106 matches found
quantumslop
Shor's Algorithm for ECDLP — Q-Day Prize Submission Quantum solver for the Elliptic Curve Discrete Logarithm Problem ECDLP, built for the Q-Day Prize Challenge by Project Eleven. The goal: recover ECC private keys on real quantum hardware using Shor's algorithm. Author : Giancarlo Lelli Contact :...
quantum
Shor's Algorithm for ECDLP — Q-Day Prize Submission Quantum solver for the Elliptic Curve Discrete Logarithm Problem ECDLP, built for the Q-Day Prize Challenge by Project Eleven. The goal: recover ECC private keys on real quantum hardware using Shor's algorithm. Author : Giancarlo Lelli Contact :...
Phantom-Signature-Attack
This research paper presents a comprehensive cryptanalytic study of critical vulnerabilities in the Bitcoin protocol’s digital signature implementation, namely the Phantom Signature Attack CVE-2025-29774 and the fundamental SIGHASHSINGLE processing error . The study demonstrates that incorrect...
Malicious code in secp256k1-lib (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dd45f2520f57a18e182ea26170f8d6d3b4296929c66dbbf2ea0eb632adb1f46a Package name mimics the widely used secp256k1 cryptography library but contains no cryptographic functionality. The declared main index.js is a singl...
MAL-2026-14255 Malicious code in secp256k1-lib (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dd45f2520f57a18e182ea26170f8d6d3b4296929c66dbbf2ea0eb632adb1f46a Package name mimics the widely used secp256k1 cryptography library but contains no cryptographic functionality. The declared main index.js is a singl...
EUVD-2026-56555
Observable Timing Discrepancy in the AMD Vitis Libraries ECDSA secp256k1 component could allow attackers with local access to potentially perform timing analysis or electromagnetic emanation attacks, resulting in high confidentiality and integrity impact due to the exposure of private cryptograph...
CVE-2026-43606
Observable Timing Discrepancy in the AMD Vitis Libraries ECDSA secp256k1 component could allow attackers with local access to potentially perform timing analysis or electromagnetic emanation attacks, resulting in high confidentiality and integrity impact due to the exposure of private cryptograph...
CVE-2026-43606
Observable Timing Discrepancy in the AMD Vitis Libraries ECDSA secp256k1 component could allow attackers with local access to potentially perform timing analysis or electromagnetic emanation attacks, resulting in high confidentiality and integrity impact due to the exposure of private cryptograph...
CVE-2026-43606
CVE-2026-43606 concerns the AMD Vitis Libraries ECDSA secp256k1 component. The vulnerability is described as an observable timing discrepancy that an attacker with local access could use to perform timing analysis or electromagnetic emanation attacks, with high confidentiality and integrity impac...
Uncaught Exception
Overview Affected versions of this package are vulnerable to Uncaught Exception in elliptic curve verification functions for secp256k1. An attacker can cause a node to crash by sending a malicious p2p payload. Remediation Upgrade github.com/ethereum/go-ethereum/crypto to version 1.16.9 or higher...
Uncaught Exception
Overview Affected versions of this package are vulnerable to Uncaught Exception in elliptic curve verification functions for secp256k1. An attacker can cause a node to crash by sending a malicious p2p payload. Remediation Upgrade github.com/ethereum/go-ethereum/crypto/secp256k1 to version 1.16.9 ...
org.webjars.npm:bitcore-lib (0.15.0), org.webjars.npm:bitcore-mnemonic (1.5.0) +6 more potentially affected by CVE-2025-14505 via org.webjars.npm:elliptic (>=6.4.0, <=6.6.1)
org.webjars.npm:elliptic MAVEN version =6.4.0, =4.0.0, =3.2.0, =4.0.2 Source cves: CVE-2025-14505 Source advisory: SNYK:JAVA-ORGWEBJARSNPM-14908845...
Denial of Service (DoS)
Overview Affected versions of this package are vulnerable to Denial of Service DoS via the Vector.ReadFrom function. An attacker can cause excessive memory allocation and application crashes by providing maliciously crafted input data containing large length fields. This can result in denial of...
EUVD-2024-54990
Malicious code in bioql PyPI...
EUVD-2023-3162
Malicious code in bioql PyPI...
EUVD-2024-2944
Malicious code in bioql PyPI...
EUVD-2024-54991
Malicious code in bioql PyPI...
EUVD-2022-6905
Malicious code in bioql PyPI...
Linux Distros Unpatched Vulnerability : CVE-2020-28498
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The package elliptic before 6.5.4 are vulnerable to Cryptographic Issues via the secp256k1 implementation in elliptic/ec/key.js. There is no check to confirm th...