CVE-2026-39324

CVE-2026-39324 エクスプロイトPoC Rack::Session::Cookieの復号失敗時に暗号化されていないCookieを受け入れてしまうフォールバック | ---|--- アドバイザリ| GHSA-33qg-7wpp-89cq パッケージ| rack-session RubyGems 影響を受けるバージョン| = 2.1.1 修正済みバージョン| 2.1.2 概要 secrets: を指定した Rack::Session::Cookie は、暗号化されたCookieのみを受け入れるべきです。しかし、復号に失敗した場合、Cookieを拒否せず、デフォルトの...

cisco7crack

cisco7crack Cisco enable 7パスワードの暗号化および復号化...

exploit_laravel_cve-2018-15133

CVE-2018-15133 대상 Laravel 익스플로잇 이 코드는 CVE-2018-15133 취약점을 익스플로잇하며, kosmiz의 PoC와 이 취약점에 대한 Metasploit 익스플로잇을 기반으로 합니다. 저는 주로 Hack The Box의 머신을 위해 이 코드를 작성했습니다. 당시 Metasploit을 사용하고 싶지 않았고, Python 연습 핑계도 필요했기 때문입니다. CVE 설명: Laravel Framework 5.5.40 이하 및 5.6.x 5.6.29 이하 버전에서 잠재적으로 신뢰할 수 없는 X-XSRF-TOK...

Exploit-CVE-2026-1357

依存関係のインストール pip3 install pycryptodome requests 基本エクスプロイト python3 wpvivi.py http://target.com カスタムWebシェル python3 wpvivi.py http://target.com --shell backdoor.php python3 wpvivi.py http://target.com --code "" 技術的な説明: Null Byte Key: RSA復号が失敗するとfalseが返り、phpseclibはそれを「\x00\x00\x00」として扱います。AES-128...

cypher

🌹 CYPHER TOOLS 🌹 Written by TMRSWRR Version 1.0.0 All in one tools for CRYPTOLOGY. Instagram: Capture the Root 🖼️ Screenshots 🖼️ 📹 How to use 📹 Click on the image... 🧰 Features 🧰 This tool include: 📍 HASH 📍 RSA 📍 XOR 📍 AES ECC 📍 AES CBC 📍 DES ECB 📍 FERNET 📍 RC2 📍 RC4 📍 CHACHA20POLY1305 📍...

Lab-for-cve-2018-15133

概要: MExploiting CVE-2018-15133 デシリアライゼーション脆弱性 このエクスプロイトは、Laravel Framework 5.5.40 までおよび 5.6.x の 5.6.29 までに存在するデシリアライゼーション脆弱性を利用します。 説明 信頼できない可能性のある X-XSRF-TOKEN 値に対する unserialize 呼び出しが原因で、リモートコード実行が発生する可能性があります。これには、Illuminate/Encryption/Encrypter.php の decrypt メソッドと、phpggc の...

CVE-2017-13253

CVE-2017-13253 CVE-2017-13253에 대한 PoC 코드. 전체 글은 여기에서 확인할 수 있습니다. 참고로 숫자는 블로그 게시물과 약간 다릅니다. 왜냐하면 0x2000 크기의 힙으로 충돌 가능성이 더 높다는 것을 발견했기 때문입니다 물론 충분히 여러 번 실행하면 결국 충돌할 것입니다. 질문/문제/의견이 있으면 트위터@tamirzb로 연락 주세요. 빌드 이를 빌드하려면: 1. Android 소스 코드 다운로드. 2. 이 저장소를 AOSP/external에 넣습니다. 3. 다음 명령을 실행합니다:...

tp-link-decrypt

注意: 2025年10月5日時点で、このプロジェクトは非推奨となりました。 Nate Robbins 氏が引き継いでくださり、スイッチの復号機能が追加されました - https://github.com/robbins/tp-link-decrypt ====================================================================================================== このツールが役立った場合は、[email protected] または GitHub でお知らせください : 1. 任意...

chromepass

Chromepass - Hacking Chrome Saved Passwords and Cookies View Demo · Report Bug · Request Feature Table of Contents About the Project AV Detection Getting started Prerequisites Installation Usage Email Errors, Bugs and Feature Requests Learn More License Demo About The project Chromepass is a...

