CVE-2026-31431-Copy-Fail

CVE-2026-31431 — "Copy Fail": Escalação de Privilégio Local no algifaead do Kernel Linux CISA KEV | CVSS 7.8 ALTO | Afeta kernels Linux 4.14 – início de 2026 9 anos Índice 1. Resumo Executivo 2. Avaliação de Risco 3. Análise Técnica Detalhada 4. Metodologia de Ataque — Red Team 5. Detecção e...

cve-2026-20833-rc4-kerberos

CVE-2026-20833 — Hardening RC4 di Kerberos Questo repository consolida documentazione tecnica , script PowerShell , dashboard Power BI e riferimenti ufficiali Microsoft relativi alla rimozione progressiva di RC4 in Kerberos per ambienti Active Directory , nell'ambito delle modifiche di sicurezza ...

demo-cve-2026-4821

Demo: Correzione della vulnerabilità CVE-2026-4821 Questo repository dimostra come il sistema di provenienza di OpenExecution traccia la correzione delle vulnerabilità da parte di agenti AI con piena verificabilità crittografica. Scenario Vulnerabilità : SQL injection nel modulo di autenticazione...

perl-CryptX

NOME CryptX - Toolkit crittografico SINOSSI CryptX è il punto di ingresso della distribuzione. Nel codice normale, carica uno dei moduli concreti elencati di seguito. root@kitploit: one-shot hashing use Crypt::Digest qwdigestdatahex; my $sha256 = digestdatahex'SHA256', 'hello world'; classic...

CVE-2026-79084

Inadequate encryption strength in Notifications in Google Chrome on on...

dual-ec-drbg

Backdoor DualECDRBG: Proof-of-Concept Educativo Per Professionisti della Sicurezza | Solo a Scopo Educativo ⚠️ Disclaimer Questo repository contiene una dimostrazione educativa della backdoor crittografica DualECDRBG CVE-2014-8610, una vulnerabilità ben documentata resa nota dopo le rivelazioni di...

CVE-2022-25012

CVE-2022-25012 Argus Surveillance DVR v4.0 impiega una crittografia debole delle password. Compilazione root@kitploit: gcc pocland.c -o pocland Esempio di utilizzo root@kitploit: ./pocland B4A1ECB4F539C48C7357F641C9C49083 Riferimenti CVE-2022-25012 Altri PoC disponibili su: pocland...

badkeys

badkeys Werkzeug und Bibliothek zum Überprüfen von kryptografischen öffentlichen Schlüsseln auf bekannte Schwachstellen was? badkeys überprüft öffentliche Schlüssel in verschiedenen Formaten auf bekannte Schwachstellen. Eine Webversion ist unter badkeys.info verfügbar. Installation badkeys kann v...

cyph

Cyph Cyph è un servizio di messaggistica e social network crittograficamente sicuro, che offre un livello estremo di privacy combinato con la massima facilità d'uso. La tecnologia brevettata di Cyph — costruita da ex ingegneri SpaceX, verificata da Cure53 e alla base di presentazioni di ricerca a...

CVE-2026-16599

A flaw was found in wget's FTP OPIE/S-KEY authentication functionality. A malicious FTP server or a network attacker can send a specially crafted OPIE challenge. This challenge contains a sequence number that, when processed by wget, can lead to an excessive number of cryptographic computations...

Security Bulletin: IBM Integrated Analytics System (IIAS) is affected by a predictable salt vulnerability in Magneto component

Summary IBM Integrated Analytics System includes Magneto as an internal resource manager component. CVE-2025-36271 affects the resmgr.py module in Magneto, where a predictable salt value is used in cryptographic operations. The use of a predictable salt weakens the effectiveness of hashing and...

PT-2026-82235

Name of the Vulnerable Software and Affected Versions TP-Link Kasa affected versions not specified Description Multiple smart home devices have insufficient cryptographic protections in the local device communication protocol. An attacker on the same network can intercept, replay, or forge locall...

CVE-2026-24166

NVIDIA UFM Enterprise has a vulnerability in its session management component caused by a hard-coded cryptographic key . An attacker with local access could exploit this to extract information, potentially leading to information disclosure and escalation of privileges . The CVSS 3.1 score is 5.1 ...

The vulnerability of the x509_process_extension() function in the crypto/asymmetric_keys/x509_cert_parser.c module of the Linux kernel’s cryptographic subsystem allows a attacker to compromise the confidentiality and accessibility of the protected information.

The vulnerability of the x509processextension function in the crypto/asymmetrickeys/x509certparser.c module of the Linux kernel’s cryptographic subsystem is related to the execution of operations outside of the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to...

CVE-2026-59642

A flaw was found in Bouncy Castle for Java. This vulnerability allows a remote attacker to bypass cryptographic integrity checks in the Cryptographic Message Syntax CMS AuthenticatedData content without requiring user interaction or elevated privileges. Specifically, when authentication attribute...

Security Bulletin: Langflow is affected by weaknesses in secret handling and sensitive configuration access

Summary Langflow includes features for secret protection, environment access, and runtime configuration of workflow components. Weaknesses in cryptographic key handling, exposure of process environment values, and insufficient restriction of sensitive runtime configuration fields could allow...

CVE-2026-21751

HCL Hive is affected by a cryptographic primitive with a risky implementation which could allow an attacker unauthorized lateral compromise or widespread credential leakage if a single internal component is breached...

CVE-2025-68833 HCL Hive is affected by use of a cryptographic primitive with a risky implementation

HCL Hive Keycloak IAM Instance is affected by insufficient granularity of access control which could allow an attacker unauthorized access to resources...

EUVD-2026-64855

HCL Hive is affected by a cryptographic primitive with a risky implementation which could allow an attacker unauthorized lateral compromise or widespread credential leakage if a single internal component is breached...

CVE-2026-21751

HCL Hive is affected by a cryptographic primitive with a risky implementation , which could allow an attacker to achieve unauthorized lateral compromise or widespread credential leakage if a single internal component is breached. The vulnerability is rated CVSS 3.1 7.4 (HIGH) with a network attac...