131 matches found
rustls
Rustls 是一个用 Rust 编写的现代 TLS 库。 状态 Rustls 已被许多组织和项目在生产环境中使用。我们力求保持合理的 API 表面稳定性，但随着我们为支持新功能或性能改进而做出变更，API 仍可能持续演进。 我们在路线图中列出了未来计划。我们还提供基准测试，以防止性能回退，并让你在目标硬件上评估 rustls。 如果你愿意提供帮助，请参阅 CONTRIBUTING.md。 维护者将 "rustls" 读作 rustles（而非 rust-TLS），但我们对此并无强烈意见。 更新日志 每个版本中详细的变更列表可在...
password_generator
PassForge - 全功能密码生成器 CLI 一个生产就绪、密码学安全的密码生成器命令行工具，提供17种生成模式、熵透明度和全面的自定义选项。 功能特性 17种生成模式 生成器| 命令| 说明 ---|---|--- 随机| random, r| 密码学安全的随机字符密码 口令短语| phrase, p| 基于单词的口令短语（使用EFF词表） Leetspeak| leet, l| 字符替换的口令短语（A→4，E→3等） PIN码| pin| 可配置长度的数字PIN码 可读音| pronounce, pr| 易于发音的基于音节的密码 UUID| uuid, u| RFC...
cyph
Cyph Cyph 是一款加密安全的消息与社交网络服务，在提供极致隐私保护的同时兼具一流的易用性。 Cyph 的专利技术——由前 SpaceX 工程师构建、经 Cure53 审计，并成为 Black Hat 和 DEF CON 研究展示的基础——使其独一无二地解决了传统方案的主要安全与可用性局限。 本地运行可用的命令（需要 Node.js 和 Docker）： npm run serve：在 http://localhost:42002 提供本地实例 npm run verify：验证签名的生产版本与本地代码副本是否可重现 首次运行这些命令中的任何一个都会在本地构建 Docker...
Real Estate
Open Arsenal Real Estate Specifications The real estate ecosystem is built around the idea of shifting property intelligence away from centralized listing platforms and into locally hosted, self-sovereign data environments. Instead of relying on third-party platforms to define, store, or interpre...
CVE-2026-74889 openssl_encrypt before 1.4.0 Weak Key Derivation via HKDF
opensslencrypt versions before 1.4.0 use HKDF with no salt and static info parameter in key normalization functions, reducing entropy extraction and determinism. Attackers can exploit predictable key derivation with identical inputs to weaken cryptographic security against multi-target attacks...
CVE-2026-74889 openssl_encrypt before 1.4.0 Weak Key Derivation via HKDF
opensslencrypt versions before 1.4.0 use HKDF with no salt and static info parameter in key normalization functions, reducing entropy extraction and determinism. Attackers can exploit predictable key derivation with identical inputs to weaken cryptographic security against multi-target attacks...
SUSE-SU-2026:3460-1 Security update for python-urwid
This update for python-urwid fixes the following issue: - CVE-2026-9323: web session IDs generated by Screen.start are not cryptographically secure bsc1271868...
SUSE SLED15 / SLES15 Security Update : python-urwid (SUSE-SU-2026:3425-1)
The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2026:3425-1 advisory. This update for python-urwid fixes the following issue CVE-2026-9323: web session IDs generated by Screen.start are not...
Security update for python-urwid
This update for python-urwid fixes the following issue CVE-2026-9323: web session IDs generated by Screen.start are not cryptographically secure bsc1271868. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch"...
UBUNTU-CVE-2026-9638
Crypt::PBKDF2 versions before 0.261630 for Perl generate insecure random values for salts. These versions use the built-in rand function, which is predictable and unsuitable for cryptography...
AI-Driven Adaptive Adversaries and the Erosion of Cryptographic Trust in Public Key Systems
This paper examines the erosion of Public Key Cryptography PKC security under adaptive adversarial optimisation driven by artificial intelligence. The problem addressed is the growing mismatch between algorithm-centric cryptographic security models and operational attack realities, where...
CVE-2026-8700
A flaw was found in perl-Crypt-DSA. This vulnerability occurs because the software generates cryptographic seeds using Perl's built-in rand function, which is predictable and unsuitable for security-sensitive operations. An attacker could potentially leverage this predictability to weaken the...
PT-2026-23125
Name of the Vulnerable Software and Affected Versions Net::NSCA::Client versions through 0.009002 Description Net::NSCA::Client for Perl utilizes an inadequate random number generator. Version 0.003 transitioned to using Data::Rand::Obscure instead of Crypt::Random for generating initialization...
CVE-2025-68704 Jervis has a Weak Random for Timing Attack Mitigation
Jervis is a library for Job DSL plugin scripts and shared Jenkins pipeline libraries. Prior to 2.2, Jervis uses java.util.Random which is not cryptographically secure for timing attack mitigation. This vulnerability is fixed in 2.2...
PT-2026-2497
Jervis is a library for Job DSL plugin scripts and shared Jenkins pipeline libraries. Prior to 2.2, Jervis uses java.util.Random which is not cryptographically secure for timing attack mitigation. This vulnerability is fixed in 2.2...
The Jasmin Compiler Preserves Cryptographic Security
Jasmin is a programming and verification framework for developing efficient, formally verified, cryptographic implementations. A main component of the framework is the Jasmin compiler, which empowers programmers to write efficient implementations of state-of-the-art cryptographic primitives,...
EUVD-2021-11910
Malware in sbrugna...
EUVD-2021-16268
Malware in sbrugna...