243 matches found
Hyperledger Aries Cloud Agent Python result of presentation verification not checked for LDP-VC
ImpactWhen verifying W3C Format Verifiable Credentials using JSON-LD with Linked Data Proofs LDP-VCs, the result of verifying the presentation document.proof was not factored into the final verified value true/false on the presentation record. Below is an example result from verifying a JSON-LD...
PT-2026-53381
Impact When verifying W3C Format Verifiable Credentials using JSON-LD with Linked Data Proofs LDP-VCs, the result of verifying the presentation document.proof was not factored into the final verified value true/false on the presentation record. Below is an example result from verifying a JSON-LD...
PT-2026-53227
Name of the Vulnerable Software and Affected Versions WsgiDAV versions prior to 4.3.5 Description The sample MySQLBrowserProvider in wsgidav/samples/mysql dav provider.py concatenates the record key parsed from a request URL directly into SQL WHERE clauses. This occurs within the exists record by...
zuixingongju-resources
zuixingongju-resources HW Red Team Arsenal – Resource fil...
cve-research
CVE Research Notes and code from going through public CVEs th...
kev-investigator
KEV Investigator An automated investigation draft generator f...
GHSA-X845-2F78-7V36 Blocky DNSSEC validation bypass and validation-cache scope pollution
Summary Blocky accepts and caches forged DNS answers while dnssec.validate: true is enabled. The issue has two related exploit paths: 1. Basic DNSSEC validation bypass. If an untrusted upstream returns an unsigned positive answer for a DNSSEC-signed public domain, Blocky classifies the response a...
EUVD-2026-36119
Plonky3 is a toolkit for polynomial IOPs PIOPs. Prior to versions 0.4.3 and 0.5.3, an attacker controlling prover-side observations can craft distinct transcripts that produce identical challenges, breaking the binding property of Fiat-Shamir. This issue has been patched in versions 0.4.3 and 0.5...
Smart_Contract_Researcher_POC
Smart Contract Security Research Portfolio hailthelord...
Kernel-Exploit-Dojo-425
Kernel-Exploit-Dojo-425 CTF kernel exploitation notes, PoCs,...
Kernel-Exploit-Dojo-243
Kernel-Exploit-Dojo-243 CTF kernel exploitation notes, PoCs,...
Kernel-Exploit-Dojo-239
Kernel-Exploit-Dojo-239 CTF kernel exploitation notes, PoCs,...
Kernel-Exploit-Dojo-248
Kernel-Exploit-Dojo-248 CTF kernel exploitation notes, PoCs,...
Kernel-Exploit-Dojo-866
Kernel-Exploit-Dojo-866 CTF kernel exploitation notes, PoCs,...
Kernel-Exploit-Dojo-283
Kernel-Exploit-Dojo-283 CTF kernel exploitation notes, PoCs,...
Kernel-Exploit-Dojo-962
Kernel-Exploit-Dojo-962 CTF kernel exploitation notes, PoCs,...
Dstack-Capsule: Pod-Level Remote Attestation for Confidential Workloads on Kubernetes
The rise of LLM-as-a-Service and other confidential cloud workloads demands cryptographic proof that user data is processed in a trusted, untampered environment. Existing solutions, notably Confidential Containers CoCo, enforce a strict "one Pod per VM" model that attests only the Guest OS stack,...
NICE: A Framework for Declarative and Machine-Checkable Vulnerability Reproduction
Reproducing software vulnerabilities is fundamental to security researchers, open-source maintainers, and educators. Yet, vulnerabilities remain hard to reproduce today, and even when they can be reproduced, recreating a software environment where the vulnerability can be exploited becomes harder...