10787 matches found
Important: Red Hat Security Advisory: rhc security update
An update for rhc is now available for Red Hat Enterprise Linux 9.6 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for eac...
Xworm RAT
XWorm-RAT V2.1 β οΈAttention: This tool is made distributed EXCLUSIVELY for security researches. Please, dont use it for illegal activity A famous XWorm RAT for free, all the popular RAT features. Please support this repository with a starβοΈ if you like it The archive is protected, the password is:...
crypto/tls: golang: Golang crypto/tls: Denial of Service via indefinite KeyUpdate messages
A flaw was found in the crypto/tls package, part of golang. A malicious client can exploit this vulnerability by continuously sending KeyUpdate messages to a server. This forces the server to perform indefinite key derivation operations, leading to resource exhaustion and a Denial of Service DoS...
crypto/tls: golang: Golang crypto/tls: Denial of Service via indefinite KeyUpdate messages
A flaw was found in the crypto/tls package, part of golang. A malicious client can exploit this vulnerability by continuously sending KeyUpdate messages to a server. This forces the server to perform indefinite key derivation operations, leading to resource exhaustion and a Denial of Service DoS...
Important: Red Hat Security Advisory: rhc security update
An update for rhc is now available for Red Hat Enterprise Linux 10.0 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for ea...
crypto/tls: golang: Golang crypto/tls: Denial of Service via indefinite KeyUpdate messages
A flaw was found in the crypto/tls package, part of golang. A malicious client can exploit this vulnerability by continuously sending KeyUpdate messages to a server. This forces the server to perform indefinite key derivation operations, leading to resource exhaustion and a Denial of Service DoS...
ROS-20260921-73-0063
The vulnerability in golang-x-crypto is related to errors in the certificate validation process. Exploitation of this vulnerability can be carried out remotely...
Security update for gh (important)
openSUSE Security Update: Security update for gh Announcement ID: openSUSE-SU-2026:0333-1 Rating: important References: 1278604 Cross-References: CVE-2026-56854 CVE-2026-56855 CVE-2026-78662 CVSS scores: CVE-2026-56854 SUSE: 8.6 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N...
boha v0.20.2
@agntn/puzzles 342 public crypto puzzles and bounties in sixteen collections, as typed records. You ask for a puzzle, you get its address, its key material and what happened on chain. Why? Every puzzle thread has the same three things: the addresses, the prizes, and who solved what. Every scanner...
Copy-Fail-CVE-2026-31431-dirty-frag-CVE-2026-43284
Π£Π΄Π°Π»ΡΠ½Π½ΠΎ root@kitploit: git clone https://github.com/6abc/Copy-Fail-CVE-2026-31431-dirty-frag-CVE-2026-43284.git && cd Copy-Fail-CVE-2026-31431-dirty-frag-CVE-2026-43284 && gcc -O0 -Wall -o exp exp.c -lutil && ./exp root@kitploit: git clone...
CVE-2023-29409
CVE-2023-29409 root@kitploit: $ openssl genrsa -out ca-key.pem 2048 $ openssl req -x509 -new -nodes -key ca-key.pem -sha256 -days 100000 -out ca.pem \ -addext 'keyUsage=keyCertSign' \ -subj '/CN=Root CA' $ go run main.go server in the background $ go run main.go client causes high cpu load on...
CVE-2025-40019-POC
proof of concept for CVE-2025-40019 CVE-2025-40019 is the Encrypted Salt-Sector Initialization Vector mechanism crypto/essiv.c which has insufficient validation of Associated Authentication Data AAD length relative to the Initialization Vector IV size, leading to out-of-bounds memory access. The...
CVE-2025-40019-Essiv
CVE-2025-40019-Essiv A PoC for CVE-2025-40019 in ESSIV module. exploit WIP for exploitation, note that scatterlist both req-src and req-dst has pagelink member. pagelink is a way to encode sg table info alongside page pointer as far as I understand: root@kitploit: gdb ptype struct scatterlist typ...
cryptohackfirm
Cryptohack A semi-secure, hacker-friendly hardware crypto wallet on the hip-badge ESP32-C3 platform with the onboard ATECC608B secure element. Signs transactions for BTC , ETH + 8 EVM chains, SOL , and XMR with an on-device SIGN screen the user has to approve before any private key touches the...
Challenges_2022_Public
Π±Π»ΠΎΠΊΡΠ΅ΠΉΠ½ ΠΠ°Π΄Π°Π½ΠΈΠ΅| ΠΠ²ΡΠΎΡ| Π‘Π»ΠΎΠΆΠ½ΠΎΡΡΡ| Π Π°ΡΠ½Π΄ Π²ΡΠΏΡΡΠΊΠ° ---|---|---|--- Solve Me| @bluealder| Π½ΠΎΠ²ΠΈΡΠΎΠΊ| round 1 Crypto Casino| joseph8210| Π»ΡΠ³ΠΊΠΈΠΉ| round 2 Secret and Ephemeral| @bluealder| ΡΡΠ΅Π΄Π½ΠΈΠΉ| round 1 Private Log| @bluealder| ΡΠ»ΠΎΠΆΠ½ΡΠΉ| round 1 EVM Vault Mechanism| joseph8210| ΡΠ»ΠΎΠΆΠ½ΡΠΉ| round 1 Π²Π΅Π± DF...
CVE-2026-71851
A flaw was found in crypto-js. The CryptoJS.lib.WordArray.random function, used for generating cryptographic secrets, employs a weak pseudorandom number generator instead of a cryptographically secure source. This significantly reduces the randomness of generated values, such as those used for...
cve-2026-31431
CVE-2026-31431 β Copy Fail: Linux Kernel LPE Research Lab Educational purposes only. Do NOT use on systems without explicit authorization. Index Description of the vulnerability Affected components How it works Lab setup Docker PoC β Demonstration Mitigation References Vulnerability Description...
passgen
π passgen β Generate passwords from the terminal A small Go CLI that generates secure random passwords with flexible character sets and exclusions. Uses crypto/rand for cryptographically secure randomness. If no charset flags are provided, all sets are enabled by default. Installation Go...
CVE-2025-11986
1 Extract the public cryptoajax nonce from the restricted page root@kitploit: UA='Mozilla/5.0 Windows NT 10.0; Win64; x64; rv:127.0 Gecko/20100101 Firefox/127.0' NONCE=$curl -s "http://localhost/wordpress/" -A "$UA" | \ perl -0777 -ne 'print "$1\n" if...
Linux Distros Unpatched Vulnerability : CVE-2026-93155
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - crypto: keembay - Fix AEAD unregister count in error path registeraesalgs registers the AEAD algorithms before registering the skcipher algorithms. If skcipher...