395 matches found
ecdsa-private-key-recovery
ecdsa-key-recovery ECDSA और DSA नॉन्स पुन:उपयोग Nonce Reuse निजी कुंजी पुनर्प्राप्ति हमलों को निष्पादित करें सिग्नेचर कमजोरियों के विश्लेषण के लिए एक क्रिप्टोग्राफिक अनुसंधान उपकरण आइए समान nonce k साझा करने वाले दो सिग्नेचरों के लिए निजी-कुंजी पुनर्प्राप्त करें। ध्यान दें कि समान nonce k चुनने स...
ecdsa-private-key-recovery
ecdsa-key-recovery ECDSA और DSA नॉन्स पुन: उपयोग निजी कुंजी पुनर्प्राप्ति हमलों को निष्पादित करें हस्ताक्षर कमजोरियों के विश्लेषण के लिए एक क्रिप्टोग्राफिक अनुसंधान उपकरण आइए समान nonce k साझा करने वाले दो हस्ताक्षरों के लिए निजी-कुंजी पुनर्प्राप्त करें। ध्यान दें कि समान nonce k चुनने से दोनों...
CVE-2026-11117-WPA2-4-Way-Handshake-Reinstallation-KRACK-Sim-
CVE-2026-11117 – WPA2 4‑Way हैंडशेक पुनर्स्थापना KRACK Sim प्रोग्राम कोड Python kracksim.py - Simulates reinstallation of an already-used PTK import hashlib, os class AccessPoint: def initself: self.anonce = os.urandom32 self.ptk = None def sendmsg3self, snonce: Normally would install PTK, but he...
CVE-2026-11110-AES-GCM-Nonce-Reuse-Leading-to-Key-Recovery
CVE-2026-11110 – إعادة استخدام Nonce في AES-GCM تؤدي إلى استعادة المفتاح الشفرة البرمجية Python aesgcmnoncereusesim.py - Simulated encryption oracle with fixed nonce from Crypto.Cipher import AES import os key = os.urandom16 nonce = b'\x00' 12 ALWAYS SAME NONCE def encryptplaintext: cipher =...
CVE-2026-21009-ECDSA-Nonce-Reuse-in-IoT-Firmware-Signing
CVE-2026-21009 – IoT फ़र्मवेयर हस्ताक्षर में ECDSA नॉन्स पुन: उपयोग प्रोग्राम कोड Python ecdsanoncereusesim.py - Signing firmware with repeated nonce k import ecdsa, hashlib sk = ecdsa.SigningKey.generatecurve=ecdsa.NIST256p vk = sk.getverifyingkey Sign two different firmware images with same non...
CVE-2026-21010-VoIP-SIP-Digest-Authentication-Replay
CVE-2026-21010 – إعادة إرسال مصادقة Digest في SIP/VoIP كود البرنامج محاكي SIP بلغة Python sipserversim.py - SIP server that accepts replayed authenticated requests from flask import Flask, request app = Flaskname Simulated nonce storage: doesn't track used nonces usednonces = set @app.route'/call...
CVE-2026-22001-SPHINCS-WOTS-Weak-Randomness-Forgeable-Signature
CVE-2026-22001 – SPHINCS+ WOTS+ Falsification de signature par aléa faible Aperçu Une implémentation du schéma de signature post‑quantique SPHINCS+ utilise un générateur de nombres aléatoires défectueux lors de la génération de signatures WOTS+. Le même nonce k est réutilisé pour plusieurs...
CVE
CVE Relatórios para CVE-2025-67586, CVE-2025-67985, CVE-2025-67986 -------------- CVE-2025-67586 Exploit PoC -------------- Título do Exploit: WordPress Plugin 5.2.0 - Controle de Acesso Quebrado Link do Software: https://wordpress.org/plugins/highlight-and-share/ Versão: Descrição Uma...
ImageMagick < 6.9.13-47 / 7.x < 7.1.2-22 Information Disclosure
The remote host has a version of ImageMagick installed that is prior to 6.9.13-47, or 7.x prior to 7.1.2-22. It is, therefore, affected by a vulnerability. - ImageMagick before 7.1.2-22 and before 6.9.13-47 contains an information disclosure vulnerability in the PasskeyEncipherImage method due to...
CVE-2026-15890
The default AEAD nonce provider for the PSA Internal Trusted Storage transform module, securestorageitstransformaeadgetnonce in subsys/securestorage/src/its/transform/aeadget.c, stores its nonce counter in unsynchronized function-local static variables snonce and snonceinitialized. Every ITS writ...
CVE-2026-15890 AEAD nonce reuse in Zephyr secure_storage ITS default nonce provider due to missing thread synchronization
The default AEAD nonce provider for the PSA Internal Trusted Storage transform module, securestorageitstransformaeadgetnonce in subsys/securestorage/src/its/transform/aeadget.c, stores its nonce counter in unsynchronized function-local static variables snonce and snonceinitialized. Every ITS writ...
CVE-2026-15890 AEAD nonce reuse in Zephyr secure_storage ITS default nonce provider due to missing thread synchronization
The default AEAD nonce provider for the PSA Internal Trusted Storage transform module, securestorageitstransformaeadgetnonce in subsys/securestorage/src/its/transform/aeadget.c, stores its nonce counter in unsynchronized function-local static variables snonce and snonceinitialized. Every ITS writ...
EUVD-2026-84178
The default AEAD nonce provider for the PSA Internal Trusted Storage transform module, securestorageitstransformaeadgetnonce in subsys/securestorage/src/its/transform/aeadget.c, stores its nonce counter in unsynchronized function-local static variables snonce and snonceinitialized. Every ITS writ...
CVE-2026-15890 AEAD nonce reuse in Zephyr secure_storage ITS default nonce provider due to missing thread synchronization
The default AEAD nonce provider for the PSA Internal Trusted Storage transform module, securestorageitstransformaeadgetnonce in subsys/securestorage/src/its/transform/aeadget.c, stores its nonce counter in unsynchronized function-local static variables snonce and snonceinitialized. Every ITS writ...
CVE-2026-15890
CVE-2026-15890 affects the Zephyr RTOS PSA Internal Trusted Storage (ITS) transform module. The default AEAD nonce provider (secure_storage_its_transform_aead_get_nonce) stores its nonce counter in unsynchronized function-local static variables. Two concurrent threads writing the same entry UID c...
CVE-2026-15890: Reusing a Nonce, Key Pair in Encryption
The default AEAD nonce provider for the PSA Internal Trusted Storage transform module, securestorageitstransformaeadgetnonce in subsys/securestorage/src/its/transform/aeadget.c, stores its nonce counter in unsynchronized function-local static variables snonce and snonceinitialized. Every ITS writ...
PT-2026-96272
Name of the Vulnerable Software and Affected Versions Zephyr affected versions not specified Description An issue exists in the PSA Internal Trusted Storage ITS transform module where the function secure storage its transform aead get nonce uses unsynchronized function-local static variables s...
CVE-2026-88255: Improper Validation of Unsafe Equivalence in Input
Improper Validation of Unsafe Equivalence in Input in ZenHive mpp allows an unauthenticated remote client to pass the Tempo duplicate-submission gate twice with one signed transaction. MPP.Methods.Tempo reserves the pre-broadcast dedup slot on the caller-supplied hex in reservehashatomic/2, keyed...
PT-2026-93378
Name of the Vulnerable Software and Affected Versions ZenHive mpp versions 0.2.0 through 0.16.1 Description Improper validation of unsafe equivalence in input allows an unauthenticated remote client to bypass the Tempo duplicate-submission gate twice using a single signed transaction. In...