SigFlip

これは何ですか？ SigFlip は、オーセンティコード署名付き PE ファイル exe、dll、sys など を、既存のオーセンティコード署名に影響を与えたり壊したりしない方法でパッチ適用するためのツールです。言い換えれば、ファイルの署名、整合性チェック、または PE ファイルの機能を壊すことなく、データ シェルコードなど を埋め込むことで PE ファイルのチェックサムやハッシュを変更できます。 SigInject は、シェルコードを暗号化して PE ファイルの WINCERTIFICATE 証明書テーブルに注入します。暗号化キーは、基本的な BOF/C/C ローダー SigLoade...

malwarescanner

MalwareScanner 해시 비교를 통한 매우 기본적인 악성코드 스캐너 침해 대응 시 이와 같은 도구가 필요할 수 있습니다. 대응 중 새롭거나 의심스러운 파일을 발견했다면, 시스템 내 어디에 이러한 파일이 있는지 확인하고 싶을 것입니다. 따라서 이와 같은 도구가 필요할 수 있습니다. 이는 데모 버전이며 완전하지 않습니다. 코드를 변경하고 수정하여 자신의 것으로 만드세요. 필요한 변경 사항이나 추가 기능이 있으면 알려주세요. 도움이 된다면 "별표★"를 눌러주세요. 그러면 계속해서 개선할 수 있습니다. 특징 해시 기반 파일 검...

about-hmac

HMACについて Flaskを使用したPythonでの基本的なHMAC（ハッシュベースのメッセージ認証コード）の実装例。 HMACとは?! ハッシュベースのメッセージ認証コード（HMAC）は、サーバーとクライアントにそれぞれ、その特定のサーバーとその特定のクライアントのみが知る秘密鍵を提供します。クライアントは、リクエストデータを秘密鍵でハッシュ化し、それをリクエストの一部として送信することで、リクエストごとに一意のHMAC（ハッシュ）を作成します。HMACがメッセージ認証コード（MAC）よりも安全な理由は、鍵とメッセージが別々のステップでハッシュ化されることにあります。 例 1...

CVE-2024-28000

CVE-2024-28000 - LiteSpeed Cache 権限昇格 PoC !WARNING このリポジトリは教育および研究目的のみ を意図しています。 提供された PoC は、あなたが所有するシステム 、またはテストに対する明示的な許可 を得たシステムでのみ使用してください。 このリポジトリ内のいかなる素材への不正アクセス 、悪用、または誤用は違法 です。 著者は、不適切な使用に起因するいかなる損害、誤用、または法的結果についても一切の責任を負いません 。 概要 CVE-2024-28000 は、WordPress 用 LiteSpeed Cache...

Astra Linux – Vulnerability in Linux, Linux 5.10

A issue was discovered in the Linux kernel through version 5.16.11. The mixed IPID assignment method, combined with the hash-based IPID assignment policy, allows an off-path attacker to inject data into a victim’s TCP session or terminate that session...

CVE-2026-18531

IBM Maximo Application Suite 9.2, 9.1, and 9.0 could allow a remote attacker to tamper with session data due to the use of a weak HMAC session signing secret...

CVE-2026-71206

Shiori's CheckToken function internal/domains/auth.go validates only the JWT's HMAC signature and returns the embedded claims.Account object unmodified, never re-fetching the account from the database. No session store or token-revocation mechanism exists in the codebase...

PYSEC-2026-3620 Thumbor has HMAC validation bypass via multiple .replace() calls when removing URL signature

HMAC validation bypass via multiple .replace calls when removing URL signature Summary Thumbor’s HMAC validation can be bypassed due to the use of Python’s .replace when removing the signature from the URL before validation. Since .replace removes all occurrences of the substring, an attacker can...

UBUNTU-CVE-2026-53501

Thumbor is an open-source photo thumbnail service by globo.com. Prior to 7.8.0, Thumbor’s HMAC validation can be bypassed due to the use of Python’s .replace when removing the signature from the URL before validation. Since .replace removes all occurrences of the substring, an attacker can insert...

