1915 matches found
CVE-2019-6690
Resumen Es un PoC simple de Validación de Entrada Incorrecta en python-gnupg 0.4.3 CVE-2019-6690. Vulnerable python python-gnupg 0.4.3 python python-gnupg 0.3.6 python python-gnupg 0.3.5 python python-gnupg 0.3.4 Mitigación Los usuarios deberían actualizar a 0.4.4 Entorno de Pruebas Imagen Docker...
VSHG
VSHG - 硬件抗性与增强的 GnuPG 安全性 VSHG 旨在为 GnuPG 的标准 s2k 密钥派生函数提供内存/硬件抗性强化，并为对称 加密提供简化接口。 关于 VSHG VSHG（非常安全的哈希生成器）是 GnuPG（Gnu 隐私卫士）的独立插件。 它被编写为一个 shell 脚本，并基于 Unix/Linux 文件系统和命令设计。 VSHG 使用 sha384 和 Argon2 哈希函数进行密码处理， 并使用 AES-256-CFB + CAST5-128-CFB 级联进行最终加密。 同时使用标准 sha384 迭代次数 800 次 + Argon2i + d 的 15 次和...
CVE-2026-81180
SysReptor Professional (a pentest reporting platform) is vulnerable to authenticated remote code execution prior to version 2026.61 . Authenticated users can upload image files in formats that trigger Ghostscript during processing, allowing embedded PostScript to operate within the shared tempora...
CVE-2019-6690-python-gnupg-vulnerability
CVE-2019-6690: Validación de entrada incorrecta en python-gnupg 0.4.3 Descubrimos una forma de inyectar datos a través de la propiedad passphrase de los métodos gnupg.GPG.encrypt y gnupg.GPG.decrypt cuando se utiliza cifrado simétrico. La passphrase suministrada no se valida para saltos de línea,...
Astra Linux – Vulnerability in gnupg2
GnuPG versions up to 2.3.6 allow for signature forgery in unusual situations where an attacker possesses secret-key information from a victim’s keyring, and other constraints such as the use of GPGME are met. This can be achieved by injecting malicious data into the command line’s status line...
Astra Linux – Vulnerability in gnupg2
In GnuPG before version 2.4.9, the armorfilter function in g10/armor.c had two increments of an index variable, where only one was intended. This led to a out-of-bounds write vulnerability with crafted inputs. This issue has been fixed in ExtendedLTS versions, 2.2.51 and later...
USN-8720-1: GnuPG vulnerability
It was discovered that GnuPG incorrectly validated authentication tag lengths when parsing CMS messages encrypted with AES-GCM. An attacker could possibly use this issue to bypass message integrity checks...
USN-8720-1 gnupg2 vulnerability
It was discovered that GnuPG incorrectly validated authentication tag lengths when parsing CMS messages encrypted with AES-GCM. An attacker could possibly use this issue to bypass message integrity checks...
PT-2026-85369
It was discovered that GnuPG incorrectly validated authentication tag lengths when parsing CMS messages encrypted with AES-GCM. An attacker could possibly use this issue to bypass message integrity checks...
Security Bulletin: IBM Financial Transaction Manager v4.0.6.0 is impacted by multiple vulnerabilities in RedHat Universal Base Image
Summary IBM Financial Transaction Manager v4.0.6.0 has addressed the following vulnerabilities. Vulnerability Details CVEID:CVE-2025-5914 DESCRIPTION: A vulnerability has been identified in the libarchive library, specifically within the archivereadformatrarseekdata function. This flaw involves a...
CVE-2026-24882 vulnerabilities
Vulnerabilities for packages: gnupg...
GHSA-M6X2-4HHH-669J vulnerabilities
Vulnerabilities for packages: gnupg...
CVE-2026-57062 vulnerabilities
Vulnerabilities for packages: gnupg...
GHSA-MPC3-HQR8-W5F3 vulnerabilities
Vulnerabilities for packages: gnupg...
GHSA-M6X2-4HHH-669J vulnerabilities
Vulnerabilities for packages: gnupg...
CVE-2026-24882 vulnerabilities
Vulnerabilities for packages: gnupg...
CVE-2026-57062 vulnerabilities
Vulnerabilities for packages: gnupg...
GHSA-MPC3-HQR8-W5F3 vulnerabilities
Vulnerabilities for packages: gnupg...
Photon OS 5.0: Gnupg PHSA-2026-5.0-91-0910
An update of the gnupg package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-5.0-91-0910. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...