EulerOS 2.0 SP11 : openssl (EulerOS-SA-2026-4264)

According to the versions of the openssl packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Issue summary: When CMS password-based decryption RFC 3211 / PWRI key unwrap processes attacker-supplied CMS data, an attacker-chosen stream-mode...

EulerOS 2.0 SP13 : openssl (EulerOS-SA-2026-4169)

According to the versions of the openssl packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Issue summary: A signed integer overflow when sizing the destination buffer for Unicode output in ASN1mbstringncopy can lead to a heap buffer...

EulerOS 2.0 SP13 : shim (EulerOS-SA-2026-4198)

According to the versions of the shim packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Issue summary: A signed integer overflow when sizing the destination buffer for Unicode output in ASN1mbstringncopy can lead to a heap buffer...

EulerOS 2.0 SP13 : shim (EulerOS-SA-2026-4107)

According to the versions of the shim package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Issue summary: A signed integer overflow when sizing the destination buffer for Unicode output in ASN1mbstringncopy can lead to a heap buffer overflo...

Rocky Linux 9.2 [CIQ] Security Update: openssl / openssl-devel / openssl-libs / openssl-perl (ciqsa-2026_1617)

The Rocky Linux 9.2 host has packages installed that are affected by a vulnerability as referenced in the CIQ ciqsa-20261617 advisory. This advisory aggregates security fixes for the openssl SRPM in CIQ LTS 9.2. It addresses 1 CVE: CVE-2025-15467. Tenable has extracted the preceding description...

Rocky Linux 9.6 [CIQ] Security Update: openssl / openssl-devel / openssl-libs / openssl-perl Multiple Vulnerabilities (ciqsa-2026_1634)

The Rocky Linux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20261634 advisory. This advisory aggregates security fixes for the openssl SRPM in CIQ LTS 9.6. It addresses 31 CVEs: CVE-2023-0217, CVE-2022-3786, CVE-2024-4741,...

cryptr

cryptr Una sencilla utilidad de shell para cifrar y descifrar archivos usando OpenSSL. Instalación git clone https://github.com/nodesocket/cryptr.git ln -s "$PWD"/cryptr/cryptr.bash /usr/local/bin/cryptr Requisitos shred si se desea eliminar opcionalmente el archivo original. Finalización de...

CVE-2002-0082

Fix : https://www.exploit-db.com/exploits/764 : Apache modssl 2.8.7 OpenSSL - 'OpenFuckV2.c' Remote Buffer Overflow 1 Credit : https://blog.hypn.za.net/2017/08/27/compiling-exploit-764-c-in-2017/ Dont forget to: apt-get install libssl-dev Compile: gcc -o 764 764.c -lcrypto...

CVE-2014-0160_Heartbleed

Heartbleed - CVE-2014-0160...

Openssl_1_1_0_CVE-2021-23841

OpenSSL 1.1.0g 2 Nov 2017 Copyright c 1998-2016 The OpenSSL Project Copyright c 1995-1998 Eric A. Young, Tim J. Hudson All rights reserved. DESCRIPTION The OpenSSL Project is a collaborative effort to develop a robust, commercial-grade, fully featured, and Open Source toolkit implementing the...

debian-ssh

PRNG predecible de OpenSSL de Debian Enlaces URL original: http://metasploit.com/users/hdm/tools/debian-openssl/1 Espejo2 Exploit: https://www.exploit-db.com/exploits/5622/ Perl3 https://www.exploit-db.com/exploits/5720/ Python4 https://www.exploit-db.com/exploits/5632/ Ruby12 Herramienta...

CVE-2025-11187

CVE-2025-11187 Stack buffer overflow in PKCS12 PBMAC1 PBKDF2 keylength OpenSSL 3.X Found this stack buffer overflow like a year ago, turned out to be a duplicate CVE-2025-11187 issue occurs in libcrypto's PKCS PBMAC1 handling when PBKDF2's keylength is attacker-controlled, It causes a write past ...

CVE-2014-0160

💔 CVE-2014-0160 — "Heartbleed" 📖 Table of Contents Overview Technical Background Root Cause Impact Affected Versions Exploitation Overview Mitigation & Patch Timeline Lessons Learned Summary 🔎 Overview Heartbleed is the nickname for CVE-2014-0160 , a severe vulnerability in OpenSSL’s TLS heartbea...

scallion

Actualización del proyecto 2020 Scallion fue un proyecto hobby para aprender OpenCL y RSA. Actualmente no mantenemos scallion. Se ha deteriorado de dos maneras importantes: 1. Tor ha migrado a direcciones Onion v3, las cuales scallion no soporta. Las direcciones v2 antiguas dejarán de funcionar e...

CVE-2023-20052

CVE-2023-20052 Exploit - Fixed Build Fixed Docker build for CVE-2023-20052 ClamAV XXE vulnerability that actually compiles. What Was Broken The original exploit fails to build on modern systems: ❌ OpenSSL 3.0 compatibility errors ❌ HMACCTX struct incomplete type errors ❌ Implicit function...

testssl.sh

Introducción testssl.sh es una herramienta gratuita de línea de comandos que verifica el servicio de un servidor en cualquier puerto para determinar el soporte de cifrados TLS/SSL, protocolos, así como algunas v...

openssl-heartbleed-fix

openssl-heartbleed-fix OpenSSL Heartbleed CVE-2014-0160 Fix script Sammy Fung [email protected] OpenSSL Heartbleed CVE-2014-0160 http://www.us-cert.gov/ncas/alerts/TA14-098A bug is now discovered by network security professionals, which many systems using some OpenSSL versions are affected. ...

external_boringssl_openssl_1.1.0g_CVE-2021-23841

OpenSSL 1.1.0g 2 Nov 2017 Copyright c 1998-2016 The OpenSSL Project Copyright c 1995-1998 Eric A. Young, Tim J. Hudson All rights reserved. DESCRIPTION The OpenSSL Project is a collaborative effort to develop a robust, commercial-grade, fully featured, and Open Source toolkit implementing the...

CVE-2022-2274

OpenSSL-src Heap Memory Corruption with RSA Private Key Operation : CVE-2022-2274 Summary OpenSSL-src-rust is a source code and logic to build OpenSSL from source written in rust and packaged as a crate. There are currently two maintained branches, matching the two maintained OpenSSL versions whi...

openssl

Bienvenido al Proyecto OpenSSL !openssl logowww.openssl.org !github actions ci badgegithub actions ci OpenSSL es un conjunto de herramientas de código abierto robusto, de grado comercial y con todas las funciones para los protocolos Transport Layer Security TLS, anteriormente SSL, Datagram TLS DT...