CVE

CVE CVE-2025-67586, CVE-2025-67985, CVE-2025-67986 的漏洞分析 root@kitploit: -------------- CVE-2025-67586 漏洞利用 PoC -------------- 漏洞标题：WordPress 插件 5.2.0 - 失效的访问控制 软件链接：https://wordpress.org/plugins/highlight-and-share/ 版本： 描述 DLX Plugins 开发的 WordPress 插件中存在一个失效的访问控制漏洞。 该插件暴露了一个无需认证的 AJAX...

ecdsa-private-key-recovery

ecdsa-key-recovery 执行ECDSA和DSA nonce重用私钥恢复攻击 一个用于分析签名漏洞的密码学研究工具 让我们恢复两个共享相同 nonce k 的签名所对应的私钥。请注意，选择相同的 nonce k 会导致两个签名具有相同的签名值 r。要找到ECDSA nonce重用的良好候选者，请检查在不同消息（或哈希）上共享相同 r、pubkey 和 curve 的签名。例如，基于 bitcoind 的区块链项目通常是ECDSA签名材料的良好来源。 sampleA r , sA, hashA , pubkey, curve sampleB r , sB, hashB ,...

ecdsa-private-key-recovery

ecdsa-key-recovery 执行ECDSA和DSA随机数重用私钥恢复攻击 一个用于分析签名漏洞的密码学研究工具 让我们恢复两个共享相同 nonce k 的签名所对应的私钥。请注意，选择相同的 nonce k 会导致两个签名具有相同的签名值 r。要找到ECDSA随机数重用的良好候选者，请检查在 curve 上具有相同 r、pubkey 但针对不同消息（或哈希）的签名。例如，基于 bitcoind 的区块链项目通常是ECDSA签名材料的良好来源。 sampleA r , sA, hashA , pubkey, curve sampleB r , sB, hashB , pubkey...

CVE-2026-11117-WPA2-4-Way-Handshake-Reinstallation-KRACK-Sim-

CVE-2026-11117 – WPA2 四次握手密钥重装（KRACK 模拟） 程序代码（Python） root@kitploit: kracksim.py - Simulates reinstallation of an already-used PTK import hashlib, os class AccessPoint: def initself: self.anonce = os.urandom32 self.ptk = None def sendmsg3self, snonce: Normally would install PTK, but here we resen...

CVE-2026-11110-AES-GCM-Nonce-Reuse-Leading-to-Key-Recovery

CVE-2026-11110 – AES-GCM nonce 重用导致密钥恢复 程序代码 Python root@kitploit: aesgcmnoncereusesim.py - Simulated encryption oracle with fixed nonce from Crypto.Cipher import AES import os key = os.urandom16 nonce = b'\x00' 12 ALWAYS SAME NONCE def encryptplaintext: cipher = AES.newkey, AES.MODEGCM,...

CVE-2026-21009-ECDSA-Nonce-Reuse-in-IoT-Firmware-Signing

CVE-2026-21009 – IoT 固件签名中的 ECDSA Nonce 重用 程序代码（Python） root@kitploit: ecdsanoncereusesim.py - Signing firmware with repeated nonce k import ecdsa, hashlib sk = ecdsa.SigningKey.generatecurve=ecdsa.NIST256p vk = sk.getverifyingkey Sign two different firmware images with same nonce due to bad RNG ...

CVE-2026-21010-VoIP-SIP-Digest-Authentication-Replay

CVE-2026-21010 – VoIP SIP 摘要认证重放 程序代码（Python SIP 模拟器） root@kitploit: sipserversim.py - SIP server that accepts replayed authenticated requests from flask import Flask, request app = Flaskname Simulated nonce storage: doesn't track used nonces usednonces = set @app.route'/call', methods='POST' def...

CVE-2026-88278

GeoVision GV-LPC2211 V1.13 fails to enforce WS-Security UsernameToken freshness or nonce reuse protection, allowing a captured PasswordDigest token to be replayed for subsequent ONVIF operations...

EUVD-2026-75312

GeoVision GV-LPC2211 V1.13 fails to enforce WS-Security UsernameToken freshness or nonce reuse protection, allowing a captured PasswordDigest token to be replayed for subsequent ONVIF operations...

