Digital-Signature-Hijack

Digital Signature Hijack Hijacking legitimate digital signatures is a technique that can be used during red team assessments in order to sign PowerShell code and binaries. This could assist to bypass Device Guard restrictions and maintain stealthy in an engagement. DigitalSignatureHijack is a...

bypass360mimikatz_x64

방법：리소스 수정, 디지털 서명 추가 압축 해제 비밀번호：6613kris清水川崎...

peframe

======= peframe peframe is a open source tool to perform static analysis on Portable Executable malware and generic suspicious file. It can help malware researchers to detect packer, xor, digital signature, mutex, anti debug, anti virtual machine, suspicious sections and functions, macro and much...

Digital-Signature-Forgery-Attack

In this article, we will look at the cryptographic attack of digital signature forgery Digital Signature Forgery Attack, its consequences pose a threat to the security of transactions in the Bitcoin network, since digital signatures confirm the ownership and authorization of cryptocurrency...

PlEXcalaison

Local Privilege PlEXcalasion - CVE-2021-42835 Windows용 Plex Media Server 버전 1.25.0.5282 이전 버전은 TOCTOUTime Of Check Time Of Use 취약점에 영향을 받으며, 낮은 권한의 사용자가 SYSTEM 권한을 획득할 수 있습니다. 발견자 Tomer Peled, Netanel Cohen, Amir Shen - BugSec의 보안 연구원들. 세부 정보 Windows용 Plex는 새 업데이트를 설치하기 위해 PlexUpdateService.exe를...

py_certificate_extractor

pycertificateextractor Sometimes it necessary to extract certificate information from the digital signed file. Use this tool when that occurs. you can easily finish Let me know if there are any changes required or additional features need it. Features Extract the certificate information and...

cve-2013-3900-remediation-report

조치 보고서: CVE-2013-3900 – Windows Server 2019Azure VM의 WinVerifyTrust 취약점 개요 최근 Tenable Nessus를 사용하여 수행한 인증된 취약점 평가 중에 Microsoft Azure 에 호스팅된 Windows Server 2019 가상 머신에서 CVE-2013-3900이 탐지되었습니다. 이 스캔은 관리자 자격 증명을 활용하여 시스템 구성과 레지스트리 설정을 심층적으로 검사할 수 있었습니다. 이 문제는 Windows가 WinVerifyTrust 함수를 통해 서명 유효성 검사...

CVE-2026-84465

Zammad is a web based open source helpdesk/customer support system. Prior to 7.1.2, when Zammad checks the digital signature on an incoming S/MIME-signed email, it does not verify that the signing certificate is genuinely trusted, it only checks whether a certificate with a matching name is alrea...

CVE-2026-84465

The open source helpdesk system Zammad is vulnerable to sender impersonation in versions prior to 7.1.2 . The root cause is that the system fails to verify if an S/MIME-signed email's certificate is genuinely trusted; instead, it only checks if a certificate with a matching name exists in the sys...

CVE-2026-84465: Authentication Bypass by Spoofing

Zammad is a web based open source helpdesk/customer support system. Prior to 7.1.2, when Zammad checks the digital signature on an incoming S/MIME-signed email, it does not verify that the signing certificate is genuinely trusted, it only checks whether a certificate with a matching name is alrea...

Astra Linux – Vulnerability in Thunderbird

When displaying the sender of an email, if the sender’s name contained multiple Braille space characters, Thunderbird would display all those spaces. This could be exploited by an attacker to send an email message with the attacker’s digital signature, where the signature was displayed along with...

EUVD-2026-57737

Foxit PDF Editor/Reader inconsistently alerts users when signature fields are abnormally modified, including alterations to appearance, coordinates, or field duplication. This may mislead users into trusting tampered documents, since the UI cannot accurately reflect the actual integrity status of...

CVE-2026-12860 RSA PKCS#1 verification skips last two hash bytes in NULL-omitted path

In Bouncy Castle for Java before 1.85, RSA PKCS1 verification skips last two hash bytes in NULL-omitted path. This issue also affects Bouncy Castle for Java LTS before 2.73.12...

SUSE CVE-2026-11605

The issue is a resource exhaustion vulnerability associated with DNSSEC validation. BIND always validates all RRSIG records in an answer, even if they are not strictly needed. A query to an authoritative server/zone which returns many valid but superfluous RRSIG records causes the validator to...

Cache poisoning possible with label count discrepancy, RRSIG, and wildcards

...

[SECURITY] [DSA 6395-1] bind9 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-6395-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso July 22, 2026 https://www.debian.org/security/faq -...

CVE-2026-46582

In NLnet Labs Unbound 1.6.0 up to and including 1.25.1, a replay of a wildcard rrset as another piece of data, could be briefly considered DNSSEC secure based only on the RRSIG validation and stored into cache, before later validation treats it as bogus based on NSEC validation. When the resolvin...

CVE-2026-15395

The Kali Forms — Contact Form & Drag-and-Drop Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'digitalSignature' Field Value in all versions up to, and including, 2.4.18 due to insufficient input sanitization and output escaping. This makes it possible for...

EUVD-2026-45130

The Kali Forms — Contact Form & Drag-and-Drop Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'digitalSignature' Field Value in all versions up to, and including, 2.4.18 due to insufficient input sanitization and output escaping. This makes it possible for...

PT-2026-60704

The Kali Forms — Contact Form & Drag-and-Drop Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'digitalSignature' Field Value in all versions up to, and including, 2.4.18 due to insufficient input sanitization and output escaping. This makes it possible for...