CVE-2026-71883

In Bouncy Castle for Java LTS before 2.73.13, the one-shot native packet ciphers for AES-CBC, CCM, CFB, CTR, GCM and GCM-SIV released the caller's key, IV and additional authenticated data arrays with JNI's ReleaseByteArrayElements in mode 0, which commits the native copy back into the Java array...

CVE-2026-71883

In Bouncy Castle for Java LTS before version 2.73.13 , one-shot native packet ciphers (AES-CBC, CCM, CFB, CTR, GCM, and GCM-SIV) suffer from a memory management flaw. The native code uses JNI's ReleaseByteArrayElements in mode 0, which commits native copies back into Java arrays. If an applicatio...

CVE-2025-15467

CVE-2025-15467: Переполнение стека в OpenSSL CMS AuthEnvelopedData Обзор CVE-2025-15467 — это критическая уязвимость переполнения стекового буфера в коде разбора CMS Cryptographic Message Syntax в OpenSSL. Уязвимость существует в функции evpciphergetasn1aeadparams при обработке векторов...

MrRAT

MrRAT Это кроссплатформенный троян удалённого доступа RAT на Python 2.x. MrRAT был создан для поддержания чистого дизайна полнофункционального Python RAT. В настоящее время проект находится в разработке, и над ним всё ещё активно работают. Дисклеймер: Этот RAT предназначен только для...

CryptHook

CryptHook CryptHook — это модульная реализация для обеспечения безопасности существующих приложений с помощью симметричного блочного шифрования. Она работает путём перехвата базовых системных вызовов для сетевого взаимодействия: send/sendto и recv/recvfrom. Crypthook будет работать с любым...

gohide

gohide Туннелирование трафика между портами через обфусцированный канал с шифрованием AES-GCM. Режимы обфускации Session Cookie HTTP GET http-client Set-Cookie Session Cookie HTTP/2 200 OK http-server WebSocket Handshake "Sec-WebSocket-Key" websocket-client WebSocket Handshake...

pmanager

Pmanager Демонстрация Описание Храните и получайте свои пароли из защищённой офлайн-базы данных. Проверяйте, не были ли ваши пароли ранее скомпрометированы, чтобы предотвратить целевые атаки с повторным использованием паролей. Зачем разрабатывать ещё один менеджер паролей? Изначально этот проект...

CVE-2026-11110-AES-GCM-Nonce-Reuse-Leading-to-Key-Recovery

CVE-2026-11110 – AES-GCM 논스 재사용으로 인한 키 복구 프로그램 코드 Python aesgcmnoncereusesim.py - Simulated encryption oracle with fixed nonce from Crypto.Cipher import AES import os key = os.urandom16 nonce = b'\x00' 12 ALWAYS SAME NONCE def encryptplaintext: cipher = AES.newkey, AES.MODEGCM, nonce=nonce ct, ta...

Fragnesia-go

fragnesia-go Одна SA. Один байт за раз. Без состояния гонки. Go-порт fragnesia CVE-2026-46300. Относится к классу уязвимостей Dirty Frag — отдельная ошибка, та же поверхность, собственный патч. Как это работает кратко Ошибка находится в подсистеме Linux XFRM ESP-in-TCP. Когда TCPULP espintcp...

Rocky Linux 8 [CIQ] Security Update: cjose / cjose-debuginfo / cjose-debugsource / cjose-devel / etc (crlsa-2023_4418)

The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20234418 advisory. cjose: AES GCM decryption uses the Tag length from the actual Authentication Tag provided in the JWE CVE-2023-37464 Tenable has extracted the preceding description...

AlmaLinux 9.2 [TuxCare] Security Update: openssl / openssl-devel / openssl-libs / openssl-perl Multiple Vulnerabilities (ALMALINUX9.2:CLSA-2026:1782976762)

The AlmaLinux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1782976762 advisory. - Issue summary: The implementations of AES-SIV RFC 5297 and AES-GCM-SIV RFC 8452 mishandle the authentication of AAD Additional...

AlmaLinux 9.6 [TuxCare] Security Update: gnupg2 / gnupg2-smime (ALMALINUX9.6:CLSA-2026:1786609750)

The AlmaLinux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1786609750 advisory. - CMS Cryptographic Message Syntax parsing in gpgsm in GnuPG through 2.5.20 mishandles the CMS format for AES-GCM because aes-ICVlen is...

CVE-2026-86132

An integer underflow vulnerability in the WatchGuard Fireware OS IKEv2 daemon iked allows a remote, unauthenticated attacker to crash the process by sending a specially crafted encrypted IKEv2 message negotiated with an AES-GCM cipher suite...

AlmaLinux 9.2 [TuxCare] Security Update: libssh / libssh-config / libssh-devel Multiple Vulnerabilities (ALMALINUX9.2:CLSA-2026:1786466122)

The AlmaLinux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1786466122 advisory. - A flaw was found in libssh. Incorrect AES-GCM finalization checks in builds using the OpenSSL backend can effectively remove...

CentOS Linux 8.4 [TuxCare] Security Update: libssh / libssh-config / libssh-devel Multiple Vulnerabilities (CENTOS8.4:CLSA-2026:1786012208)

The CentOS Linux 8.4 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS8.4:CLSA-2026:1786012208 advisory. - A flaw was found in libssh. Incorrect AES-GCM finalization checks in builds using the OpenSSL backend can effectively remove...

CentOS Linux 8 [TuxCare] Security Update: libssh / libssh-config / libssh-devel Multiple Vulnerabilities (CENTOS-STREAM8:CLSA-2026:1786012443)

The CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS-STREAM8:CLSA-2026:1786012443 advisory. - A flaw was found in libssh. Incorrect AES-GCM finalization checks in builds using the OpenSSL backend can effectively remove...

AlmaLinux 9.6 [TuxCare] Security Update: libssh / libssh-config / libssh-devel Multiple Vulnerabilities (ALMALINUX9.6:CLSA-2026:1786471937)

The AlmaLinux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1786471937 advisory. - A flaw was found in libssh. Incorrect AES-GCM finalization checks in builds using the OpenSSL backend can effectively remove...

CVE-2026-86132 Fireware OS Pre-Authentication Integer Underflow in iked Allows Denial of Service

An integer underflow vulnerability in the WatchGuard Fireware OS IKEv2 daemon iked allows a remote, unauthenticated attacker to crash the process by sending a specially crafted encrypted IKEv2 message negotiated with an AES-GCM cipher suite...

CVE-2026-86132 Fireware OS Pre-Authentication Integer Underflow in iked Allows Denial of Service

An integer underflow vulnerability in the WatchGuard Fireware OS IKEv2 daemon iked allows a remote, unauthenticated attacker to crash the process by sending a specially crafted encrypted IKEv2 message negotiated with an AES-GCM cipher suite...

CVE-2026-86132

A pre-authentication integer underflow vulnerability exists in the WatchGuard Fireware OS IKEv2 daemon (iked ). This flaw allows a remote, unauthenticated attacker to cause a Denial of Service (DoS) by crashing the process. The attack is triggered by sending a specially crafted encrypted IKEv2 me...