longfellow-zk

Longfellow ZK 개요 Longfellow 라이브러리는 ISO MDOC 표준, JWT 표준, W3 Verifiable Credentials와 같은 기존 신원 확인 표준에 관한 영지식 프로토콜을 구축할 수 있게 해줍니다. 이 구현은 다음 문서에 설명되어 있습니다: ECDSA 기반 익명 자격 증명 libzk: 영지식 증명을 위한 C++ 라이브러리 프로젝트 문서 이 이름은 Google 캠브리지 사무실 밖에 있는 다리에서 따왔습니다. 보안 검토 이 프로젝트는 현재 학계 및 업계 전문가로 구성된 두 개의 독립적인 패널에 의해 보...

libsignal

概要 libsignal には、公式の Signal クライアントおよびサーバーで使用されるプラットフォーム非依存の API が含まれており、Java、Swift、または TypeScript ライブラリとして公開されています。基盤となる実装は Rust で書かれています: libsignal-protocol: Double Ratchet アルゴリズムを含む Signal プロトコルを実装しています。libsignal-protocol-java および libsignal-metadata-java の代替です。 signal-crypto: AES-GCM...

break-golf

break-golf A board for cryptanalysis results that are proved , not run. A challenge fixes two worlds and the statement you must prove. You write an adversary and a proof that it distinguishes them. The win is the proof: nothing is executed, sampled, or replayed, and no human reads the submission ...

Mandating-Honeypots-Project

Mandating-Honeypots-Project Parents Decide Act（H.R.8250）やカリフォルニア州のDigital Age Assurance Act（Assembly Bill...

exploitarium

Statement This repo was incomplete when published. In regar...

Debug output exposes NIP-46 and NIP-60 credentials

Several NIP-46 and NIP-60 types used derived Debug implementations even though their fields contained credentials or decrypted application data. Formatting these values exposed NIP-46 connection secrets and request parameters, as well as NIP-60 private keys, Cashu bearer proofs, and quote...

CVE-2026-12966

The Direct Payments for WooCommerce WordPress plugin before 2.5.3 does not verify that the requester owns the targeted WooCommerce order in several unauthenticated AJAX handlers before changing its status and overwriting its payment metadata, allowing unauthenticated attackers to tamper with othe...

PT-2026-67023

The Direct Payments for WooCommerce WordPress plugin before 2.5.3 does not verify that the requester owns the targeted WooCommerce order in several unauthenticated AJAX handlers before changing its status and overwriting its payment metadata, allowing unauthenticated attackers to tamper with othe...

CVE-2026-52686

A flaw was found in pdns-recursor. This vulnerability allows a remote attacker to bypass DNSSEC Domain Name System Security Extensions validation. The flaw occurs because the system accepts wildcard expansion proofs NSEC/NSEC3 records without proper signature validation when the wildcard answer i...

SUSE CVE-2026-52686

The issue is a DNSSEC validation bypass where wildcard expansion proofs NSEC/NSEC3 records are accepted without signature validation when the wildcard answer is a CNAME or DNAME record...

CVE-2026-52686

The issue is a DNSSEC validation bypass where wildcard expansion proofs NSEC/NSEC3 records are accepted without signature validation when the wildcard answer is a CNAME or DNAME record...

EUVD-2026-47931

The issue is a DNSSEC validation bypass where wildcard expansion proofs NSEC/NSEC3 records are accepted without signature validation when the wildcard answer is a CNAME or DNAME record...

CVE-2026-52686

The CVE-2026-52686 entry describes a DNSSEC validation bypass in wildcard proof handling: when a wildcard expansion yields a CNAME or DNAME, NSEC/NSEC3 proofs are accepted without signature validation. This concerns the DNS resolver logic (noted in the PowerDNS advisory) and can bypass proper DNS...

PT-2026-63587

The issue is a DNSSEC validation bypass where wildcard expansion proofs NSEC/NSEC3 records are accepted without signature validation when the wildcard answer is a CNAME or DNAME record...

CVE-2026-52686: Improper Verification of Cryptographic Signature

The issue is a DNSSEC validation bypass where wildcard expansion proofs NSEC/NSEC3 records are accepted without signature validation when the wildcard answer is a CNAME or DNAME record...

CVE-Hunter

CVE Hunter Pro A Chrome extension for fast, single-lookup CVE...

CVE-2026-48816

sigstore-js provides JavaScript libraries for interacting with Sigstore services. Prior to 3.1.1, @sigstore/verify derives a transparency-log timestamp from tlogEntries.integratedTime for bundle v0.2 inclusionProof-only entries even though the inclusion proof path does not cryptographically bind...

exploitarium

https://discord.gg/WytKH65ZR join up for research, help, documen...

bak-exploitarium

https://discord.gg/WytKH65ZR join up for research, help, documen...

PYSEC-2026-284 Hyperledger Aries Cloud Agent Python result of presentation verification not checked for LDP-VC

Impact When verifying W3C Format Verifiable Credentials using JSON-LD with Linked Data Proofs LDP-VCs, the result of verifying the presentation document.proof was not factored into the final verified value true/false on the presentation record. Below is an example result from verifying a JSON-LD...