EUVD-2025-33900

Malicious code in cloak-withdraw-proofs npm...

Malicious code in cloak-withdraw-proofs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 17382cbc158577dc1c35d32d1620e4992a2570006e2986e5701fa324a750b99d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48317 Malicious code in cloak-withdraw-proofs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 17382cbc158577dc1c35d32d1620e4992a2570006e2986e5701fa324a750b99d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

security-research

Security Research This project hosts security advisories and...

APEMAN-Camera-PoCs

APEMAN-Camera-...

EUVD-2024-2765

Malicious code in bioql PyPI...

EUVD-2025-0168

Malicious code in bioql PyPI...

EUVD-2024-35250

Malicious code in bioql PyPI...

EUVD-2023-50471

Malicious code in bioql PyPI...

EUVD-2024-0413

Malicious code in bioql PyPI...

EUVD-2025-26195

Malicious code in bioql PyPI...

EUVD-2024-37397

Malicious code in bioql PyPI...

PT-2025-38753

Name of the Vulnerable Software and Affected Versions versions prior to 3.2 Description A timing attack issue exists in the SCRAM Java implementation due to the use of Arrays.equals for comparing sensitive values like client proofs and server signatures. Arrays.equals performs a short-circuit...

Pentest-scripts

Pentest-scripts Personal repository with offensive secur...

CVE-2025-55996

creationtimestamp| type| source ---|---|--- 2025-09-12 04:26:03+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/51229 2025-09-12 04:27:04+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/51230 2025-09-12 09:00:05+00:00| published-proof-of-concept|...

thesis-exploits-pocs

Exploits studied in my Thesis "From Vulnerability Disclosu...

VehiclePassport: a GAIA-X-Aligned, Blockchain-Anchored Privacy-Preserving, Zero-Knowledge Digital Passport for Smart Vehicles

Modern vehicles accumulate fragmented lifecycle records across OEMs, owners, and service centers that are difficult to verify and prone to fraud. We propose VehiclePassport, a GAIA-X-aligned digital passport anchored on blockchain with zero-knowledge proofs ZKPs for privacy-preserving verificatio...

poc

Proof of Concepts As the result of plugin writing or just general bug hunting, researchers at Tenable often stumble upon new and interesting vulnerabilities. These vulnerabililities are shared with the community on our company blog, Medium, or through our research advisories. We've decided to...

Wrangling Entropy: Next-Generation Multi-Factor Key Derivation, Credential Hashing, and Credential Generation Functions

The Multi-Factor Key Derivation Function MFKDF offered a novel solution to the classic problem of usable client-side key management by incorporating multiple popular authentication factors into a key derivation process, but was later shown to be vulnerable to cryptanalysis that degraded its...

CVE-2025-55349

creationtimestamp| type| source ---|---|--- 2025-08-31 14:36:16+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/49747 2025-08-31 19:00:07+00:00| published-proof-of-concept| Telegram/aQ2LdSjNitV84X8xJ4U0UdyaOVAyRIhQtY-6g79ORFZBAk 2025-08-31 21:00:04+00:00| published-proof-of-concept|...