ripple20

"Ripple20" Treck IOT/ICS डिवाइस डिस्कवरी और एक्सप्लॉइट डिटेक्शन v0.2 सारांश: Treck डिवाइसों की निष्क्रिय पहचान, डिस्कवरी/स्कैनिंग प्रयासों और Treck TCP/IP स्टैक में "Ripple20" भेद्यताओं के सेट के शोषण के लिए एक Zeek पैकेज। संदर्भ:...

sshimpanzee

Sshimpanzee Sshimpanzee ti permette di costruire un server ssh reverse statico. Invece di mettersi in ascolto su una porta e attendere connessioni, il server ssh avvierà una connessione inversa verso l'IP dell'attaccante, proprio come una normale reverse shell. Sshimpanzee ti permette di sfruttar...

Mistica

Mística --- Logotipo da Mística por JoelGMSec Mística é uma ferramenta que permite incorporar dados em campos de protocolos da camada de aplicação, com o objetivo de estabelecer um canal bidirecional para comunicações arbitrárias. Atualmente, a encapsulação nos protocolos HTTP, HTTPS, DNS e ICMP...

kernel: ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv()

In the Linux kernel, the following vulnerability has been resolved: ip6tunnel: use skbvlaninetprepare in ip6tnlrcv Blamed commit did not take care of VLAN encapsulations as spotted by syzbot 1. Use skbvlaninetprepare instead of pskbinetmaypull. 1 BUG: KMSAN: uninit-value in INETECNdecapsulate...

CVE-2026-23006-Kyber-Ciphertext-Length-Side-Channel

CVE-2026-23006 – Canale laterale sulla lunghezza del testo cifrato di Kyber Codice del programma Python root@kitploit: kyberlengthleak.py - Leaks secret key bit based on ciphertext length import random Simulate encapsulation: ciphertext length depends on message bit def encapsulatepk, bit: In a...

rust_citadel

Citadel Post-Quanten-Hybrid-Verschlüsselungs- und Schlüsselverwaltungsserver. Citadel kombiniert X25519 + ML-KEM-768 zur Schlüsselkapselung und AES-256-GCM zur Datenverschlüsselung, gemäß dem Hybridansatz von NIST für den Post-Quanten-Übergang. Anwendungen verschlüsseln und entschlüsseln Daten üb...

LavaDome

LavaDome 🌋️ Un nuovo strumentoLavaMoat per nodi DOM con I ncapsulamento sicuro ⚠️ SPERIMENTALE WIP - USALO A TUO RISCHIO scopri di più Demo Prova a violareLavaDome - visita l'app demo, apri la console, e fai tutto ciò che è in tuo potere per rubare il segreto dall'interno dell'istanza LavaDome...

zupt

Project archived. For newest versions and updates check it out. Compress everything. Trust nothing. Encrypt always. Backup compression with hardware-adaptive codec selection, AES-256 authenticated encryption, post-quantum key encapsulation, and full-disk backup. Pure C11, zero dependencies, 13,00...

fips203

NCC Group: Standard FIPS 203 per meccanismo di incapsulamento della chiave basato su reticoli modulari Il FIPS 203 bozza pubblica iniziale Standard per meccanismo di incapsulamento della chiave basato su reticoli modulari è scritto in Rust puro per applicazioni server, desktop, browser ed embedde...

CVE-2026-76989

A security vulnerability has been detected in liftoff-sr CIPster 1802525be27d33e19a9a83c163e331a1d13b1892. This impacts an unknown function of the file source/src/enetencap/encap.cc of the component TCP Encapsulation Receive Path. The manipulation leads to out-of-bounds read. The attack can be...

EUVD-2026-63347

A security vulnerability has been detected in liftoff-sr CIPster 1802525be27d33e19a9a83c163e331a1d13b1892. This impacts an unknown function of the file source/src/enetencap/encap.cc of the component TCP Encapsulation Receive Path. The manipulation leads to out-of-bounds read. The attack can be...

CVE-2026-76989

CVE-2026-76989 is an out-of-bounds read in the TCP Encapsulation Receive Path of liftoff-sr CIPster (commit 1802525), located in source/src/enet_encap/encap.cc. The flaw can be triggered remotely without authentication or user interaction, resulting in a low availability impact (no confidentialit...

CVE-2026-72246

A flaw was found in the Linux kernel's netfilter flowtable component. This vulnerability arises from an error in how the system sets up tunnel routes, specifically in handling network packet encapsulation and tunnel information. An attacker could potentially exploit this to cause incorrect networ...

CVE-2026-74900

opensslencrypt versions before 1.4.0 contain a critical vulnerability in pqc.py where KEM decapsulation failures silently fall back to simulation mode, generating a deterministic shared secret from only 16 bytes of the private key and publicly available encapsulated key data. Attackers who obtain...

UBUNTU-CVE-2026-72249

In the Linux kernel, the following vulnerability has been resolved: netfilter: flowtable: use dst in this direction when pushing IPIP header When pushing the IPIP header, the route of the other direction is used to calculate the headroom, use the route in this direction. Accessing the other tuple...

CVE-2026-73087

Dozzle is a realtime log viewer for docker containers. From 10.5.2 until 10.6.15, the isBlockedIP SSRF guard in internal/notification/dispatcher/webhook.go, used by safeDialContext for webhook notification URLs, does not inspect IPv4 addresses embedded in 6to4, NAT64, Teredo, or IPv4-compatible...

CVE-2026-68299

In the Linux kernel, the following vulnerability has been resolved: vmxnet3: fix BUGON in vmxnet3gethdrlen for Geneve packets vmxnet3gethdrlen assumes gdesc-rcd.v4/v6/tcp always describe the outer header, but for a Geneve-encapsulated packet the device can set them based on the inner header...

Astra Linux – Vulnerability found in Linux 6.12, Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: ip6tunnel: Use skbvlaninetprepare in ip6tnlrcv. The responsible commit did not handle VLAN encapsulation as detected by syzbot 1. Use skbvlaninetprepare instead of pskbinetmaypull. 1 Bug: KMSAN: uninit-value in...

Astra Linux – Vulnerability in Linux 6.12

In the Linux kernel, the following vulnerability has been resolved: net: gro: fix outer network offset The udpgrocomplete function assumes that all packets inserted into the receive queue have the encapsulation flag set to zero. However, this assumption is not true. Some hardware network cards ca...

Astra Linux – Vulnerability in Linux 6.12

In the Linux kernel, the following vulnerabilities have been resolved: l2tp: Fixed a memory leak in l2tpudpencaprecv. syzbot reported a memory leak in struct l2tpsession, l2tptunnel, sock, etc. 0 The referenced commit moved the validation of the protocol version in l2tpudpencaprecv. The new...