KeePass-TriggerLess

KeePass-TriggerLess KeePass 2.53.1 から ECAS Trigger System を削除し、CVE-2023-24055 を修正...

keepass_CVE-2023-24055_yara_rule

keepassCVE-2023-24055yararule 侵害された可能性のあるKeePass設定ファイルを探索するためのシンプルなyaraルールが含まれています。 使い方 yara、loki、thor-liteなどのyaraルールスキャナを使用して、このルールでシステムをスキャンします。ローカルのKeePass設定ファイルのデフォルトの場所は %APPDATA%\Roaming\KeePass\KeePass.config.xml です。...

Updated keepass packages fix security vulnerability

Allows an attacker, who has write access to the XML configuration file, to obtain the cleartext passwords by adding an export trigger. Disputed by vendor due to level of access required. CVE-2023-24055 Possible to recover the cleartext master password from a memory dump, even when a workspace is...

CVE-2023-24055

creationtimestamp| type| source ---|---|--- 2023-01-24 22:52:22+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/3705 2023-01-25 00:08:13+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/3708 2023-01-26 05:22:21+00:00| published-proof-of-concept|...

Exploit for Cleartext Storage of Sensitive Information in Keepass

CVE-2023-24055 POC and Scanner for CVE-2023-24055 Use at your...

CVE-2023-24055

CVE-2023-24055 affects KeePass up to version 2.53 where an attacker with write access to KeePass.config.xml can trigger an export and exfiltrate cleartext passwords. Evidence and discussion appear in NVD/NVD-derived entries, OSS advisories, Mageia MGASA-2023-0221 (fix/update discussions), OSV- MG...