20850 matches found
CVE-2026-34067
The CVE-2026-34067 issue affects the nimiq-transaction component in Nimiq’s Rust implementation. Before version 1.3.0, the function HistoryTreeProof::verify panics when a proof is malformed and the arrays history and positions have different lengths, due to the assertion in code. The proof origin...
CVE-2026-34067
nimiq-transaction provides the transaction primitive to be used in Nimiq's Rust implementation. Prior to version 1.3.0, HistoryTreeProof::verify panics on a malformed proof where history.len != positions.len due to asserteq!history.len, positions.len. The proof object is derived from untrusted p2...
CVE-2026-34067 nimiq-transaction vulnerable to panic via `HistoryTreeProof` length mismatch
nimiq-transaction provides the transaction primitive to be used in Nimiq's Rust implementation. Prior to version 1.3.0, HistoryTreeProof::verify panics on a malformed proof where history.len != positions.len due to asserteq!history.len, positions.len. The proof object is derived from untrusted p2...
nimiq-transaction: UpdateValidator transactions allows voting key change without proof-of-knowledge
Impact The staking contract accepts UpdateValidator transactions that set newvotingkey=Some... while omitting newproofofknowledge. this skips the proof-of-knowledge requirement that is needed to prevent BLS rogue-key attacks when public keys are aggregated. Because tendermint macro block...
GHSA-PF4J-PF3W-95F9 nimiq-transaction: UpdateValidator transactions allows voting key change without proof-of-knowledge
Impact The staking contract accepts UpdateValidator transactions that set newvotingkey=Some... while omitting newproofofknowledge. this skips the proof-of-knowledge requirement that is needed to prevent BLS rogue-key attacks when public keys are aggregated. Because tendermint macro block...
GHSA-264V-M8FM-76JM nimiq-transaction: Panic via `HistoryTreeProof` length mismatch
Impact HistoryTreeProof::verify panics on a malformed proof where history.len != positions.len due to asserteq!history.len, positions.len. The proof object is derived from untrusted p2p responses ResponseTransactionsProof.proof and is therefore attacker-controlled at the network boundary until...
EUVD-2026-25084
nimiq-transaction: Panic via HistoryTreeProof length mismatch...
nimiq-transaction: Panic via `HistoryTreeProof` length mismatch
Impact HistoryTreeProof::verify panics on a malformed proof where history.len != positions.len due to asserteq!history.len, positions.len. The proof object is derived from untrusted p2p responses ResponseTransactionsProof.proof and is therefore attacker-controlled at the network boundary until...
CVE-2026-33471 nimiq-block has skip block quorum bypass via out-of-range BitSet indices & u16 truncation
nimiq-block contains block primitives to be used in Nimiq's Rust implementation. SkipBlockProof::verify computes its quorum check using BitSet.len, then iterates BitSet indices and casts each usize index to u16 slot as u16 for slot lookup. Prior to version 1.3.0, if an attacker can get a...
CVE-2026-33471 nimiq-block has skip block quorum bypass via out-of-range BitSet indices & u16 truncation
nimiq-block contains block primitives to be used in Nimiq's Rust implementation. SkipBlockProof::verify computes its quorum check using BitSet.len, then iterates BitSet indices and casts each usize index to u16 slot as u16 for slot lookup. Prior to version 1.3.0, if an attacker can get a...
CVE-2026-5750
creationtimestamp| type| source ---|---|--- 2026-04-22 15:17:58+00:00| published-proof-of-concept| Telegram/T-tSUe4gAAJ730TQ0PlGw8q14q5lnUsjAniTyA8QTkzNFGU...
Exploit for Insufficiently Protected Credentials in Kyocera Net_Viewer
KyoceraCredsDump - CVE-2022-1026 - Based on the original explo...
CVE-2026-25604
creationtimestamp| type| source ---|---|--- 2026-04-22 15:00:07+00:00| published-proof-of-concept| Telegram/UcOXFA8nSOttq6tnEv5GYCOJTlyoQN894TbAmd-Usu-nlPU 2026-07-03 07:30:25+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mppzmuuth32m...
LLM-and-MCP
Detection and Exploitation of Vulnerabilities in Android Appli...
CVE-2026-38835
creationtimestamp| type| source ---|---|--- 2026-04-22 14:29:51+00:00| published-proof-of-concept| https://t.me/bdufstecru/3100...
CVE-2026-41432
creationtimestamp| type| source ---|---|--- 2026-04-22 14:14:22+00:00| published-proof-of-concept| https://github.com/QuantumNous/new-api/security/advisories/GHSA-xff3-5c9p-2mr4...
CVE-2026-44015
creationtimestamp| type| source ---|---|--- 2026-04-22 11:15:44+00:00| published-proof-of-concept| https://github.com/0xJacky/nginx-ui/security/advisories/GHSA-wr32-99hh-6f35...
CVE-2024-46636
creationtimestamp| type| source ---|---|--- 2026-04-22 11:00:11+00:00| published-proof-of-concept| Telegram/s-aEaA57pf2NB0HZPPLWHP4Yhw-dX3wmzrDGItJzVg73M 2026-04-22 15:00:07+00:00| published-proof-of-concept| Telegram/UcOXFA8nSOttq6tnEv5GYCOJTlyoQN894TbAmd-Usu-nlPU...
CVE-2026-30368
creationtimestamp| type| source ---|---|--- 2026-04-22 04:00:04+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/81251 2026-04-22 07:00:11+00:00| published-proof-of-concept| Telegram/flQ3C1-JmbAO-ACsqq9hbC2ofmnZXXlyidDKRlLEERKO6c 2026-04-22 15:00:07+00:00| published-proof-of-concept|...