Meterpreter_Paranoid_Mode-SSL

MeterpreterParanoidMode v1.4 - SSL/TLS connections Version release: v1.4 Stable Author: pedro ubuntu r00t-3xp10it Distros Supported : Linux Kali, Mint, Ubuntu Suspicious-Shell-Activity SSA RedTeam develop @2017 Description: MeterpreterParanoidMode.sh allows users to secure your staged/stageless...

CVE-2022-0778

CVE-2022-0778 Description We refer to the concept of drago-96 and then rewrite a PoC based on the P12 and PEM format. You can use it to verify the CVE-2022-0778 vulns, i.e., a dangerous SSL certificate without any private password, leave it empty. If the device is affected, it may cause the CPU o...

keypair

keypair Generate a RSA PEM key pair from pure JS Usage var keypair = require'keypair'; var pair = keypair; console.logpair; outputs $ node example.js public: '-----BEGIN RSA PUBLIC...

roca

ROCA detection tool This tool is related to ACM CCS 2017 conference paper 124 Return of the Coppersmith’s Attack: Practical Factorization of Widely Used RSA Moduli. It enables you to test public RSA keys for a presence of the described vulnerability. Update 4.11.2017 : Python 2.7, 3.4+ supported...

badkeys

badkeys Tool and library to check cryptographic public keys for known vulnerabilities what? badkeys checks public keys in various formats for known vulnerabilities. A web version can be found at badkeys.info. install badkeys can be installed via pip: pip3 install badkeys You may want to use a...

CVE-2026-111044

Sunshine , a self-hosted game stream host for Moonlight, is vulnerable to an incorrect authorization issue in versions 2026.329.165800 through 2026.906.222525 . The software accepts any client certificate chained to a stored paired-client certificate without verifying that the presented certifica...

CVE-2026-111044 Disabled Sunshine clients can bypass revocation with a derived client certificate

Sunshine is a self-hosted game stream host for Moonlight. From 2026.329.165800 until 2026.906.222525, Sunshine accepted any client certificate that chained to a stored paired-client certificate, but it did not require the presented certificate to be the exact enabled paired identity. Certificate...

Astra Linux – Vulnerability in Bouncycastle

Bouncy Castle for Java before version 1.73 contains a potential Denial of Service DoS issue within the Bouncy Castle org.bouncycastle.openssl.PEMParser class. This class parses OpenSSL PEM-encoded streams containing X.509 certificates, PKCS8-encoded keys, and PKCS7 objects. Parsing a file that...

USN-8916-2: PyJWT vulnerabilities

USN-8916-1 fixed vulnerabilities in PyJWT. This update provides the corresponding fix for PyJWT on Ubuntu 26.10. Original advisory details: YuSung Han discovered that PyJWT did not properly validate certain JWK keys when performing HMAC verification. An attacker could possibly use this issue to...

Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 26.04 LTS : PyJWT vulnerabilities (USN-8916-1)

The remote Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 26.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-8916-1 advisory. YuSung Han discovered that PyJWT did not properly validate certain JWK keys when performing HMAC...

USN-8916-1: PyJWT vulnerabilities

YuSung Han discovered that PyJWT did not properly validate certain JWK keys when performing HMAC verification. An attacker could possibly use this issue to forge authentication tokens. This issue only affected Ubuntu 26.04 LTS. CVE-2026-102266 Rohan Das discovered that PyJWT incorrectly handled...

USN-8916-1 pyjwt vulnerabilities

YuSung Han discovered that PyJWT did not properly validate certain JWK keys when performing HMAC verification. An attacker could possibly use this issue to forge authentication tokens. This issue only affected Ubuntu 26.04 LTS. CVE-2026-102266 Rohan Das discovered that PyJWT incorrectly handled...

PT-2026-110660

Name of the Vulnerable Software and Affected Versions FreeRDP versions 3.0.0 through 3.31.0 Description An incorrect permission assignment allows local users to read private keys created by the crypto write pem function that lack owner-only permissions. On multi-user Unix hosts, attackers can...

fast-jwt: Incomplete patch of CVE-2026-34950: Non-whitespace key-prefix re-enables RSA→HS256 algorithm confusion

Summary The fix for CVE-2026-34950 CVSS 9.1, released in v6.2.0 is incomplete. It adds key.trim to the PEM-detection path in src/crypto.js, but String.prototype.trim only strips characters classified as whitespace by the ECMAScript specification. The subsequent ^-anchored regex /^-----BEGIN?: RSA...

CVE-2026-87676

A stack-based buffer overflow vulnerability exists in the security library component of Brocade Fabric OS versions before 10.0.1. When parsing uploaded X.509 PEM certificates for management display, the system improperly validates the length of the Authority Key Identifier AKI extension before...

CVE-2026-87676

A stack-based buffer overflow vulnerability exists in the security library component of Brocade Fabric OS versions before 10.0.1 . The flaw occurs during the parsing of uploaded X.509 PEM certificates for management display because the system fails to properly validate the length of the Authority...

CVE-2026-87676

A stack-based buffer overflow vulnerability exists in the security library component of Brocade Fabric OS versions before 10.0.1. When parsing uploaded X.509 PEM certificates for management display, the system improperly validates the length of the Authority Key Identifier AKI extension before...

EUVD-2026-94671

A stack-based buffer overflow vulnerability exists in the security library component of Brocade Fabric OS versions before 10.0.1. When parsing uploaded X.509 PEM certificates for management display, the system improperly validates the length of the Authority Key Identifier AKI extension before...

CVE-2026-87676: Stack-based Buffer Overflow

A stack-based buffer overflow vulnerability exists in the security library component of Brocade Fabric OS versions before 10.0.1. When parsing uploaded X.509 PEM certificates for management display, the system improperly validates the length of the Authority Key Identifier AKI extension before...

Stack-based Buffer Overflow in Certificate Parsing Service of Brocade Fabric OS

: A stack-based buffer overflow vulnerability exists in the security library component of Brocade Fabric OS versions before 10.0.1. When parsing uploaded X.509 PEM certificates for management display, the system improperly validates the length of the Authority Key Identifier AKI extension before...