245 matches found
Xerxes
Xerxes Dos tool with multiple vectors available for stress testing internet services. Usage $ ./Xerxes -H --== Xerxes enhanced by Sepehrdad Sh ==-- bin/Xerxes OPTIONS Xerxes dos tool enhanced OPTIONS: -H, --help display this help menu -V, --version display version --vecs display available vectors...
Armor
Armor Armor is a simple Bash script designed to create encrypted macOS payloads capable of evading antivirus scanners. Below is an example gif of Armor being used with a simple Netcat payload. A Netcat listener is started on port 4444. The "payload.txt" file is read and shown to contain a simple...
Multiple TLS Libraries can Bypass Delegation Enforcement
Overview This note covers thirteen library-specific records VU948176.6, .8–.19 of how widely used TLS libraries apply X.509 Name Constraints. The records describe cases where a constrained name may be accepted by one library and rejected by another. Some are fixed, some remain under review, and...
Go, OpenSSL, Apple, LibreSSL, pyca, wolfSSL Name-Constraint Inconsistency in RFC 5280 Implementation
Overview This note covers differences in how TLS libraries interpret X.509 Name Constraints. A certificate that one library accepts may be rejected by another. Some of those differences are defects; others follow from behavior that RFC 5280 does not fully specify. Description The observed...
FreeBSD : LibreSSL -- Multiple vulnerabilities (85bcb950-c0b4-11f1-a6ea-8447094a420f)
The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 85bcb950-c0b4-11f1-a6ea-8447094a420f advisory. The LibreSSL project reports: Tenable has extracted the preceding description block directly from the...
LibreSSL -- Multiple vulnerabilities
The LibreSSL project reports: Ensure verify callbacks always returning 1 can see a hostname mismatch Correct botched size check in dtls1preprocessfragment Limit size of buffered DTLS handshake messages Avoid potential overread on interrupted retransmission in DTLS Fix OCSP responder authorization...
UBUNTU-CVE-2026-69247
cryptography is a package designed to expose cryptographic primitives and recipes to Python developers. From 44.0.0 until 50.0.0, pkcs7decryptder, pkcs7decryptpem, and pkcs7decryptsmime reported the outcome of decrypting a RecipientInfo's encryptedKey in several distinguishable ways, one of which...
Fedora 42 : composer (2026-13b4dbe546)
The remote Fedora 42 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-13b4dbe546 advisory. Version 2.9.3 - 2025-12-30 Security: Fixed ANSI sequence injection GHSA-59pp-r3rg-353g / CVE-2025-67746 Fixed COMPOSERNOSECURITYBLOCKING env var not being...
CVE-2018-12434
LibreSSL before 2.6.5 and 2.7.x before 2.7.4 allows a memory-cache side-channel attack on DSA and ECDSA signatures, aka the Return Of the Hidden Number Problem or ROHNP. To discover a key, the attacker needs access to either the local machine or a different virtual machine on the same physical ho...
EUVD-2014-9245
Malware in sbrugna...
EUVD-2015-5303
Malware in sbrugna...
EUVD-2015-5304
Malware in sbrugna...
EUVD-2017-17262
Malware in sbrugna...
EUVD-2018-20577
Malware in sbrugna...
EUVD-2019-11499
Malware in sbrugna...
EUVD-2019-11498
Malware in sbrugna...
EUVD-2018-4405
Malware in sbrugna...
EUVD-2022-51133
Malicious code in bioql PyPI...