CVE-2024-53691

CVE-2024-53691 https://www.qnap.com/en/security-advisory/qsa-24-28 https://vulners.com/cve/CVE-2024-53691 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N 8.7 「悪用された場合、リンク追跡の脆弱性により、ユーザーアクセスを取得したリモート攻撃者がファイルシステムを辿り、意図しない場所に到達する可能性があります。」 発見日: 2024年4月22日 修正日: 2024年9月7日 影響を受けるバージョン: Q...

CVE-2026-49230-APISIX-jwe-decrypt-Auth-Bypass

CVE-2026-49230 — Apache APISIX jwe-decrypt 인증 우회 Apache APISIX jwe-decrypt 플러그인의 인증 우회 개념 증명입니다. 이 플러그인은 JWE 토큰을 복호화하고 평문을 업스트림으로 전달하여 인증 게이트 역할을 합니다. 그러나 AES-GCM 인증 태그를 전혀 검증하지 않습니다. 유효한 소비자 kid만 있으면 암호문과 태그가 얼마나 가짜든 상관없이 토큰을 수락합니다. 따라서 모든 합법적인 토큰의 헤더에 평문으로 포함되어 있는 소비자 키를 아는 공격자는 AES 시크릿을 모르고도...

EUVD-2026-43097

Phalcon: Non-constant-time HMAC verification in Encryption\Crypt::decrypt timing side-channel...

CVE-2026-81695

opensslencrypt versions before 1.4.9 fail to escape attacker-controlled keyid values printed to stderr during decrypt auto-detection. Attackers can craft encrypted files with malicious keyid containing escape sequences to repaint terminal output and forge authenticity verification blocks...

CVE-2026-81695 openssl_encrypt before 1.4.9 Terminal Injection via key_id

opensslencrypt versions before 1.4.9 fail to escape attacker-controlled keyid values printed to stderr during decrypt auto-detection. Attackers can craft encrypted files with malicious keyid containing escape sequences to repaint terminal output and forge authenticity verification blocks...

openssl: heap buffer overflow in CMS key unwrapping

A flaw was found in OpenSSL. A crafted CMS Cryptographic Message Syntax message can cause an 8-byte out-of-bounds heap write when it is decrypted with CMSdecrypt. This issue occurs because the CMS decryption process incorrectly sizes the key-unwrap output buffer when using the AES-WRAP-PAD unwrap...

CVE-2026-63072

A flaw was found in OpenSSL. A crafted CMS Cryptographic Message Syntax message can cause an 8-byte out-of-bounds heap write when it is decrypted with CMSdecrypt. This issue occurs because the CMS decryption process incorrectly sizes the key-unwrap output buffer when using the AES-WRAP-PAD unwrap...

Out-of-bounds Write

Overview Affected versions of this package are vulnerable to Out-of-bounds Write due to buffer sizing in cmskekcipher in crypto/cms/cmskari.c and crypto/cms/cmskemri.c. An attacker can corrupt the heap and trigger a denial of service by supplying a crafted CMS message that is decrypted with...

ALPINE-CVE-2026-63072

Issue summary: OpenSSL CMS decryption sizes the key-unwrap output buffer based on querying the unwrapped key size, but the AES-WRAP-PAD unwrap primitive can write and cleanse more bytes than that query reports, causing an 8-byte out-of-bounds heap write. Impact summary: An attacker who supplies a...

EUVD-2026-65482

Issue summary: OpenSSL CMS decryption sizes the key-unwrap output buffer based on querying the unwrapped key size, but the AES-WRAP-PAD unwrap primitive can write and cleanse more bytes than that query reports, causing an 8-byte out-of-bounds heap write. Impact summary: An attacker who supplies a...

CVE-2026-58085 Missing MAC validation in wg(4) packet decryption

After dispatching a decrypt operation to OCF and receiving the result, the wg4 driver failed to check whether the MAC verification step succeeded. The driver thus silently accepted packets with an invalid Poly1305 authentication tag. A remote attacker who can send UDP packets to a WireGuard...