357 matches found
lehack-2026-challenge
LeHack 2026 Challenge A 3-tier challenge demonstrating impact of direct disk mounting. Challenge Overview Level| Goal| Technique ---|---|--- 1| Access the unencrypted disk| Set boot cmdline to init=/bin/bash in grub 2| Crack vault1 LUKS| Extract header β hashcat β unlock & mount vault 3| Crack...
CVE-2025-65320
CVE-2025-65320 Title Cleartext Storage of Sensitive Licensing Material in Process Memory in Abacre Restaurant Point of Sale POS Overview A vulnerability exists in Abacre Restaurant Point of Sale POS versions = 15.0.0.1656 where sensitive licensing data is stored in cleartext in process memory...
Grafxploit
Automated Exploit Tool for Grafana CVE-2021-43798 Overview This project is an automated exploit tool designed to scan for and extract sensitive information from compromised Grafana instances vulnerable to CVE-2021-43798. The tool identifies vulnerable plugins and extracts SSH keys from compromise...
aes-finder
AES Finder Utilidad para encontrar claves AES en la memoria de procesos en ejecuciΓ³n. Funciona para claves de 128, 192 y 256 bits. Uso Abra la soluciΓ³n aes-finder.sln en Visual Studio 2013 para compilar el cΓ³digo fuente. Alternativamente, use gcc/clang: g++ -O3 -march=native -fomit-frame-pointer...
peetch
peetch peetch es un conjunto de herramientas destinadas a experimentar con diferentes aspectos de eBPF para eludir las protecciones del protocolo TLS. Actualmente, peetch incluye tres subcomandos. El primero llamado dump tiene como objetivo esnifar trΓ‘fico de red asociando informaciΓ³n del proceso...
hi_my_name_is_keyboard
Ciao, mi chiamo Keyboard Questo repository contiene script proof-of-concept per CVE-2023-45866, CVE-2024-21306 e CVE-2024-0230. Ulteriori dettagli sono disponibili nel post del blog. Proof of Concept| Descrizione ---|--- Iniezione di tasti su Android| Associa forzatamente una tastiera Bluetooth...
Astra Linux β Vulnerability in mbedtls
Mbed TLS before version 3.6.4 has a race condition in AESNI detection when certain compiler optimizations are applied. An attacker may be able to extract an AES key from a multithreaded program, or perform a GCM forgery...
CentOS Linux 7 [TuxCare] Security Update: libgcrypt / libgcrypt-devel Multiple Vulnerabilities (CENTOS7:CLSA-2023:1698945053)
The CentOS Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS7:CLSA-2023:1698945053 advisory. - GnuPG 1.x before 1.4.16 generates RSA keys using sequences of introductions with certain patterns that introduce a side channel, which...
OT-PCA: New Key-Recovery Plaintext-Checking Oracle Based Side-Channel Attacks on HQC with Offline Templates
In this paper, we introduce OT-PCA, a novel approach for conducting Plaintext-Checking PC oracle based side-channel attacks, specifically designed for Hamming Quasi-Cyclic HQC. By calling the publicly accessible HQC decoder, we build offline templates that enable efficient extraction of soft...
YellowKey-Bitlocker-CVE-2026-45585 β Updated!
π‘οΈ YellowKey-Bitlocker-CVE-2026-45585 - Recover Your BitLocker Keys Safely π What This Software Does YellowKey is a free open-source utility for Windows 10 and Windows 11. It helps you extract, backup, and view your BitLocker recovery keys. This is useful if you lost access to your encrypted drive...
YellowKey-Bitlocker-CVE-2026-45585
π‘οΈ YellowKey-Bitlocker-CVE-2026-45585 - Recover Your BitLocker Keys Safely π What This Software Does YellowKey is a free open-source utility for Windows 10 and Windows 11. It helps you extract, backup, and view your BitLocker recovery keys. This is useful if you lost access to your encrypted drive...
YellowKey-Bitlocker-CVE-2026-45585
π YellowKey-Bitlocker-CVE-2026-45585 - Gestisci facilmente le tue chiavi di ripristino BitLocker YellowKey BitLocker CVE-2026-45585 fornisce un modo per estrarre, eseguire il backup e organizzare le chiavi di ripristino per i tuoi drive crittografati. Questo strumento funziona su sistemi Windows...
SUSE CVE-2026-23937
The Zabbix API host.get action can be exploited by authenticated users to extract a host's PSK key leading to potential loss of data integrity...
Linux Distros Unpatched Vulnerability : CVE-2026-23937
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The Zabbix API host.get action can be exploited by authenticated users to extract a host's PSK key leading to potential loss of data integrity. CVE-2026-23937...
CVE-2026-23937
The Zabbix API host.get action can be exploited by authenticated users to extract a host's PSK key leading to potential loss of data integrity...
CVE-2026-23937
The Zabbix API host.get action can be exploited by authenticated users to extract a host's PSK key leading to potential loss of data integrity...
CVE-2026-23937: Observable Discrepancy
The Zabbix API host.get action can be exploited by authenticated users to extract a host's PSK key leading to potential loss of data integrity...
CVE-2026-50601 Planet9 Hardcoded Credentials Vulnerability Information
A security vulnerability has been identified in the Planet9 desktop application where a hardcoded read-only API key permitted unauthorized access to internal repositories. An attacker could exploit this access to extract embedded administrative keys and secrets, potentially allowing them to gain...
PT-2026-73192
A security vulnerability has been identified in the Planet9 desktop application where a hardcoded read-only API key permitted unauthorized access to internal repositories. An attacker could exploit this access to extract embedded administrative keys and secrets, potentially allowing them to gain...
Siemens LOGO! Soft Comfort
SUMMARY Siemens LOGO! Soft Comfort contains multiple vulnerabilities in its project-file encryption and password handling mechanisms. A local attacker could exploit these vulnerabilities to extract the master key, allowing them to decrypt project data or remove project passwords. The lack of...