hashes

RustCrypto: Hashes !Project Chatchat-imagechat-link !dependency statusdeps-imagedeps-link !Apache2/MIT licensedlicense-image Collection de fonctions de hachage cryptographiques1 écrites en Rust pur. Tous les algorithmes résident dans des crates séparées et sont implémentés à l'aide des traits de ...

paskto

Paskto - Passive Web Scanner Paskto will passively scan the web using the Common Crawl internet index either by downloading the indexes on request or parsing data from your local system. URLs are then processed through Nikto and known URL lists to identify interesting content. Hash signatures are...

CVE-2017-6640-POC

CVE-2017-6640-POC Preuve de concept pour CVE-2017-6640 en tant qu'extension burp Cisco Prime Data Center Network Manager DCNM implémente des identifiants statiques. Voir aussi : https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170607-dcnm2 Plus précisément,...

CVE-2026-21010-VoIP-SIP-Digest-Authentication-Replay

CVE-2026-21010 – Rejeu de l'authentification Digest SIP VoIP Code du programme simulateur SIP Python sipserversim.py - SIP server that accepts replayed authenticated requests from flask import Flask, request app = Flaskname Simulated nonce storage: doesn't track used nonces usednonces = set...

ctf-party

ctf-party Qu'est-ce que c'est Une bibliothèque pour améliorer et accélérer l'écriture de scripts/exploits pour les joueurs de CTF ou chercheurs en sécurité, chasseurs de bugs, pentesteurs mais surtout axé sur le CTF en patchant la classe String pour ajouter une syntaxe courte des motifs de code...

CVE-2026-81642

CVE-2026-81642 — сайт отслеживания переполнения кучи в дайджестах DNSKEY Unbound Источник для трекера статуса патча CVE-2026-81642: одностраничный сайт, фиксирующий, какие дистрибутивы выпустили исправление для переполнений кучи в DNSSEC-валидаторе Unbound и атак сложности ReTrap, раскрытых вмест...

CVE-2026-107231

A flaw was found in AsyncHttpClient. The library's challenge parser inadvertently handles an HTTP Digest authentication challenge missing a valid nonce a one-time security token as HTTP Basic authentication. A malicious origin server or proxy can exploit this vulnerability by returning a Digest...

CVE-2026-107279

A flaw was found in AsyncHttpClient. A remote attacker can bypass mutual authentication by offering HTTP Digest authentication configured with integrity protection auth-int. Because the client fails to validate the response authentication value under this configuration and treats the unverified...

CVE-2026-7020

CVE-2026-7020 Lecture arbitraire de fichiers dans Ollama via un chemin de traversée dans le digest tensor. Exfiltre les clés hôte SSH et tout autre fichier depuis un hôte Ollama accessible en trois appels API non authentifiés. Writeup : Co-chercheur @gouldnicholas Utilisation python3 poc.py Teste...

CTT-enhanced-Apache-mod_auth_digest-timing-attack-exploit

Attaque par timing améliorée par CTT sur Apache modauthdigest — CVE-2026-33006 Attaque par timing améliorée par CTT sur Apache modauthdigest — CVE-2026-33006 Contournement d'authentification Digest à distance → Attaque par timing temporel à 33 couches Vulnérabilité d'origine : Apache HTTP Server...

EUVD-2026-94643

AsyncHttpClient: Digest authentication cnonce generated with a non-cryptographic random source...

EUVD-2026-94636

AsyncHttpClient: Digest challenge without a usable nonce downgrades to Basic and sends the password in cleartext...

AsyncHttpClient: Digest challenge without a usable nonce downgrades to Basic and sends the password in cleartext

Impact A Digest challenge that does not yield a usable nonce is treated as a Basic challenge. The client then answers it with Authorization: Basic, which carries the username and password base64 encoded and so recoverable by anyone who sees the request. Any of these is enough, sent by whoever...

GHSA-RQF5-2WXV-RJF4 AsyncHttpClient: Digest challenge without a usable nonce downgrades to Basic and sends the password in cleartext

Impact A Digest challenge that does not yield a usable nonce is treated as a Basic challenge. The client then answers it with Authorization: Basic, which carries the username and password base64 encoded and so recoverable by anyone who sees the request. Any of these is enough, sent by whoever...

cve-2026-43512-poc

CVE-2026-43512 — Contournement de l'authentification DIGEST d'Apache Tomcat Résultat de l'analyse d'exploitabilité : la cause racine est confirmée. L'exploitation de bout en bout n'est pas reproductible sur un déploiement standard UserDatabaseRealm. Voir Analyse pour les détails. Table des matièr...

CLEANSTART-2026-AF46685 In Eclipse Jetty, the Digest authentication server-side component uses ISO-8859-1 to encode the password as bytes

CVE-2026-10050 affects multiple packages. In Eclipse Jetty, the Digest authentication server-side component uses ISO-8859-1 to encode the password as bytes. See references for individual vulnerability details...

CVE-2026-107283

The AsyncHttpClient AHC library allows Java applications to easily execute HTTP requests and asynchronously process HTTP responses. Prior to 3.0.12 and 2.16.1, Realm.Builder generates the HTTP Digest client nonce with ThreadLocalRandom rather than a cryptographically secure random source. Digest...

DEBIAN-CVE-2026-107283

The AsyncHttpClient AHC library allows Java applications to easily execute HTTP requests and asynchronously process HTTP responses. Prior to 3.0.12 and 2.16.1, Realm.Builder generates the HTTP Digest client nonce with ThreadLocalRandom rather than a cryptographically secure random source. Digest...

CVE-2026-107283

The AsyncHttpClient AHC library allows Java applications to easily execute HTTP requests and asynchronously process HTTP responses. Prior to 3.0.12 and 2.16.1, Realm.Builder generates the HTTP Digest client nonce with ThreadLocalRandom rather than a cryptographically secure random source. Digest...

DEBIAN-CVE-2026-107231

The AsyncHttpClient AHC library allows Java applications to easily execute HTTP requests and asynchronously process HTTP responses. Prior to 3.0.13 and 2.16.1, Realm.Builder treats a Digest challenge that yields no usable nonce as a Basic challenge. A malicious origin or proxy can label a challen...