longfellow-zk

Longfellow ZK Overview The Longfellow library enables the construction of zero-knowledge protocols concerning legacy identity verification standards such as the ISO MDOC standard, the JWT standard, and W3 Verifiable Credentials. This implementation is described in: Anonymous credentials from ECDS...

CVE-2022-36537

CVE-2022-36537 Summary R1Soft Server Backup Manager uses the ZK framework as the main framework. Its security requires all Web3 project parties to pay more attention to the security vulnerabilities of various Web3 infrastructures and patch them in time to avoid potential security risks and digita...

ZK Framework - Information Disclosure

ZK Framework 9.6.1, 9.6.0.1, 9.5.1.3, 9.0.1.2 and 8.6.4.1 is susceptible to information disclosure. An attacker can access sensitive information via a crafted POST request to the component AuUploader and thereby possibly obtain additional sensitive information, modify data, and/or execute...

CVE-2022-36537

CVE-2022-36537 Summary R1Soft Server Backup Manager uses the ZK framework as the main framework. Its security requires all Web3 project parties to pay more attention to the security vulnerabilities of various Web3 infrastructures and patch them in time to avoid potential security risks and digita...

CVE-2022-36537-EXPLOIT

CVE-2022-36537 Summary R1Soft Server Backup Manager uses the ZK framework as the main framework. Its security requires all Web3 project parties to pay more attention to the security vulnerabilities of various Web3 infrastructures and patch them in time to avoid potential security risks and digita...

zk-xml-probe

zk-xml-probe Static XML fixtures for authorized bug bounty testing of XML parser behaviour CVE-2026-45071...

legion

Legion ZK Auth 🛡️ True Zero-Knowledge Authentication with Hardware-Bound Device Ring Signatures 🎯 What is Legion? Legion is a zero-knowledge authentication system that proves you're authorized without revealing who you are. You prove something based on public data without linking your current...

CVE-2026-48100: Acceptance of Extraneous Untrusted Data With Trusted Data

Payy is an Ethereum L2 zk-rollup for privacy preserving and regulatory compliant transactions. Prior to version 1.3.0, aggagg forwards the compacted message stream from its inner proofs into a public messages: Field; 1000 array, but it never checks that the unused tail of the outer array is zero....

Physics-Attested Federated Learning: Securing Collaborative Anomaly Detection in Critical Water Infrastructure

Federated learning enables industrial operators to train shared intrusion detection models without disclosing proprietary operational telemetry. However, existing defenses operate strictly in update space, leaving aggregators blind to data poisoning; model updates derived from fabricated telemetr...

openSUSE 16 Security Update : zk (openSUSE-SU-2026:21814-1)

The remote openSUSE 16 host has a package installed that is affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21814-1 advisory. Changes in zk: - Update Go vendored dependencies to resolve security issues boo1278625, boo1278447: Upgrade golang.org/x/crypto to v0.56.0 to fi...

OPENSUSE-SU-2026:21814-1 Security update for zk

This update for zk fixes the following issues: Changes in zk: - Update Go vendored dependencies to resolve security issues boo1278625, boo1278447: Upgrade golang.org/x/crypto to v0.56.0 to fix security vulnerabilities in the embedded x/crypto/ssh package: - CVE-2026-56854: authentication bypass -...

cyber-apocalypse-2026-salt-crown

Cyber Apocalypse CTF 2026: The Salt Crown — Writeups Writeups...

openSUSE 16 Security Update : zk (openSUSE-SU-2026:21567-1)

The remote openSUSE 16 host has a package installed that is affected by a vulnerability as referenced in the openSUSE- SU-2026:21567-1 advisory. Changes in zk: - Update to version 0.15.6: Parse links to notes in frontmatter Set filters for lsp completion items from the config Set a note's...

Security update for zk (moderate)

openSUSE security update: security update for zk ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:21567-1 Rating: moderate References: bsc1253784 Cross-References: CVE-2025-58181 CVSS scores: CVE-2025-58181 SUSE : 5.3...

OPENSUSE-SU-2026:21567-1 Security update for zk

This update for zk fixes the following issues: Changes in zk: - Update to version 0.15.6: Parse links to notes in frontmatter Set filters for lsp completion items from the config Set a note's modification time in frontmatter and allow for custom key naming for both creation and modification keys...

ZK Framework - Detect

Detects the presence of ZK JavaFramework and attempts to extract its version. !/usr/bin/env python3 -- coding: utf-8 -- """Detects the presence of ZK JavaFramework and attempts to extract its version.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient class...

CVE-2026-24308

Improper handling of configuration values in ZKConfig in Apache ZooKeeper 3.8.5 and 3.9.4 on all platforms allows an attacker to expose sensitive information stored in client configuration in the client's logfile. Configuration values are exposed at INFO level logging rendering potential producti...

Security update for zk (moderate)

openSUSE Security Update: Security update for zk Announcement ID: openSUSE-SU-2026:0016-1 Rating: moderate References: Cross-References: CVE-2025-58181 CVSS scores: CVE-2025-58181 SUSE: 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N Affected Products: openSUSE Backports...

CVE-2019-7167

Zcash, before the Sapling network upgrade 2018-10-28, had a counterfeiting vulnerability. A key-generation process, during evaluation of polynomials related to a to-be-proven statement, produced certain bypass elements. Availability of these elements allowed a cheating prover to bypass a...

New MacSync macOS Stealer Uses Signed App to Bypass Apple Gatekeeper

Cybersecurity researchers have discovered a new variant of a macOS information stealer called MacSync that's delivered by means of a digitally signed, notarized Swift application masquerading as a messaging app installer to bypass Apple's Gatekeeper checks. "Unlike earlier MacSync Stealer variant...