reyee_decrypt

reyeedecrypt Ruijie ReyeeOS のファームウェアと設定バックアップを適応的に復号し、設定から平文パスワードを復元します。 使用方法 python3 reyeedecrypt.py 出力ディレクトリ は自動判別され、以下の種類をサポートします： 入力| 例 ---|--- ファームウェア tar パッケージ| AP3.01...withbootencryptov1.tar.gz ファームウェア展開ディレクトリ| ...withbootencryptov1/ 暗号化 install bin| ...installencryptov1.bin /...

AlmaLinux 9.2 [TuxCare] Security Update: libgcrypt / libgcrypt-devel (ALMALINUX9.2:CLSA-2025:1736859209)

The AlmaLinux 9.2 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2025:1736859209 advisory. - A timing-based side-channel flaw was found in libgcrypt's RSA implementation. This issue may allow a remote attacker to initiate a...

AlmaLinux 9.2 [TuxCare] Security Update: openssl / openssl-devel / openssl-libs / openssl-perl Multiple Vulnerabilities (ALMALINUX9.2:CLSA-2026:1787059408)

The AlmaLinux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1787059408 advisory. - Issue summary: Parsing a crafted DER-encoded ASN.1 structure with a primitive element whose content exceeds 2 gigabytes in length...

CentOS Linux 8.5 [TuxCare] Security Update: openssl / openssl-devel / openssl-libs / openssl-perl / etc Multiple Vulnerabilities (CENTOS8.5:CLSA-2026:1785335008)

The CentOS Linux 8.5 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS8.5:CLSA-2026:1785335008 advisory. - Issue summary: Parsing a crafted DER-encoded ASN.1 structure with a primitive element whose content exceeds 2 gigabytes in length...

AlmaLinux 9.2 [TuxCare] Security Update: opencryptoki / opencryptoki-devel / opencryptoki-icsftok / etc (ALMALINUX9.2:CLSA-2026:1784542737)

The AlmaLinux 9.2 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1784542737 advisory. - A timing side-channel vulnerability has been discovered in the opencryptoki package while processing RSA PKCS1 v1.5 padded ciphertexts. Thi...

AlmaLinux 9.2 [TuxCare] Security Update: iperf3 / iperf3-devel (ALMALINUX9.2:CLSA-2026:1779373661)

The AlmaLinux 9.2 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1779373661 advisory. - iPerf3 before 3.17, when used with OpenSSL before 3.2.0 as a server with RSA authentication, allows a timing side channel in RSA decryption...

CentOS Linux 8 [TuxCare] Security Update: bpftool / kernel / kernel-core / kernel-cross-headers / etc (CENTOS-STREAM8:CLSA-2026:1778839666)

The CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS- STREAM8:CLSA-2026:1778839666 advisory. - In the Linux kernel, the following vulnerability has been resolved: net: skbuff: preserve shared-frag marker during coalescing...

CentOS Linux 7 [TuxCare] Security Update: openssl / openssl-devel / openssl-libs / openssl-perl / etc (CENTOS7:CLSA-2025:1751271968)

The CentOS Linux 7 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS7:CLSA-2025:1751271968 advisory. - In situations where an attacker receives automated notification of the success or failure of a decryption attempt an attacker, after sending a...

CVE-2019-18988

CVE-2019-18988 TeamViewer 저장 자격 증명 복호화...

CVE-2026-31431

CVE-2026-31431 구조 . ├── container │ ├── container.md 容器逃逸的思路 │ ├── expenv 容器环境 │ │ ├── bin │ │ │ ├── gscontainer │ │ │ └── share │ │ ├── Dockerfile │ │ ├── run.sh │ │ └── src │ │ ├── gscontainer.c │ │ └── share.c │ ├── images │ │ ├── container.png │ ...

Important: Red Hat Security Advisory: cjose security update

An update for cjose is now available for Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

cjose: cjose: Heap buffer overflow in AES Key Wrap decryption leads to denial of service

A flaw was found in cjose, a C library for Javascript Object Signing and Encryption JOSE. A remote, unauthenticated attacker can exploit a heap buffer overflow vulnerability in the AES Key Wrap decryption process. By submitting a crafted Javascript Web Encryption JWE to an application, the attack...

