gohide

gohide Tunnel port to port traffic via an obfuscated channel with AES-GCM encryption. Obfuscation Modes Session Cookie HTTP GET http-client Set-Cookie Session Cookie HTTP/2 200 OK http-server WebSocket Handshake "Sec-WebSocket-Key" websocket-client WebSocket Handshake "Sec-WebSocket-Accept"...

CVE-2025-15467

CVE-2025-15467: OpenSSL CMS AuthEnvelopedData Stack Buffer Overflow Overview CVE-2025-15467 is a critical stack buffer overflow vulnerability in OpenSSL's CMS Cryptographic Message Syntax parsing code. The vulnerability exists in the evpciphergetasn1aeadparams function when processing AES-GCM...

CVE-2026-71883

In Bouncy Castle for Java LTS before 2.73.13, the one-shot native packet ciphers for AES-CBC, CCM, CFB, CTR, GCM and GCM-SIV released the caller's key, IV and additional authenticated data arrays with JNI's ReleaseByteArrayElements in mode 0, which commits the native copy back into the Java array...

CVE-2026-71883

In Bouncy Castle for Java LTS before version 2.73.13 , one-shot native packet ciphers (AES-CBC, CCM, CFB, CTR, GCM, and GCM-SIV) suffer from a memory management flaw. The native code uses JNI's ReleaseByteArrayElements in mode 0, which commits native copies back into Java arrays. If an applicatio...

MrRAT

MrRAT Это кроссплатформенный троян удалённого доступа RAT на Python 2.x. MrRAT был создан для поддержания чистого дизайна полнофункционального Python RAT. В настоящее время проект находится в разработке, и над ним всё ещё активно работают. Дисклеймер: Этот RAT предназначен только для...

CryptHook

CryptHook CryptHook est une implémentation modulaire permettant de sécuriser des applications existantes avec un chiffrement par blocs symétrique. Il fonctionne en interceptant les appels système de base pour la communication réseau send/sendto et recv/recvfrom. Crypthook fonctionnera avec toute...

pmanager

Pmanager Démo Description Stockez et récupérez vos mots de passe dans une base de données locale sécurisée. Vérifiez si vos mots de passe ont déjà fuité afin d'éviter des attaques ciblées de réutilisation de mots de passe. Pourquoi développer un autre gestionnaire de mots de passe ? Ce projet est...

CVE-2026-11110-AES-GCM-Nonce-Reuse-Leading-to-Key-Recovery

CVE-2026-11110 – Повторное использование nonce в AES-GCM, приводящее к восстановлению ключа Код программы Python aesgcmnoncereusesim.py - Simulated encryption oracle with fixed nonce from Crypto.Cipher import AES import os key = os.urandom16 nonce = b'\x00' 12 ALWAYS SAME NONCE def...

Fragnesia-go

fragnesia-go Одна SA. Один байт за раз. Без состояния гонки. Go-порт fragnesia CVE-2026-46300. Относится к классу уязвимостей Dirty Frag — отдельная ошибка, та же поверхность, собственный патч. Как это работает кратко Ошибка находится в подсистеме Linux XFRM ESP-in-TCP. Когда TCPULP espintcp...

Rocky Linux 8 [CIQ] Security Update: cjose / cjose-debuginfo / cjose-debugsource / cjose-devel / etc (crlsa-2023_4418)

The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20234418 advisory. cjose: AES GCM decryption uses the Tag length from the actual Authentication Tag provided in the JWE CVE-2023-37464 Tenable has extracted the preceding description...

AlmaLinux 9.2 [TuxCare] Security Update: openssl / openssl-devel / openssl-libs / openssl-perl Multiple Vulnerabilities (ALMALINUX9.2:CLSA-2026:1782976762)

The AlmaLinux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1782976762 advisory. - Issue summary: The implementations of AES-SIV RFC 5297 and AES-GCM-SIV RFC 8452 mishandle the authentication of AAD Additional...

AlmaLinux 9.6 [TuxCare] Security Update: gnupg2 / gnupg2-smime (ALMALINUX9.6:CLSA-2026:1786609750)

The AlmaLinux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1786609750 advisory. - CMS Cryptographic Message Syntax parsing in gpgsm in GnuPG through 2.5.20 mishandles the CMS format for AES-GCM because aes-ICVlen is...

CVE-2026-86132

An integer underflow vulnerability in the WatchGuard Fireware OS IKEv2 daemon iked allows a remote, unauthenticated attacker to crash the process by sending a specially crafted encrypted IKEv2 message negotiated with an AES-GCM cipher suite...

CentOS Linux 8.4 [TuxCare] Security Update: libssh / libssh-config / libssh-devel Multiple Vulnerabilities (CENTOS8.4:CLSA-2026:1786012208)

The CentOS Linux 8.4 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS8.4:CLSA-2026:1786012208 advisory. - A flaw was found in libssh. Incorrect AES-GCM finalization checks in builds using the OpenSSL backend can effectively remove...

AlmaLinux 9.2 [TuxCare] Security Update: libssh / libssh-config / libssh-devel Multiple Vulnerabilities (ALMALINUX9.2:CLSA-2026:1786466122)

The AlmaLinux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1786466122 advisory. - A flaw was found in libssh. Incorrect AES-GCM finalization checks in builds using the OpenSSL backend can effectively remove...

CentOS Linux 8 [TuxCare] Security Update: libssh / libssh-config / libssh-devel Multiple Vulnerabilities (CENTOS-STREAM8:CLSA-2026:1786012443)

The CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS-STREAM8:CLSA-2026:1786012443 advisory. - A flaw was found in libssh. Incorrect AES-GCM finalization checks in builds using the OpenSSL backend can effectively remove...

AlmaLinux 9.6 [TuxCare] Security Update: libssh / libssh-config / libssh-devel Multiple Vulnerabilities (ALMALINUX9.6:CLSA-2026:1786471937)

The AlmaLinux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1786471937 advisory. - A flaw was found in libssh. Incorrect AES-GCM finalization checks in builds using the OpenSSL backend can effectively remove...

CVE-2026-86132 Fireware OS Pre-Authentication Integer Underflow in iked Allows Denial of Service

An integer underflow vulnerability in the WatchGuard Fireware OS IKEv2 daemon iked allows a remote, unauthenticated attacker to crash the process by sending a specially crafted encrypted IKEv2 message negotiated with an AES-GCM cipher suite...

CVE-2026-86132 Fireware OS Pre-Authentication Integer Underflow in iked Allows Denial of Service

An integer underflow vulnerability in the WatchGuard Fireware OS IKEv2 daemon iked allows a remote, unauthenticated attacker to crash the process by sending a specially crafted encrypted IKEv2 message negotiated with an AES-GCM cipher suite...

CVE-2026-86132

A pre-authentication integer underflow vulnerability exists in the WatchGuard Fireware OS IKEv2 daemon (iked ). This flaw allows a remote, unauthenticated attacker to cause a Denial of Service (DoS) by crashing the process. The attack is triggered by sending a specially crafted encrypted IKEv2 me...