securesystemslib

securesystemslib Securesystemslib는 디지털 서명의 생성과 검증을 위한 암호화 인터페이스입니다. TUF 및 in-toto 프로젝트를 위해 개발되었으며, 키와 서명 컨테이너는 해당 프로젝트의 메타데이터 형식과 호환됩니다. 내부적으로 Securesystemslib는 다양한 디지털 서명 시스템예: cryptography, PIV 하드웨어 키, 여러 클라우드 기반 키 관리 시스템을 사용할 수 있습니다. 설치 기본 설치는 순수 Python ed25519 서명 검증만 지원합니다. 다른 체계와 서명 생성을 활성화하...

libsodium

Sodium은 암호화, 복호화, 디지털 서명 및 안전한 비밀번호 해싱을 포함한 다양한 암호화 연산을 제공하는 사용하기 쉬운 소프트웨어 라이브러리입니다. 이는 NaCl의 휴대 가능하고, 크로스 컴파일 가능하며, 설치 및 패키징이 가능한 포크입니다. API 호환성을 유지하면서 libsodium은 기능을 확장하여 사용성을 개선하고 안전한 애플리케이션 개발을 단순화합니다. 주요 기능 암호화 및 복호화: 최신 알고리즘으로 데이터를 안전하게 암호화하고 복호화합니다. 디지털 서명: 서명을 생성하고 검증하여 데이터의 신뢰성을 보장합니다. 크...

liboqs

liboqs liboqs is an open source C library for quantum-safe cryptographic algorithms. liboqs Overview Status Supported Algorithms Key encapsulation mechanisms Signature schemes Stateful signature schemes Limitations and Security Platform limitations Support limitations Quickstart Linux and Mac...

Crypton

Crypton Crypton is an educational library to learn and practice Offensive and Defensive Cryptography. It is basically a collection of explanation and implementation of all the existing vulnerabilities and attacks on various Encryption Systems Symmetric and Asymmetric, Digital Signatures, Message...

ECC_Attacks

타원곡선 암호에 대한 알려진 공격들 서론 타원곡선 소개 암호학적 맥락에서의 타원곡선 ECC 공격 ECDH 공격 생성자의 위수가 너무 작은 경우 생성자의 위수가 매끄러운 수smooth number인 경우 생성자의 위수가 거의 매끄러운 수이고 개인키가 작은 경우 점이 곡선 위에 있는지 검증하지 않는 경우 곡선이 특이singular한 경우 곡선이 초특이supersingular한 경우 곡선이 비정상anomalous인 경우 ECDSA 공격 메시지에 서명하기 전에 해시하지 않는 경우 서로 다른 서명에서 동일한 k 값을 재사용하는 경우 k...

Astra Linux – Vulnerability in LibreOffice

LibreOffice supports digital signatures for ODF documents and macros within documents. It provides visual aids to indicate that the document has not been altered since the last signature, and that the signature is valid. A vulnerability in certificate validation in LibreOffice allowed attackers t...

securesystemslib v1.5.1

securesystemslib Securesystemslib is a cryptography interface for signing and verifying digital signatures. It is developed for the TUF and in-toto projects: the key and signature containers are compatible with metadata formats from those projects. Under the hood, Securesystemslib can use various...

WordPress Formidable Digital Signatures file deletion vulnerability

WordPress Formidable Digital Signatures is a paid extension for the Formidable Forms plugin, allowing for the embedding of drawable electronic signature fields within WordPress forms. It enables the saving of handwritten signatures as images and their association with submission data. There is a...

WordPress Formidable Digital Signatures plugin <= 3.0.6 - Unauthenticated Arbitrary File Deletion via Signature Field vulnerability

Unauthenticated Arbitrary File Deletion via Signature Field vulnerability discovered by Rafie Muhammad - Awesome Motive, Inc. in WordPress Plugin Formidable Digital Signatures versions = 3.0.6...

CVE-2026-16230

The Formidable Digital Signatures plugin for WordPress is vulnerable to file deletion due to insufficient file path validation in the deletefile function in all versions up to, and including, 3.0.6. This makes it possible for unauthenticated attackers to delete files on the server by supplying an...

CVE-2026-16230

The CVE concerns the Formidable Digital Signatures plugin for WordPress, where the delete_file function fails to validate file paths in all versions up to 3.0.6. This allows unauthenticated attackers to delete files on the server by submitting an attacker-controlled filename via item_meta[field_i...

CVE-2026-16230 Formidable Digital Signatures <= 3.0.6 - Unauthenticated Arbitrary File Deletion via Signature Field

The Formidable Digital Signatures plugin for WordPress is vulnerable to file deletion due to insufficient file path validation in the deletefile function in all versions up to, and including, 3.0.6. This makes it possible for unauthenticated attackers to delete files on the server by supplying an...

EUVD-2026-56928

The Formidable Digital Signatures plugin for WordPress is vulnerable to file deletion due to insufficient file path validation in the deletefile function in all versions up to, and including, 3.0.6. This makes it possible for unauthenticated attackers to delete files on the server by supplying an...

CVE-2026-16230 Formidable Digital Signatures <= 3.0.6 - Unauthenticated Arbitrary File Deletion via Signature Field

The Formidable Digital Signatures plugin for WordPress is vulnerable to file deletion due to insufficient file path validation in the deletefile function in all versions up to, and including, 3.0.6. This makes it possible for unauthenticated attackers to delete files on the server by supplying an...

CVE-2026-16230

The Formidable Digital Signatures plugin for WordPress is vulnerable to file deletion due to insufficient file path validation in the deletefile function in all versions up to, and including, 3.0.6. This makes it possible for unauthenticated attackers to delete files on the server by supplying an...

CVE-2026-16230: Relative Path Traversal

The Formidable Digital Signatures plugin for WordPress is vulnerable to file deletion due to insufficient file path validation in the deletefile function in all versions up to, and including, 3.0.6. This makes it possible for unauthenticated attackers to delete files on the server by supplying an...

PT-2026-70887

The Formidable Digital Signatures plugin for WordPress is vulnerable to file deletion due to insufficient file path validation in the delete file function in all versions up to, and including, 3.0.6. This makes it possible for unauthenticated attackers to delete files on the server by supplying a...

Thermo Fisher Patches Forensic DNA File Tampering Flaw in Its Software

Thermo Fisher patched CVE-2026-17583 in five supported DNA analysis products by adding digital signatures that help laboratories detect modified forensic files...

Thermo Fisher Patches Flaw That Could Make DNA File Tampering Nearly Undetectable

Thermo Fisher Scientific has patched a flaw in select Applied Biosystems human identification software that could allow data files to be altered before analysis software loads them. The vendor's July 31 security bulletin says nearly undetectable changes to .fsa and .hid outputs could occur if...

github.com/sigstore/sigstore-go: sigstore-go: Signature bypass allows acceptance of bundles signed with expired keys

A flaw was found in sigstore-go, a software library used for verifying digital signatures. This vulnerability specifically affects the workflow for self-managed long-lived signing keys that do not use certificates. An attacker who possesses an expired signing key can exploit this by creating and...