Copy-Fail-CVE-2026-31431-dirty-frag-CVE-2026-43284

リモート root@kitploit: git clone https://github.com/6abc/Copy-Fail-CVE-2026-31431-dirty-frag-CVE-2026-43284.git && cd Copy-Fail-CVE-2026-31431-dirty-frag-CVE-2026-43284 && gcc -O0 -Wall -o exp exp.c -lutil && ./exp root@kitploit: git clone...

CVE-2023-29409

CVE-2023-29409 root@kitploit: $ openssl genrsa -out ca-key.pem 2048 $ openssl req -x509 -new -nodes -key ca-key.pem -sha256 -days 100000 -out ca.pem \ -addext 'keyUsage=keyCertSign' \ -subj '/CN=Root CA' $ go run main.go server in the background $ go run main.go client causes high cpu load on...

Crypto <= 2.15 - Authentication Bypass

The Crypto plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 2.15. This is due a to limited arbitrary method call to 'cryptoconnectajaxprocess::login' function in the 'cryptoconnectajaxprocess' function. This makes it possible for unauthenticated...

CVE-2025-40019-POC

proof of concept for CVE-2025-40019 CVE-2025-40019 is the Encrypted Salt-Sector Initialization Vector mechanism crypto/essiv.c which has insufficient validation of Associated Authentication Data AAD length relative to the Initialization Vector IV size, leading to out-of-bounds memory access. The...

CVE-2025-40019-Essiv

CVE-2025-40019-Essiv Un PoC para CVE-2025-40019 en el módulo ESSIV. exploit en progreso para la explotación, nótese que scatterlist tanto req-src como req-dst tiene el miembro pagelink. pagelink es una forma de codificar información de la tabla sg junto con el puntero de página, según lo que...

cryptohackfirm

Cryptohack A semi-secure, hacker-friendly hardware crypto wallet on the hip-badge ESP32-C3 platform with the onboard ATECC608B secure element. Signs transactions for BTC , ETH + 8 EVM chains, SOL , and XMR with an on-device SIGN screen the user has to approve before any private key touches the...

Challenges_2022_Public

ブロックチェーン チャレンジ| 作者| 難易度| リリースラウンド ---|---|---|--- Solve Me| @bluealder| 初級| ラウンド 1 Crypto Casino| joseph8210| 簡単| ラウンド 2 Secret and Ephemeral| @bluealder| 中級| ラウンド 1 Private Log| @bluealder| 難しい| ラウンド 1 EVM Vault Mechanism| joseph8210| 難しい| ラウンド 1 Web DFIR Pwn 暗号 Misc アンケート チャレンジ| 作者| 難易度| リリースラウ...

CVE-2026-71851

A flaw was found in crypto-js. The CryptoJS.lib.WordArray.random function, used for generating cryptographic secrets, employs a weak pseudorandom number generator instead of a cryptographically secure source. This significantly reduces the randomness of generated values, such as those used for...

ROOT-APP-MAVEN-CVE-2025-22228 CVE-2025-22228 in org.springframework.security:spring-security-crypto - Patched by Root

Root has patched CVE-2025-22228 in the org.springframework.security:spring-security-crypto package for Root:Maven. Multiple fixed versions available...

cve-2026-31431

CVE-2026-31431 — Copy Fail: Linux Kernel LPE Research Lab Educational purposes only. Do NOT use on systems without explicit authorization. Index Description of the vulnerability Affected components How it works Lab setup Docker PoC — Demonstration Mitigation References Vulnerability Description...

passgen

🔐 passgen — Generate passwords from the terminal A small Go CLI that generates secure random passwords with flexible character sets and exclusions. Uses crypto/rand for cryptographically secure randomness. If no charset flags are provided, all sets are enabled by default. Installation Go...

CVE-2025-11986

1 Extract the public cryptoajax nonce from the restricted page root@kitploit: UA='Mozilla/5.0 Windows NT 10.0; Win64; x64; rv:127.0 Gecko/20100101 Firefox/127.0' NONCE=$curl -s "http://localhost/wordpress/" -A "$UA" | \ perl -0777 -ne 'print "$1\n" if...

Linux Distros Unpatched Vulnerability : CVE-2026-93155

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - crypto: keembay - Fix AEAD unregister count in error path registeraesalgs registers the AEAD algorithms before registering the skcipher algorithms. If skcipher...

security checks

🔍 Miner Hunter Crypto-miner detection, removal, and hardening toolkit for Linux servers. Built from real-world incident response — detects miners that hide from ps, top, htop, and btop using rootkit techniques. 📦 Installation root@kitploit: git clone...

AZL-102162 CVE-2026-93158 affecting package kernel 6.6.150.1-1

In the Linux kernel, the following vulnerability has been resolved: crypto: sa2ul - stop probe if context pool creation fails saulprobe calls sainitmem to create the DMA pool used for security context buffers, but ignores its return value. If pool creation fails, probe still continues with DMA...

CVE-2026-90069 crypto: acomp - allocate async request context when cloning

In the Linux kernel, the following vulnerability has been resolved: crypto: acomp - allocate async request context when cloning ACOMPREQUESTONSTACK reserves only enough storage for the synchronous fallback. When an async implementation is selected, callers clone that stack request before retrying...

GlacierCTF2023_writeups

Glacierctf 2023 説明 CTF開催日: 24.11.2023 - 26.11.2023 開催時間: 48時間 CTF Time: https://ctftime.org/event/1992 GlacierCTF 2023 は、LosFuzzys が主催する jeopardy 形式の CTF の第2回目でした。 この CTF では、pwn、rev、web、crypto、スマートコントラクト、misc など、さまざまなカテゴリのチャレンジが提供されました。 2023 GlacierCTF リポジトリには、すべてのチャレンジとソリューション/ライトアップが含まれています。...

Important: Red Hat Security Advisory: Kiali 2.4.23 for Red Hat OpenShift Service Mesh 3.0

Kiali 2.4.23 for Red Hat OpenShift Service Mesh 3.0 is now available. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from th...

OCI-Ansible-Fix-CVE-2026-31431

CVE-2026-31431 Ansible Remediation 이 플레이북은 OCI의 Linux 인스턴스에서 CVE-2026-31431일명 Copy Fail을 수정합니다. CVE-2026-31431은 AFALG 사용자 공간 암호화 API에서 사용되는 Linux 커널 algifaead 구현의 로컬 권한 상승 문제입니다. 이 플레이북은 주요 수정 경로를 적용합니다: 업데이트된 벤더 커널 패키지를 설치하고 인스턴스를 재부팅하여 수정된 커널을 실행합니다. 참고자료: NVD:...

CVE-2026-81438

Dell OpenManage Server Administrator (OMSA) versions prior to 11.1.0.3 contain a Use of a Broken or Risky Cryptographic Algorithm vulnerability. An unauthenticated attacker with remote network access could exploit this flaw, resulting in Information disclosure . The CVSS 3.1 score is 3.7 (LOW) , ...