CVE-2025-40019-POC

CVE-2025-40019 के लिए प्रूफ ऑफ कॉन्सेप्ट CVE-2025-40019 एन्क्रिप्टेड सॉल्ट-सेक्टर इनिशियलाइज़ेशन वेक्टर मैकेनिज़्म crypto/essiv.c है जिसमें इनिशियलाइज़ेशन वेक्टर IV आकार के सापेक्ष एसोसिएटेड ऑथेंटिकेशन डेटा AAD लंबाई का अपर्याप्त सत्यापन होता है, जिससे आउट-ऑफ-बाउंड्स मेमोरी एक्सेस होती है। इस...

cryptodev-linux

cryptodev-linux Questo è un driver di dispositivo /dev/crypto, equivalente a quelli presenti in OpenBSD o FreeBSD. L'idea principale è accedere a cipher esistenti nello spazio kernel dallo spazio utente, consentendo così il riutilizzo di un'implementazione hardware di un cipher. Per domande e...

go-pkcs12

Paket pkcs12 root@kitploit: import "software.sslmate.com/src/go-pkcs12" Das Paket pkcs12 implementiert Teile von PKCS12 auch bekannt als P12 oder PFX. Es ist für das Dekodieren von DER-kodierten P12/PFX-Dateien zur Verwendung mit dem crypto/tls-Paket und für das Kodieren von P12/PFX-Dateien zur...

foxguard

foxguard Scansione di sicurezza locale veloce per codice, segreti, dipendenze e rischio crittografico. root@kitploit: npx foxguard...

netpwn

netpwn Ein Framework zur Automatisierung von Aufgaben des Pentestings. Geschrieben in Python 2.7 Module reverseshell - Erstellt eine Reverse-Shell mit Python, um eine Verbindung zu einer von Ihnen gewählten Maschine herzustellen. sendfile - Ermöglicht das Senden einer Datei an den Zielserver...

quantum-security-project

OWASP Quantum Security Project Prepara oggi. Proteggi domani. Un progetto ufficiale della comunità OWASP che mappa i rischi per la sicurezza dell'era quantistica in modo pratico, neutrale rispetto ai fornitori e basato sul rischio - l'antidoto all'hype e alla paura. Stato: Fase di avvio. La OWASP...

CVE-2025-29775

Ambiente di Laboratorio SAMLStorm CVE-2025-29775 Questo è un ambiente di laboratorio per dimostrare la vulnerabilità SAMLStorm CVE-2025-29775 che colpisce la libreria xml-crypto e le implementazioni SAML in Node.js. Nota: non si tratta di un vero sfruttamento della vulnerabilità, ma di una...

git-remote-gcrypt

================= git-remote-gcrypt GNU Privacy Guard-encrypted git remote :Manual section: 1 Description git-remote-gcrypt is a git remote helper to push and pull from repositories encrypted with GnuPG, using a custom format. This remote helper handles URIs prefixed with gcrypt::. Supported...

zclaw

zclaw Il più piccolo assistente personale AI possibile per ESP32. zclaw è scritto in C e funziona su schede ESP32 con un rigoroso budget totale di firmware di = 888 KiB nella build predefinita. Supporta attività programmate, controllo GPIO, memoria persistente e composizione di strumenti...

physical-bitcoin-attacks

Bekannte physische Bitcoin-Angriffe Eine Liste bekannter Angriffe auf Bitcoin-/Kryptoasset-Besitzer, die in der physischen Welt stattgefunden haben. HINWEIS: Diese Liste ist nicht vollständig; viele Angriffe werden nicht öffentlich gemeldet. Wenn Ihnen ein Angriff bekannt ist, der nicht aufgeführ...

CVE-2026-76784

Multiple TP-Link Kasa smart home devices contain insufficient cryptographic protections in the local device communication protocol. An adjacent network attacker may intercept, replay or forge locally exchanged control messages, potentially resulting in unauthorized device control. Successful...

crypto/tls: crypto/tls: Incorrect certificate validation during TLS session resumption

A flaw was found in the crypto/tls component. This vulnerability occurs during Transport Layer Security TLS session resumption when certificate authority CA settings are modified between the initial and resumed handshakes. An attacker could exploit this to bypass certificate validation, allowing ...

Important: Red Hat Security Advisory: OpenShift Container Platform 4.15.68 packages and security update

Red Hat OpenShift Container Platform release 4.15.68 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.15. Red Hat Product Security has rated this update as having a...

crypto/tls: golang: Go crypto/tls: Denial of Service via multiple TLS 1.3 key update messages

A flaw was found in the crypto/tls package within the Go golang standard library, specifically affecting TLS 1.3 connections. A remote attacker can exploit this vulnerability by sending multiple key update messages in a single record after the handshake. This can cause the connection to deadlock,...

crypto/x509: crypto/tls: golang: Go: Denial of Service vulnerability in certificate chain building

A flaw was found in the Go standard library packages crypto/x509 and crypto/tls. During the process of building a certificate chain, an attacker can provide a large number of intermediate certificates. This excessive input is not properly limited, leading to an uncontrolled amount of work being...

crypto/x509: crypto/tls: golang: Go: Denial of Service vulnerability in certificate chain building

A flaw was found in the Go standard library packages crypto/x509 and crypto/tls. During the process of building a certificate chain, an attacker can provide a large number of intermediate certificates. This excessive input is not properly limited, leading to an uncontrolled amount of work being...

crypto/tls: crypto/tls: Incorrect certificate validation during TLS session resumption

A flaw was found in the crypto/tls component. This vulnerability occurs during Transport Layer Security TLS session resumption when certificate authority CA settings are modified between the initial and resumed handshakes. An attacker could exploit this to bypass certificate validation, allowing ...

crypto/x509: golang: golang crypto/x509: Denial of Service via excessive processing of DNS SAN entries

A flaw was found in the crypto/x509 package of golang. This vulnerability allows a remote attacker to cause a Denial of Service DoS by presenting a specially crafted X.509 certificate with a large number of DNS Subject Alternative Name SAN entries. The certificate verification process, specifical...

Important: Red Hat Security Advisory: rhc security update

An update for rhc is now available for Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is availab...

crypto/x509: crypto/tls: golang: Go: Denial of Service vulnerability in certificate chain building

A flaw was found in the Go standard library packages crypto/x509 and crypto/tls. During the process of building a certificate chain, an attacker can provide a large number of intermediate certificates. This excessive input is not properly limited, leading to an uncontrolled amount of work being...