ml-kem-key-recovery

Full key recovery from a partial Fujisaki-Okamoto comparison in wolfSSL ML-KEM CVE-2026-6330 NEON and CVE-2026-10097 AVX2. Fixed in wolfSSL 5.9.2. The full technical write-up is published as Cryptology ePrint Archive, Paper 2026/1682 local copy in paper/. See Citation below. Introduction ML-KEM...

CVE-2025-10951

CVE-2025-10951 - checkmlloggertraversal.py Инструмент проверки наличия уязвимости для CVE-2025-10951 / GHSA-8x9j-2p8r-7xc6 — неаутентифицированного обхода пути в geyang/ml-logger ≤ 0.10.36, затрагивающего функции loghandler / streamhandler в mllogger/server.py. Используйте только против систем,...

CVE-2025-10952-ml-logger-AFR

CVE-2025-10952 — произвольное чтение файлов через streamhandler в ml-logger Этот репозиторий предоставляет автономный Python-скрипт — CVE-2025-10952.py — который эксплуатирует неаутентифицированную уязвимость произвольного чтения файлов в streamhandler библиотеки ml-logger, в связке с конечной...

AgrusScanner

Agrus Scanner Network reconnaissance tool with deep AI/ML service detection. Scans your network to discover hosts, open ports, and identifies AI services running across your infrastructure. Built for security teams, IT admins, and researchers who need visibility into shadow AI, rogue LLM...

ML-for-RNGs

ML-for-RNGs Использование машинного обучения для предсказания последовательностей генераторов случайных чисел...

GuardModel

GuardModel Bloquez les modèles d'IA malveillants dans votre pipeline avec une seule ligne de YAML. GuardModel est une GitHub Action qui scanne automatiquement les fichiers de modèles ML pour détecter les codes malveillants, les vulnérabilités et les risques de sécurité dans les pipelines CI/CD. I...

gha-lab-40e23db109

자동화된 연구 산출물 — 상위 프로젝트가 아님. 이 저장소는 Université Laval의 석사 논문에서 게시된 GitHub Actions 워크플로우 취약점 재현을 위해 자동화된 하네스가 구축한 일회용 실험실입니다. 이는 커밋 d4c503a471cfd202c56fbddd99d5da431a4b7478 2024-08-02 시점의 gradio-app/gradio의 축어적 스냅샷이며, 해당 프로젝트의 자체 라이선스에 따라 재배포되며, 그 라이선스 파일은 이 스냅샷에 변경 없이 포함되어 있습니다. 상위 프로젝트는 관여하지 않으며 , ...

Damn-Vulnerable-ML-Model

В этом репозитории нет README...

discuz-ml-rce

discuz-ml-rce Затронутые системы и версии: Discuz!ML V3.2-3.4 Discuz!x V3.2-3.4 Причина уязвимости: в Discuz!ML система не фильтрует содержимое параметра language, принимаемого из cookie, что приводит к конкатенации строк и выполнению PHP-кода. В поле cookie появляется поле xxxxxxxxlanguage;...

camel-pqc-tls

Постквантовый TLS с Apache Camel Этот репозиторий содержит три примера, демонстрирующих постквантовые PQC рукопожатия TLS 1.3 с Apache Camel, использующие гибридный обмен ключами X25519MLKEM768. X25519MLKEM768 сочетает классический X25519 эллиптическая кривая Диффи-Хеллмана с ML-KEM-768 —...

ejbca-pqc-lab

Laboratoire EJBCA Pure PQC — Hiérarchie PKI à deux niveaux ML-DSA-65 Une implémentation pratique de NIST FIPS 204 ML-DSA dans une hiérarchie PKI à deux niveaux utilisant EJBCA Community Edition. 📖 Procédure complète : Construire une PKI post-quantique : comment j'ai signé une AC racine et une AC...

thunderbird security update

140.16.0-1 - Add Oracle prefs file 140.16.0-1 - Update to 140.16.0 ESR 140.15.0-1 - Update to 140.15.0 ESR - Fix ML-DSA certificate validation Resolves: RHEL-252227...

System-Level Optimization beyond Cryptographic Kernels: An ML-KEM Case Study on Arm Cortex-M7

Recent work on embedded post-quantum cryptography has focused primarily on instruction-level optimization, including arithmetic-kernel improvements, assembly tuning, register allocation, and instruction scheduling. Using the Module-Lattice-Based Key-Encapsulation Mechanism ML-KEM on an Arm...

GHSA-W3JG-PJXF-73P4 Russh: Missing X25519 zero-point validation in hybrid ML-KEM key exchange

Vulnerability The hybrid ML-KEM 768 + X25519 key exchange implementation in russh/src/kex/hybridmlkem.rs does not validate that the remote peer's X25519 public key is not the zero point all-zero 32-byte value. This allows a remote peer to force the X25519 contribution to the combined shared secre...

EUVD-2026-89207

Russh: Missing X25519 zero-point validation in hybrid ML-KEM key exchange...

Russh: Missing X25519 zero-point validation in hybrid ML-KEM key exchange

Vulnerability The hybrid ML-KEM 768 + X25519 key exchange implementation in russh/src/kex/hybridmlkem.rs does not validate that the remote peer's X25519 public key is not the zero point all-zero 32-byte value. This allows a remote peer to force the X25519 contribution to the combined shared secre...

CVE-2026-102272 vulnerabilities

Vulnerabilities for packages: openstack-manila-2025.2, datahub-ingestion, openstack-glance-2025.1, openstack-horizon-2026.1-fips, openstack-horizon-2026.1, kserve, datahub-ingestion-fips, openstack-octavia-2026.1, metaflow-service-fips, openstack-horizon-2025.2, openstack-horizon-2025.1-fips,...

CVE-2026-102824

Russh is a Rust SSH client and server library. Prior to 0.63.0, the hybrid ML-KEM 768 and X25519 implementation in russh/src/kex/hybridmlkem.rs accepts an all-zero 32-byte peer X25519 public key in both serverdh and computesharedsecret, forcing the X25519 contribution to the combined shared secre...

CVE-2026-102824

Russh is a Rust SSH client and server library. Prior to 0.63.0, the hybrid ML-KEM 768 and X25519 implementation in russh/src/kex/hybridmlkem.rs accepts an all-zero 32-byte peer X25519 public key in both serverdh and computesharedsecret, forcing the X25519 contribution to the combined shared secre...

CVE-2026-102824 Russh: Missing X25519 zero-point validation in hybrid ML-KEM key exchange

Russh is a Rust SSH client and server library. Prior to 0.63.0, the hybrid ML-KEM 768 and X25519 implementation in russh/src/kex/hybridmlkem.rs accepts an all-zero 32-byte peer X25519 public key in both serverdh and computesharedsecret, forcing the X25519 contribution to the combined shared secre...