20839 matches found
CVE-2026-54496 Missing copy constraint in halo2_gadgets variable-base scalar multiplication allows under-constrained base, breaking Orchard Action circuit soundness
ZEBRA is a Zcash node written entirely in Rust. Prior to zebrad 5.0.0, halo2gadgets 0.5.0, orchard 0.14.0, zcashprimitives 0.28.0, and zcashd 6.20.0, the variable-base scalar multiplication gadget in halo2gadgets/src/ecc/chip/mul/incomplete.rs used assignadvice for the base point without a copy...
security-research
security-research Proof-of-concept code and technical write-u...
GHSA-FF9G-85JQ-R3G3
creationtimestamp| type| source ---|---|--- 2026-07-17 14:00:06+00:00| published-proof-of-concept| https://t.me/bdufstecru/3317 2026-07-18 00:00:29+00:00| published-proof-of-concept| https://t.me/bdufstecru/3317...
CVE-2026-54540
creationtimestamp| type| source ---|---|--- 2026-07-16 22:35:07+00:00| published-proof-of-concept| https://github.com/pheditor/pheditor/security/advisories/GHSA-9643-6xjp-vx57 2026-07-27 21:27:36+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mrntm3fpuy2i...
CVE-2026-55578
creationtimestamp| type| source ---|---|--- 2026-07-16 22:35:05+00:00| published-proof-of-concept| https://github.com/pheditor/pheditor/security/advisories/GHSA-wg4w-wr5q-6vjc 2026-07-27 21:12:35+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mrnsra2sn72s...
CVE-2026-52832
creationtimestamp| type| source ---|---|--- 2026-07-16 20:35:02+00:00| published-proof-of-concept| https://github.com/nuclio/nuclio/security/advisories/GHSA-wpcj-rmv4-86qg 2026-07-29 12:01:54+00:00| seen| https://t.me/GithubRedTeam/95672 2026-07-29 13:00:06+00:00| seen|...
nimiq-primitives: Out-of-bounds panic in KeyNibbles::Add from oversized child suffix in a deserialized proof
Impact A malicious peer acting as a state-sync source can crash a syncing node with a crafted TrieChunk whose proof contains a TrieNodeChild whose suffix, when concatenated with the parent key via KeyNibbles::Add, exceeds the fixed 63-byte backing array. Add primitives/src/keynibbles.rs:332 / :34...
GHSA-46WQ-28CX-MHW4 nimiq-primitives: Panic in TrieProof::verify via child_index unwrap on equal-length keys
Impact A malicious peer acting as a state-sync source can crash a syncing node by sending a crafted TrieChunk whose proof contains two TrieProofNodes with identical keys. TrieProof::verify calls TrieProofNode::childindex primitives/src/trie/trieproofnode.rs:94, which unconditionally unwraps...
CVE-2020-15906
creationtimestamp| type| source ---|---|--- 2026-07-16 14:00:04+00:00| published-proof-of-concept| https://t.me/UnidentifiedTM/893 2026-07-17 00:00:52+00:00| published-proof-of-concept| https://t.me/UnidentifiedTM/893...
CVE-2026-14961
creationtimestamp| type| source ---|---|--- 2026-07-16 12:00:04+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/93588 2026-07-17 00:00:54+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/93588...
CVE-2026-52199
creationtimestamp| type| source ---|---|--- 2026-07-16 12:00:04+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/93550 2026-07-17 00:00:54+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/93550 2026-07-20 19:46:05+00:00| seen|...
CVE-2026-14960
creationtimestamp| type| source ---|---|--- 2026-07-16 12:00:04+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/93588 2026-07-16 16:38:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqrocbsicg2w 2026-07-16 19:00:06+00:00| seen|...
AI Can Find Bugs, But Human Knowledge Still Proves Them
Artificial intelligence AI is changing offensive security, but it has not changed the standard that matters most: a finding has to be proven before it becomes useful. AI-assisted tools can read code quickly, generate payloads, summarize attack surfaces, explain unfamiliar APIs, and run repetitive...
Exploit for Heap-based Buffer Overflow in Microsoft
CVE-2025-21333 Hyper-V NT Kernel Integration VSP vkrnlintvs...
CVE-2026-54498
creationtimestamp| type| source ---|---|--- 2026-07-16 00:35:15+00:00| published-proof-of-concept| https://github.com/ViewComponent/viewcomponent/security/advisories/GHSA-97jw-64cj-jc58 2026-07-17 22:00:58+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mquqsjj7zu2c 2026-07-...
CVE-2026-54497
creationtimestamp| type| source ---|---|--- 2026-07-16 00:35:13+00:00| published-proof-of-concept| https://github.com/ViewComponent/viewcomponent/security/advisories/GHSA-9h85-g7w3-rh49 2026-07-18 00:29:59+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mquz4ycoui23...
CVE-2026-50285
creationtimestamp| type| source ---|---|--- 2026-07-16 00:35:10+00:00| published-proof-of-concept| https://github.com/pomerium/pomerium/security/advisories/GHSA-ggw3-5987-rx77...
CVE-2026-54504
creationtimestamp| type| source ---|---|--- 2026-07-16 00:35:05+00:00| published-proof-of-concept| https://github.com/andrea9293/mcp-documentation-server/security/advisories/GHSA-6f5r-5672-72j7...