CVE-2025-68113

CVE-2025-68113 (ALTCHA) describes a cryptographic semantic binding flaw in ALTCHA libraries where the HMAC does not unambiguously bind challenge parameters to the nonce, enabling potential replay of previously solved challenges depending on server-side handling. Affected components include ALTCHA...

ALTCHA Proof-of-Work Vulnerable to Challenge Splicing and Replay

Impact A cryptographic semantic binding flaw in ALTCHA libraries allows challenge payload splicing, which may enable replay attacks. The HMAC signature does not unambiguously bind challenge parameters to the nonce, allowing an attacker to reinterpret a valid proof-of-work submission with a modifi...

Building Trustworthy AI Agents

The promise of personal AI assistants rests on a dangerous assumption: that we can trust systems we haven’t made trustworthy. We can’t. And today’s versions are failing us in predictable ways: pushing us to do things against our own best interests, gaslighting us with doubt about things we are or...

Linux kernel 安全漏洞

Linux kernel is a product of the United States Linux Foundation, etc. Linux kernel is the kernel used by the open source operating system Linux. langGenius dify, etc. are products of LangGenius open source. dify is an open source application development platform for LLM. clickHouse ClickHouse is ...

Xen 安全漏洞

Xen is an open source virtual machine monitor product from Xen Open Source. The product enables different and incompatible operating systems to run on the same computer and supports runtime migration to ensure uptime and avoid downtime. A security vulnerability exists in Xen that stems from...

Separating Pseudorandom Generators from Logarithmic Pseudorandom States

Pseudorandom generators PRGs are a foundational primitive in classical cryptography, underpinning a wide range of constructions. In the quantum setting, pseudorandom quantum states PRSs were proposed as a potentially weaker assumption that might serve as a substitute for PRGs in cryptographic...

EUVD-2015-6978

Malware in sbrugna...

EUVD-2015-8848

Malware in sbrugna...

EUVD-2000-0474

Malware in sbrugna...

EUVD-2019-4772

Malware in sbrugna...

EUVD-2004-2061

Malware in sbrugna...

EUVD-2019-4774

Malware in sbrugna...

EUVD-2016-1208

Malware in sbrugna...

EUVD-2019-4771

Malware in sbrugna...

EUVD-2006-5778

Malware in sbrugna...

EUVD-2015-6414

Malware in sbrugna...

EUVD-2017-3809

Malware in sbrugna...

EUVD-2020-0024

Malware in sbrugna...

EUVD-2019-19045

Malware in sbrugna...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a failure to separate devices when removing hosts, which could lead to a resource leak...