-proof-of-concept| https://github.com/pheditor/pheditor/security/advisories/GHSA-9643-6xjp-vx57 2026-07-27 21:27:36+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mrntm3fpuy2i...
CVE-2026-55578
creationtimestamp| type| source ---|---|--- 2026-07-16 22:35:05+00:00| published-proof-of-concept| https://github.com/pheditor/pheditor/security/advisories/GHSA-wg4w-wr5q-6vjc 2026-07-27 21:12:35+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mrnsra2sn72s...
CVE-2026-52832
creationtimestamp| type| source ---|---|--- 2026-07-16 20:35:02+00:00| published-proof-of-concept| https://github.com/nuclio/nuclio/security/advisories/GHSA-wpcj-rmv4-86qg 2026-07-29 12:01:54+00:00| seen| https://t.me/GithubRedTeam/95672 2026-07-29 13:00:06+00:00| seen|...
GHSA-46WQ-28CX-MHW4 nimiq-primitives: Panic in TrieProof::verify via child_index unwrap on equal-length keys
Impact A malicious peer acting as a state-sync source can crash a syncing node by sending a crafted TrieChunk whose proof contains two TrieProofNodes with identical keys. TrieProof::verify calls TrieProofNode::childindex primitives/src/trie/trieproofnode.rs:94, which unconditionally unwraps...
CVE-2020-15906
creationtimestamp| type| source ---|---|--- 2026-07-16 14:00:04+00:00| published-proof-of-concept| https://t.me/UnidentifiedTM/893 2026-07-17 00:00:52+00:00| published-proof-of-concept| https://t.me/UnidentifiedTM/893...
CVE-2026-14961
creationtimestamp| type| source ---|---|--- 2026-07-16 12:00:04+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/93588 2026-07-17 00:00:54+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/93588...
CVE-2026-14960
creationtimestamp| type| source ---|---|--- 2026-07-16 12:00:04+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/93588 2026-07-16 16:38:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqrocbsicg2w 2026-07-16 19:00:06+00:00| seen|...
CVE-2026-52199
creationtimestamp| type| source ---|---|--- 2026-07-16 12:00:04+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/93550 2026-07-17 00:00:54+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/93550 2026-07-20 19:46:05+00:00| seen|...
AI Can Find Bugs, But Human Knowledge Still Proves Them
Artificial intelligence AI is changing offensive security, but it has not changed the standard that matters most: a finding has to be proven before it becomes useful. AI-assisted tools can read code quickly, generate payloads, summarize attack surfaces, explain unfamiliar APIs, and run repetitive...
CVE-2026-54498
creationtimestamp| type| source ---|---|--- 2026-07-16 00:35:15+00:00| published-proof-of-concept| https://github.com/ViewComponent/viewcomponent/security/advisories/GHSA-97jw-64cj-jc58 2026-07-17 22:00:58+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mquqsjj7zu2c 2026-07-...
CVE-2026-54497
creationtimestamp| type| source ---|---|--- 2026-07-16 00:35:13+00:00| published-proof-of-concept| https://github.com/ViewComponent/viewcomponent/security/advisories/GHSA-9h85-g7w3-rh49 2026-07-18 00:29:59+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mquz4ycoui23...
CVE-2026-50285
creationtimestamp| type| source ---|---|--- 2026-07-16 00:35:10+00:00| published-proof-of-concept| https://github.com/pomerium/pomerium/security/advisories/GHSA-ggw3-5987-rx77...
CVE-2026-54504
creationtimestamp| type| source ---|---|--- 2026-07-16 00:35:05+00:00| published-proof-of-concept| https://github.com/andrea9293/mcp-documentation-server/security/advisories/GHSA-6f5r-5672-72j7...
CVE-2026-58196
creationtimestamp| type| source ---|---|--- 2026-07-16 00:35:03+00:00| published-proof-of-concept| https://github.com/stacklok/toolhive/security/advisories/GHSA-pr64-jmmf-jp54...
CVE-2026-50289
creationtimestamp| type| source ---|---|--- 2026-07-16 00:10:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqpx3jzg5o2p 2026-07-16 00:35:08+00:00| published-proof-of-concept| https://github.com/sebhildebrandt/systeminformation/security/advisories/GHSA-5xpp-75jx-m839...
PT-2026-60654
Impact A malicious peer acting as a state-sync source can crash a syncing node by sending a crafted TrieChunk whose proof contains two TrieProofNodes with identical keys. TrieProof::verify calls TrieProofNode::child index primitives/src/trie/trie proof node.rs:94, which unconditionally unwraps...