CVE-2026-22001-SPHINCS-WOTS-Weak-Randomness-Forgeable-Signature

CVE-2026-22001 – SPHINCS+ WOTS+ 弱随机性签名伪造 概述 SPHINCS+ 后量子签名方案的一种实现，在生成 WOTS+ 签名时使用了有缺陷的随机数生成器。同一 nonce k 在多个签名中被重复使用，使攻击者能够恢复私钥并伪造任意消息。 漏洞详情 类型： 加密随机性失败 影响： 完全密钥泄露、签名伪造。 根本原因： WOTS+ 签名算法依赖于每次签名使用唯一的随机值 k。k 的重复使用会泄露可揭示种子的代数关系。 漏洞利用演示 运行模拟： root@kitploit: python sphincsforge.py python...

CVE-2026-81341

wolfEngine before 1.4.1 sources the explicit AES-CCM nonce for TLS 1.2 and DTLS 1.2 records from the record input buffer instead of the TLS sequence number carried in the additional authenticated data. Because the record layer leaves the explicit-nonce field for the cipher to populate, the value...

CVE-2026-81020

wolfEngine before 1.4.1 generates the 8-byte explicit AES-GCM nonce once when the TLS write key is set and never increments it per record. As a result every TLS 1.2 and DTLS 1.2 AES-GCM record within a connection is encrypted under an identical key and nonce pair. Reusing a GCM key and nonce...

CVE-2026-81019

wolfProvider before 1.2.2 generates the 8-byte explicit AES-GCM nonce once when the TLS write key is set and never increments it per record. As a result every TLS 1.2 and DTLS 1.2 AES-GCM record within a connection is encrypted under an identical key and nonce pair. Reusing a GCM key and nonce...

CVE-2026-81341 wolfEngine reuses the AES-CCM nonce on TLS 1.2 / DTLS 1.2 records

wolfEngine before 1.4.1 sources the explicit AES-CCM nonce for TLS 1.2 and DTLS 1.2 records from the record input buffer instead of the TLS sequence number carried in the additional authenticated data. Because the record layer leaves the explicit-nonce field for the cipher to populate, the value...

CVE-2026-81341

wolfEngine (before 1.4.1 ) reuses the AES-CCM nonce on TLS 1.2 and DTLS 1.2 records because it sources the explicit nonce from the record input buffer rather than the TLS sequence number. Since the record layer leaves that field for the cipher to populate, the value is constant, meaning every AES...

CVE-2026-81341 wolfEngine reuses the AES-CCM nonce on TLS 1.2 / DTLS 1.2 records

wolfEngine before 1.4.1 sources the explicit AES-CCM nonce for TLS 1.2 and DTLS 1.2 records from the record input buffer instead of the TLS sequence number carried in the additional authenticated data. Because the record layer leaves the explicit-nonce field for the cipher to populate, the value...

EUVD-2026-67738

wolfEngine before 1.4.1 sources the explicit AES-CCM nonce for TLS 1.2 and DTLS 1.2 records from the record input buffer instead of the TLS sequence number carried in the additional authenticated data. Because the record layer leaves the explicit-nonce field for the cipher to populate, the value...

CVE-2026-81020 wolfEngine reuses the AES-GCM nonce on every TLS 1.2 / DTLS 1.2 record

wolfEngine before 1.4.1 generates the 8-byte explicit AES-GCM nonce once when the TLS write key is set and never increments it per record. As a result every TLS 1.2 and DTLS 1.2 AES-GCM record within a connection is encrypted under an identical key and nonce pair. Reusing a GCM key and nonce...

EUVD-2026-67737

wolfEngine before 1.4.1 generates the 8-byte explicit AES-GCM nonce once when the TLS write key is set and never increments it per record. As a result every TLS 1.2 and DTLS 1.2 AES-GCM record within a connection is encrypted under an identical key and nonce pair. Reusing a GCM key and nonce...

CVE-2026-81020

wolfEngine before 1.4.1 generates the 8-byte explicit AES-GCM nonce only once when the TLS write key is set and never increments it per record. Consequently, every TLS 1.2 and DTLS 1.2 AES-GCM record within a connection is encrypted under an identical key and nonce pair. GCM nonce reuse discloses...