Important: Red Hat Security Advisory: cjose security update

An update for cjose is now available for Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

cjose: cjose: Heap buffer overflow in AES Key Wrap decryption leads to denial of service

A flaw was found in cjose, a C library for Javascript Object Signing and Encryption JOSE. A remote, unauthenticated attacker can exploit a heap buffer overflow vulnerability in the AES Key Wrap decryption process. By submitting a crafted Javascript Web Encryption JWE to an application, the attack...

HiveV5_file_decryptor

HiveV5 파일 복호화 PoC 소개 지난 몇 달간 수행된 작업은 Hive v5-5.2의 악성 파일 암호화 메커니즘을 밝혀내기 위해 필요했습니다. 작업은 두 부분으로 나뉘었습니다. 1. 키스트림 복호화 2. 복호화된 키스트림을 이용한 파일 복호화 훌륭하신 @rivitna 님께 이 몇 달간의 작업에 대한 지원, 대화, 조언에 감사드립니다! rivitna의 github에는 Hive 랜섬웨어 등에 관한 유용한 정보가 가득하니 꼭 확인해 보시기 바랍니다. 이 readme에서는 파일 복호화 알고리즘에 대한 몇 가지 정보를 찾을 수 있으...

BumbleCrypt

BumbleCrypt Bumblebee에서 영감을 받은 Crypter 배경 BumbleCrypt는 Bumblebee의 crypter에서 영감을 받았습니다. Bumblebee의 경우, 메인 Bumblebee DLL이 메모리에 로드되어 다음과 같은 방식으로 실행됩니다: Heap에 페이로드를 복호화하여 기록합니다 NtOpenFile, NtCreateSection, NtMapViewOfSection 세 가지 NtApi를 후킹합니다 LoadLibraryW"gdiplus.dll"를 호출합니다. LoadLibrary가 라이브러리를 로드할 ...

Icedid-file-decryptor

IcedID 복호화 도구 IcedID 감염과 관련된 license.dat 파일을 정적으로 복호화하는 스크립트입니다. 또한 언패킹된 IcedID 샘플의 .data 섹션도 복호화합니다. 참고 사항: 스크립트는 PE 파일 또는 license.dat 파일이 주어졌는지 자동으로 감지합니다. PE 파일이 제공된 경우, 해당 파일이 먼저 언패킹되었다고 가정합니다. 복호화에 성공하면 원시 덤프가 output.bin에 기록됩니다. 또한 빠른 문자열 검색이 수행되며, 탐지된 문자열은 파일에 기록됩니다. 언패킹된 PE가 제공된 경우 C2가 화면에...

CVE-2020-5248

CVE-2020-5248 CVE-2020-5248에 대한 개념 증명PoC. 요약 GLPI 9.4.6 이전 버전에는 기본 암호화 키와 관련된 취약점이 있습니다. GLPIKEY는 공개되어 있으며 모든 인스턴스에서 사용됩니다. 이는 누구나 이 키를 사용하여 저장된 민감한 데이터를 복호화할 수 있음을 의미합니다. GLPI를 설치하기 전에 키를 변경하는 것이 가능합니다. 그러나 기존 인스턴스에서는 데이터를 새 키로 다시 암호화해야 합니다. 문제는 데이터베이스에서 어떤 열이나 행이 그 키를 사용하는지 알 수 없다는 것입니다. 특히...

RHEL 10 : cjose (RHSA-2026:73129)

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:73129 advisory. CJose is C library implementing the Javascript Object Signing and Encryption JOSE. Security Fixes: cjose: cjose: Heap buffer overflow in AES Key Wr...

RHEL 9 : cjose (RHSA-2026:73128)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:73128 advisory. CJose is C library implementing the Javascript Object Signing and Encryption JOSE. Security Fixes: cjose: cjose: Heap buffer overflow in AES Key Wra...