ECC_Attacks

Known Attacks On Elliptic Curve Cryptography Introduction Introduction To Elliptic Curves Elliptic Curves In The Context Of Cryptography ECC Attacks ECDH Attacks The Order Of The Generator Is Too Small The Order Of The Generator Is A Smooth Number The Order Of The Generator Is Almost A Smooth...

libsignal

Overview libsignal contains platform-agnostic APIs used by the official Signal clients and servers, exposed as a Java, Swift, or TypeScript library. The underlying implementations are written in Rust: libsignal-protocol: Implements the Signal protocol, including the Double Ratchet algorithm. A...

Gladinet CentreStack & Triofox - Hardcoded Credentials

Gladinet CentreStack and Triofox 16.12.10420.56791 contain a hardcoded credentials vulnerability caused by use of hardcoded AES cryptoscheme values, letting attackers perform arbitrary local file inclusion without authentication, potentially leading to full system compromise. id: CVE-2025-14611...

python-cryptography: python-cryptography: Duplicate self-signed intermediates can cause exponential path-building

A flaw was found in python-cryptography. When processing invalid certificate chains that include duplicate self-signed certificates, the system recursively invokes the same certificate, leading to an exponential increase in processing time. A remote attacker could exploit this by providing a...

Important: Red Hat Security Advisory: python3.14-cryptography security update

An update for python3.14-cryptography is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

python-cryptography: python-cryptography: python-cryptography verifier accepts wildcard DNS names allowing escape from permittedSubtrees

A flaw was found in python-cryptography. This vulnerability arises from incorrect handling of wildcard Domain Name System DNS names during certificate validation. Specifically, the verifier may accept a certificate with a broad wildcard DNS name e.g., .example.com even when a more restrictive nam...

python-cryptography: python-cryptography: Duplicate self-signed intermediates can cause exponential path-building

A flaw was found in python-cryptography. When processing invalid certificate chains that include duplicate self-signed certificates, the system recursively invokes the same certificate, leading to an exponential increase in processing time. A remote attacker could exploit this by providing a...

Important: Red Hat Security Advisory: python3.14-cryptography security update

An update for python3.14-cryptography is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

python-cryptography: python-cryptography: python-cryptography verifier accepts wildcard DNS names allowing escape from permittedSubtrees

A flaw was found in python-cryptography. This vulnerability arises from incorrect handling of wildcard Domain Name System DNS names during certificate validation. Specifically, the verifier may accept a certificate with a broad wildcard DNS name e.g., .example.com even when a more restrictive nam...

Important: python3.14-cryptography security update

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fixes:...

ALSA-2026:64795 Important: python3.14-cryptography security update

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fixes:...

ROOT-APP-PYPI-CVE-2026-26007 CVE-2026-26007 in cryptography - Patched by Root

Root has patched CVE-2026-26007 in the cryptography package for Root:PyPI. Multiple fixed versions available...

ROOT-APP-PYPI-CVE-2024-26130 CVE-2024-26130 in cryptography - Patched by Root

Root has patched CVE-2024-26130 in the cryptography package for Root:PyPI. Multiple fixed versions available...

ROOT-APP-PYPI-CVE-2023-50782 CVE-2023-50782 in cryptography - Patched by Root

Root has patched CVE-2023-50782 in the cryptography package for Root:PyPI. Multiple fixed versions available...

ROOT-APP-PYPI-CVE-2023-0286 CVE-2023-0286 in cryptography - Patched by Root

Root has patched CVE-2023-0286 in the cryptography package for Root:PyPI. Multiple fixed versions available...

ROOT-APP-PYPI-CVE-2023-23931 CVE-2023-23931 in cryptography - Patched by Root

Root has patched CVE-2023-23931 in the cryptography package for Root:PyPI. Multiple fixed versions available...

ROOT-APP-PYPI-CVE-2023-49083 CVE-2023-49083 in cryptography - Patched by Root

Root has patched CVE-2023-49083 in the cryptography package for Root:PyPI. Multiple fixed versions available...

ROOT-APP-PYPI-CVE-2024-0727 CVE-2024-0727 in cryptography - Patched by Root

Root has patched CVE-2024-0727 in the cryptography package for Root:PyPI. Multiple fixed versions available...

python-paddingoracle

python-paddingoracle：一个可移植的填充预言机（Padding Oracle）利用 API 已针对 PYTHON 3 更新 python-paddingoracle 是一个 API，为渗透测试人员提供了 PadBuster 及其他填充预言机（padding oracle）利用工具的可定制替代方案。这些工具很难（不经大量重写）应用于独特的、因应用而异的场景，例如非 HTTP 应用、原始套接字、客户端应用、特殊编码等。 用法： 要使用 paddingoracle API，只需实现 PaddingOracle API 中的 oracle...

codecrypt

Codecrypt The post-quantum cryptography tool. Codecrypt is currently unmaintained, although I still successfully use it. If you are interested in developing/maintaining it, ping me. About This is a GnuPG-like unix program for encryption and signing that uses only quantum-computer-resistant...