GHSA-MW3H-QJXJ-6XG9 Thumbor has HMAC validation bypass via multiple .replace() calls when removing URL signature

HMAC validation bypass via multiple .replace calls when removing URL signature Summary Thumbor’s HMAC validation can be bypassed due to the use of Python’s .replace when removing the signature from the URL before validation. Since .replace removes all occurrences of the substring, an attacker can...

Thumbor has HMAC validation bypass via multiple .replace() calls when removing URL signature

HMAC validation bypass via multiple .replace calls when removing URL signature Summary Thumbor’s HMAC validation can be bypassed due to the use of Python’s .replace when removing the signature from the URL before validation. Since .replace removes all occurrences of the substring, an attacker can...

CVE-2026-53501

Thumbor is an open-source photo thumbnail service by globo.com. Prior to 7.8.0, Thumbor’s HMAC validation can be bypassed due to the use of Python’s .replace when removing the signature from the URL before validation. Since .replace removes all occurrences of the substring, an attacker can insert...

EUVD-2026-51608

Thumbor is an open-source photo thumbnail service by globo.com. Prior to 7.8.0, Thumbor’s HMAC validation can be bypassed due to the use of Python’s .replace when removing the signature from the URL before validation. Since .replace removes all occurrences of the substring, an attacker can insert...

PraisonAI: Webhook signature verification skipped (fail-open) when secret unset, allowing forged inbound webhooks (WhatsApp & Linear bots)

The WhatsApp and Linear bot adapters verify the inbound webhook HMAC signature onlywhen a secret is configured. When the secret environment variable is unset — thedefault on a fresh install and common in development — verification is skipped entirelyand the webhook body is parsed and dispatched a...

Plone < 3.1.8 MitM

The version of Plone installed on the remote host is prior to 3.1.8. It is, therefore, affected by a man-in-the-middle vulnerability. Plone uses invariant data a client username and a server secret when calculating an HMAC-SHA1 value for an authentication cookie, which makes it easier for remote...

SUSE CVE-2026-9537

Mojo::JWT versions before 1.02 for Perl verify HMAC signatures with a non-constant-time string comparison. The decode method compares the supplied signature to the recomputed HMAC with Perl's eq operator, which stops at the first differing byte, so the comparison time varies with the number of...

CVE-2026-53591 FreeScout Vulnerable to Unauthenticated Conversation Thread Injection via HMAC Length Bypass in FetchEmails

FreeScout is a free help desk and shared inbox built with PHP's Laravel framework. Prior to version 1.8.223, an unauthenticated attacker can inject messages into any existing support conversation by sending a single email to the helpdesk's public address with a crafted In-Reply-To header. No...

CVE-2026-9537 Mojo::JWT versions before 1.02 for Perl verify HMAC signatures with a non-constant-time string comparison

Mojo::JWT versions before 1.02 for Perl verify HMAC signatures with a non-constant-time string comparison. The decode method compares the supplied signature to the recomputed HMAC with Perl's eq operator, which stops at the first differing byte, so the comparison time varies with the number of...

JLSEC-2026-745 Bleichenbacher padding oracle in PKCS#7 KTRI decryption

Bleichenbacher padding oracle in PKCS7 KTRI decryption. When decrypting PKCS7 EnvelopedData using RSA PKCS1 v1.5 key transport, wolfSSL returned distinguishable error codes depending on whether RSA padding validation failed versus whether the decrypted content was malformed. An attacker able to...

EUVD-2026-44516

ruby-jwt is a Ruby implementation of the RFC 7519 OAuth JSON Web Token standard. Prior to 2.10.3 and 3.2.0, JWT.decodetoken, '', true, algorithm: 'HS256' accepts an attacker-forged token because OpenSSL::HMAC.digest'SHA256', '', payload returns a valid digest under an empty key and no empty-key...