https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 12 Oct 2026 12:18:34 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-5683 EUVD-2026-5683 https://cve.radiocsirt.org/vuln/euvd-2026-5683 https://cve.radiocsirt.org/vuln/fkie_cve-2024-36289 <p>Reusing a nonce, key pair in encryption issue exists in &#34;FreeFrom - the nostr client&#34; App versions prior to 1.3.5 for Android and iOS. If this vulnerability is exploited, the content of direct messages (DMs) between users may be manipulated by a man-in-the-middle attack.</p> <p>Reusing a nonce, key pair in encryption issue exists in &#34;FreeFrom - the nostr client&#34; App versions prior to 1.3.5 for Android and iOS. If this vulnerability is exploited, the content of direct messages (DMs) between users may be manipulated by a man-in-the-middle attack.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2024-36289 https://cve.radiocsirt.org/vuln/ghsa-2h9q-5qx9-w5fm <p>Reusing a nonce, key pair in encryption issue exists in &#34;FreeFrom - the nostr client&#34; App versions prior to 1.3.5 for Android and iOS. If this vulnerability is exploited, the content of direct messages (DMs) between users may be manipulated by a man-in-the-middle attack.</p> <p>Reusing a nonce, key pair in encryption issue exists in &#34;FreeFrom - the nostr client&#34; App versions prior to 1.3.5 for Android and iOS. If this vulnerability is exploited, the content of direct messages (DMs) between users may be manipulated by a man-in-the-middle attack.</p> https://cve.radiocsirt.org/vuln/ghsa-2h9q-5qx9-w5fm https://cve.radiocsirt.org/vuln/jvndb-2024-000060 <p>&#34;FreeFrom - the nostr client&#34; App provided by FreeFrom K.K. contains multiple vulnerabilities listed below. &lt;ul&gt;&lt;li&gt;Improper verification of cryptographic signature (CWE-347) - CVE-2024-36277&lt;/li&gt; &lt;li&gt;Reliance on obfuscation or encryption of security-relevant inputs without integrity checking (CWE-649) - CVE-2024-36279&lt;/li&gt; &lt;li&gt;Reusing a nonce, key pair in encryption (CWE-323) - CVE-2024-36289&lt;/li&gt;&lt;/ul&gt; The people listed below reported these vulnerabilities to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership. Hayato Kimura of University of Hyogo Ryoma Ito of National Institute of Information and Communications Technology (NICT) Kazuhiko Minematsu of NEC Corporation/Yokohama National University Takanori Isobe of University of Hyogo</p> <p>&#34;FreeFrom - the nostr client&#34; App provided by FreeFrom K.K. contains multiple vulnerabilities listed below. &lt;ul&gt;&lt;li&gt;Improper verification of cryptographic signature (CWE-347) - CVE-2024-36277&lt;/li&gt; &lt;li&gt;Reliance on obfuscation or encryption of security-relevant inputs without integrity checking (CWE-649) - CVE-2024-36279&lt;/li&gt; &lt;li&gt;Reusing a nonce, key pair in encryption (CWE-323) - CVE-2024-36289&lt;/li&gt;&lt;/ul&gt; The people listed below reported these vulnerabilities to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership. Hayato Kimura of University of Hyogo Ryoma Ito of National Institute of Information and Communications Technology (NICT) Kazuhiko Minematsu of NEC Corporation/Yokohama National University Takanori Isobe of University of Hyogo</p> https://cve.radiocsirt.org/vuln/jvndb-2024-000060