161 matches found
Thunderstorm
Thunderstorm Thunderstorm ist ein modulares Framework zur Ausnutzung von USV-Geräten. Für den Moment sind nur die Exploits für CS-141 und NetMan 204 verfügbar. Die Betaversion des Frameworks wird in Zukunft veröffentlicht. CVE Thunderstorm ist derzeit in der Lage, die folgenden CVE auszunutzen:...
ejbca-pqc-lab
Laboratorio EJBCA Pure PQC — Gerarchia PKI a due livelli ML-DSA-65 Un'implementazione pratica di NIST FIPS 204 ML-DSA in una gerarchia PKI a due livelli utilizzando EJBCA Community Edition. 📖 Guida completa: Costruire una PKI post-quantistica: come ho firmato una Root CA e Sub CA usando ML-DSA su...
CVE-2025-46047
CVE-2025-46047 Silverpeas = 6.4.2 Benutzernamen-Enumeration – PoC Proof-of-Concept-Skript zur Demonstration einer Benutzernamen-Enumeration-Schwachstelle in Silverpeas Versionen 6.4.1 und 6.4.2. Details zur Schwachstelle Betroffene Software: Silverpeas Betroffene Versionen: 6.4.1, 6.4.2 und...
CVE-2025-71317
NetMan 204 contains a hard-coded backdoor account with the username and password 'eurek' that grants administrative access. A remote, unauthenticated attacker can authenticate through the cgi-bin/login.cgi endpoint for example /cgi-bin/login.cgi?username=eurek&password=eurek, which due to lax...
CVE-2025-71318
NetMan 204 fails to enforce authentication on its administrative pages and command endpoints. A remote, unauthenticated attacker can directly request administrative pages such as administration.html, administration-commands.html, and configuration.html to disclose sensitive information including...
EUVD-2025-210079
NetMan 204 fails to enforce authentication on its administrative pages and command endpoints. A remote, unauthenticated attacker can directly request administrative pages such as administration.html, administration-commands.html, and configuration.html to disclose sensitive information including...
CVE-2025-71318 NetMan 204 Missing Authentication for Administrative Functions
NetMan 204 fails to enforce authentication on its administrative pages and command endpoints. A remote, unauthenticated attacker can directly request administrative pages such as administration.html, administration-commands.html, and configuration.html to disclose sensitive information including...
CVE-2025-71318
CVE-2025-71318 concerns NetMan 204, where authentication is not enforced on administrative pages and command endpoints. A remote, unauthenticated attacker can directly access pages (e.g., administration.html, administration-commands.html, configuration.html) to disclose sensitive details such as ...
CVE-2025-71317 NetMan 204 Hard-coded Backdoor Credentials
NetMan 204 contains a hard-coded backdoor account with the username and password 'eurek' that grants administrative access. A remote, unauthenticated attacker can authenticate through the cgi-bin/login.cgi endpoint for example /cgi-bin/login.cgi?username=eurek&password=eurek, which due to lax...
EUVD-2025-210078
NetMan 204 contains a hard-coded backdoor account with the username and password 'eurek' that grants administrative access. A remote, unauthenticated attacker can authenticate through the cgi-bin/login.cgi endpoint for example /cgi-bin/login.cgi?username=eurek&password=eurek, which due to lax...
PT-2026-49127
This crate provides Rust bindings to ML-DSA FIPS 204 via C implementations from PQClean. The PQClean project is being archived in or after July 2026 see PQClean/PQClean604, after which no further security patches or bug fixes will be applied to the upstream implementations. As a result, this crat...
GHSA-H37V-HP6W-2PP8 ml-dsa's UseHint function has off by two error when r0 equals zero
Summary There's a bug in the usehint function where it adds 1 instead of subtracting 1 when the decomposed low bits r0 equal exactly zero. FIPS 204 Algorithm 40 is pretty clear that r0 0 means strictly positive, but the current code treats zero as positive. This causes valid signatures to...
ml-dsa's UseHint function has off by two error when r0 equals zero
Summary There's a bug in the usehint function where it adds 1 instead of subtracting 1 when the decomposed low bits r0 equal exactly zero. FIPS 204 Algorithm 40 is pretty clear that r0 0 means strictly positive, but the current code treats zero as positive. This causes valid signatures to...
PT-2026-5048
The ML-DSA crate is a Rust implementation of the Module-Lattice-Based Digital Signature Standard ML-DSA. Starting in version 0.0.4 and prior to version 0.1.0-rc.4, the ML-DSA signature verification implementation in the RustCrypto ml-dsa crate incorrectly accepts signatures with repeated duplicat...
CVE-2025-1101
A CWE-204 "Observable Response Discrepancy" in the login page in Q-Free MaxTime less than or equal to version 2.11.0 allows an unauthenticated remote attacker to enumerate valid usernames via crafted HTTP requests...
EUVD-2009-3955
Malware in sbrugna...
EUVD-2006-5592
Malware in sbrugna...
EUVD-2013-2855
Malware in sbrugna...