CVE-2025-49113

CVE-2025-49113 Roundcube Exploit Ein Python-Exploit für CVE-2025-49113, der eine Sicherheitslücke in Roundcube Webmail ausnutzt, die durch PHP-Objekt-Deserialisierung eine Remote-Code-Ausführung ermöglicht. Übersicht Dieser Exploit nutzt eine Deserialisierungssicherheitslücke in Roundcubes...

git-crypt

git-crypt - crittografia trasparente dei file in git git-crypt abilita la crittografia e decrittografia trasparente dei file in un repository git. I file che scegli di proteggere vengono crittografati quando vengono committati e decrittografati quando vengono estratti. git-crypt ti permette di...

gpg_reaper

GPG Reaper TL;DR: Ottenere/Rubare/Ripristinare Chiavi Private GPG dalla cache/memoria di gpg-agent Questa POC dimostra un metodo per ottenere chiavi private GPG dalla memoria di gpg-agent su Windows. Normalmente ciò dovrebbe essere possibile solo entro un intervallo di 10 minuti valore di...

git-remote-gcrypt

================= git-remote-gcrypt Remote git criptata con GNU Privacy Guard :Sezione manuale: 1 Descrizione git-remote-gcrypt è un helper remoto per git per eseguire push e pull da repository crittografate con GnuPG, utilizzando un formato personalizzato. Questo helper remoto gestisce URI con...

scallion

2020 Project Update Scallion was a hobby project to learn OpenCL and RSA. We are not currently maintaining scallion. It has bitrotted in two important ways: 1. Tor has moved on to v3 Onion addresses, which scallion does not support. Old v2 addresses will stop working in October of 2021. The new...

gpg_reaper

GPG Reaper TL;DR: Obtain/Steal/Restore GPG Private Keys from gpg-agent cache/memory This POC demonstrates method for obtaining GPG private keys from gpg-agent memory under Windows. Normally this should be possible only within 10 minutes time frame --default-cache-ttl value. Unfortunately...

codecrypt

Codecrypt Lo strumento di crittografia post-quantistica. Codecrypt attualmente non è più mantenuto, anche se lo uso ancora con successo. Se sei interessato a svilupparlo/mantenerlo, contattami. Informazioni Questo è un programma unix simile a GnuPG per cifratura e firma che usa solo algoritmi...

envsec

envsec Sichere Verwaltung von Umgebungsgeheimnissen mit nativen Betriebssystem-Schlüsselspeichern. Demo Funktionen Geheimnisse im nativen Schlüsselspeicher des Betriebssystems speichern nicht in Klartext-Dateien Plattformübergreifend: macOS, Linux, Windows Geheimnisse nach Kontext organisieren z...

pub

❤ Sei ein Held, spende ein 🍺 🙂 ⟶ Ƀ : 1AZMeGVfCBbYwVYyG9s79pJDyocTZgiApa | Ξth : 0x438B38E30eF117C15fBfF833f9C2c70182925815 Exploit PoCs und Tools für Schwachstellen, die von tintinweb offengelegt wurden. pub root@kitploit: police line - do not cross ==== police line - do not cross ==== police lin...

MINI-GPG3-QFQW-M53R

Bulletin has no description...

CVE-2026-24882 vulnerabilities

Vulnerabilities for packages: gnupg...

GHSA-M6X2-4HHH-669J vulnerabilities

Vulnerabilities for packages: gnupg...

CVE-2026-24882 vulnerabilities

Vulnerabilities for packages: gnupg...

CVE-2026-57062 vulnerabilities

Vulnerabilities for packages: gnupg...

JLSEC-2026-564 In GnuPG before 2.5.17, a crafted CMS (S/MIME) EnvelopedData message carrying an oversized wrapped...

In GnuPG before 2.5.17, a crafted CMS S/MIME EnvelopedData message carrying an oversized wrapped session key can cause a stack-based buffer overflow in gpg-agent during PKDECRYPT--kem=CMS handling. This can easily be leveraged for denial of service; however, there is also memory corruption that...

Astra Linux – Vulnerability in Ansible

A flaw was discovered in Ansible Engine, in ansible-engine 2.8.x before 2.8.15, and ansible-engine 2.9.x before 2.9.13, when installing packages using the dnf module. GPG signatures are ignored during installation, even when the disablegpgcheck parameter is set to False—which is the default...

SUSE-FU-2026:21232-1 Feature update for libgcrypt, libgpg-error

This update for libgcrypt, libgpg-error fixes the following issues: Update libgcrypt to 1.12.1 jscPED-15059: New and extended interfaces: - Allow access to the FIPS service indicator via the new GCRYCTLFIPSSERVICEINDICATOR control code. - Make SHA-1 non-FIPS internally for the 1.12 API - Add...

Ubuntu 16.04 LTS / 18.04 LTS : Roundcube Webmail vulnerabilities (USN-8132-1)

The remote Ubuntu 16.04 LTS / 18.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-8132-1 advisory. It was discovered that Roundcube Webmail did not properly sanitize certain HTML elements within the e-mail body. An attacker could possibly u...

CLSA-2026-1773411204 Update of alt-php

Move gpg key and repo installation from debian/install to postinst Add support for multiple deb platforms...

Oracle Linux 7 : gnupg2 (ELSA-2026-1677)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-1677 advisory. 2.0.22-5.0.1 - Fix CVE-2025-68973 gpg.fail/memcpy Orabug: 38914175 Tenable has extracted the preceding description block directly from the Oracle Linux security...