java-remote-class-loader

Questo strumento ti permette di inviare bytecode Java sotto forma di file class ai tuoi client o potenziali obiettivi da caricare ed eseguire utilizzando Java ClassLoader insieme all'API Reflect. Il client riceve il file class dal server e restituisce il rispettivo output di esecuzione. I payload...

java-remote-class-loader

This tool allows you to send Java bytecode in the form of class files to your clients or potential targets to load and execute using Java ClassLoader together with Reflect API. The client receives the class file from the server and return the respective execution output. Payloads must be written ...

CESS

CESS — Segreto di Shamir Crittologicamente Incantato Questa è fuffa AI o robaccia? Un crittografo o un implementatore serio che esamina CESS aprirà di solito vectors/ e testdata/ prima di leggere la prosa. La suite di test è la prova del lavoro: codifica una conoscenza del dominio che non può...

sorry-ransomware-analysis

Análise do Ransomware Sorry Campanha CVE-2026-41940 cPanel Pacote público de IOCs, regras YARA, scripts forenses e metodologia de análise para a família do ransomware "Sorry" extensão .sorry que surgiu no final de abril de 2026, propagada por meio da bypass de autenticação cPanel/WHM...

Concryptor

Concryptor Un motore di crittografia AEAD multi-thread costruito in Rust. Cripta e decripta file con una produttività di gigabyte al secondo utilizzando una pipeline iouring a triplo buffer, l'elaborazione parallela dei chunk tramite Rayon e cifrari ottimizzati in assembly tramite ring. ⚠️ AVVISO:...

EphemeralNet

EphemeralNet Безопасная P2P-сеть с кастомным Relay для враждебных NAT, написанная на C++20. Программируемое забывание для высоконадёжного P2P-хранилища. Зачем EphemeralNet? Shardian разрабатывает инфраструктуру для команд, которые относятся к гарантиям удаления так же серьёзно, как и к...

torchat

TorChat - Anonymer P2P-Chat Sicherer, privater und anonymer Peer-to-Peer-Chat über das Tor-Netzwerk. Was ist TorChat? Es ist ein leichtgewichtiges, datenschutzorientiertes Nachrichtentool, mit dem Sie direkt mit anderen über das Tor-Netzwerk kommunizieren können – ohne zentrale Server. Es wurde f...

Improper Validation of Integrity Check Value

Overview Affected versions of this package are vulnerable to Improper Validation of Integrity Check Value in the chacha20poly1305cipher and aesocbcipher implementations under providers/implementations/ciphers/. An attacker can forge messages by supplying an empty ciphertext and a bad tag, then...

AZL-97884 CVE-2026-75803 affecting package edk2 20240524git3e722403cd16-18

Issue summary: ChaCha20-Poly1305 and AES-OCB decryption with an empty ciphertext can report success without verifying the supplied authentication tag when the operation is finalized by calling the EVPCipher function. Impact summary: Applications calling EVPCipher on an empty ciphertext and...

CVE-2026-75803

Issue summary: ChaCha20-Poly1305 and AES-OCB decryption with an empty ciphertext can report success without verifying the supplied authentication tag when the operation is finalized by calling the EVPCipher function. Impact summary: Applications calling EVPCipher on an empty ciphertext and...

ALPINE-CVE-2026-75803

Issue summary: ChaCha20-Poly1305 and AES-OCB decryption with an empty ciphertext can report success without verifying the supplied authentication tag when the operation is finalized by calling the EVPCipher function. Impact summary: Applications calling EVPCipher on an empty ciphertext and...

AZL-97935 CVE-2026-75803 affecting package openssl 3.3.7-4

Issue summary: ChaCha20-Poly1305 and AES-OCB decryption with an empty ciphertext can report success without verifying the supplied authentication tag when the operation is finalized by calling the EVPCipher function. Impact summary: Applications calling EVPCipher on an empty ciphertext and...

AZL-97671 CVE-2026-75803 affecting package openssl-fips-provider 3.1.2-2

Issue summary: ChaCha20-Poly1305 and AES-OCB decryption with an empty ciphertext can report success without verifying the supplied authentication tag when the operation is finalized by calling the EVPCipher function. Impact summary: Applications calling EVPCipher on an empty ciphertext and...

EUVD-2026-65488

Issue summary: ChaCha20-Poly1305 and AES-OCB decryption with an empty ciphertext can report success without verifying the supplied authentication tag when the operation is finalized by calling the EVPCipher function. Impact summary: Applications calling EVPCipher on an empty ciphertext and...

CVE-2026-75803

OpenSSL's EVP_Cipher() API, when used as a one-shot decryption call for ChaCha20-Poly1305 and AES-OCB ciphers, skips the AEAD authentication tag verification if the input ciphertext is empty. A successful return value in that case does not guarantee the tag was actually validated, so applications...

CVE-2026-75803 AEAD Forgeries with Empty Ciphertext When Using EVP_Cipher()

Issue summary: ChaCha20-Poly1305 and AES-OCB decryption with an empty ciphertext can report success without verifying the supplied authentication tag when the operation is finalized by calling the EVPCipher function. Impact summary: Applications calling EVPCipher on an empty ciphertext and...

CVE-2026-75803

Issue summary: ChaCha20-Poly1305 and AES-OCB decryption with an empty ciphertext can report success without verifying the supplied authentication tag when the operation is finalized by calling the EVPCipher function. Impact summary: Applications calling EVPCipher on an empty ciphertext and...

PT-2026-81308

Name of the Vulnerable Software and Affected Versions The product name cannot be determined affected versions not specified Description Decryption using ChaCha20-Poly1305 and AES-OCB ciphers may report success without verifying the authentication tag when an empty ciphertext is processed via the...

Astra Linux – Vulnerability in nss

A flaw was discovered in the implementation of CHACHA20-POLY1305 in NSS versions prior to 3.55. When using multi-part Chacha20, it could lead to out-of-bounds reads. This issue was addressed by explicitly disabling multi-part ChaCha20 which was not functioning correctly and enforcing strict tag...

CVE-2026-64314 crypto: chacha20poly1305 - validate poly1305 template argument

In the Linux kernel, the following vulnerability has been resolved: crypto: chacha20poly1305 - validate poly1305 template argument chachapolycreate still accepts the compatibility poly1305 parameter in the template name, but it assumes the second template argument is always present and immediatel...