Lucene search
+L

796 matches found

Kitploit
Kitploit
•added 2026/10/19 4:21 p.m.•33 views

phantom-frida

phantom-frida phantom-frida builds Android Frida Server and Gadget from source while changing a targeted set of observable runtime identifiers. It is a builder and verification harness, not a promise that every application-specific detection method is defeated. The current compatibility target is...

6.2AI score
SaveExploits0References1
Kitploit
Kitploit
•added 2026/10/19 11:19 a.m.•14 views

phantom-grid

Phantom Grid - Enterprise Zero Trust Network Access ZTNA Phantom Grid is a next-generation Zero Trust Network Access ZTNA and active defense system. It operates at both the Kernel Level eBPF and Application Level mTLS to transform Linux servers into a robust, deceptive attack surface. Built for...

6.2AI score
SaveExploits0
Kitploit
Kitploit
•added 2026/10/19 8:55 a.m.•29 views

phantom-keylogger

Phantom Keylogger 🎯 MISSION BRIEF Phantom Keylogger is an advanced, stealth-enabled keystroke and visual intelligence gathering system. Built with operational security as the primary objective, this tool provides persistent surveillance capabilities while maintaining minimal footprint on target...

6.3AI score
SaveExploits0
Kitploit
Kitploit
•added 2026/10/19 8:26 a.m.•27 views

Phantom-Evasion-Loader

SROP-Assisted Cross-Memory Attach CMA Injection via Direct Syscalls. 👻 Phantom-Evasion-Loader x64 Linux Phantom-Evasion-Loader is a standalone, pure x64 Assembly injection engine engineered to minimize the detection surface of modern EDR/XDR solutions and Kernel-level monitors like Falco eBPF. It...

6.4AI score
SaveExploits0References2
Kitploit
Kitploit
•added 2026/10/18 11:23 p.m.•26 views

phantom-brain

PHANTOM BRAIN v0.9 Offline AI-powered pentesting analysis tool with real hardware integration Local LLM analysis via Ollama for WiFi, Sub-GHz, NFC/RFID and WPA2 captures — no internet required, no cloud APIs, 100% offline. The main LLM runs on a Windows PC. The Raspberry Pi acts as a lightweight...

6.3AI score
SaveExploits0
Kitploit
Kitploit
•added 2026/10/18 8:29 p.m.•24 views

phantom-playbooks

This is the Corelight Repository for Community Playbooks developed for Splunk Phantom. These provide some examples for you to craft your own playbooks. Corelight Investigate DNS Alert This playbook takes a saved search or alert mechanism for DNS from Splunk and pulls the Zeek UID for the alerts. ...

5.8AI score
SaveExploits0
Kitploit
Kitploit
•added 2026/10/18 11:02 a.m.•18 views

Phantom-Evasion

PHANTOM EVASION 3.0 Phantom-Evasion is an antivirus evasion tool written in python both compatible with python and python3 capable to generate almost fully undetectable executable even with the most common x86 msfvenom payload. The following OSs officialy support automatic setup: 1. Kali Linux 2...

6.5AI score
SaveExploits0
Kitploit
Kitploit
•added 2026/10/16 7:33 p.m.•12 views

phantom-grid

⬡ Phantom Grid Free, open-source Burp Collaborator alternative for penetration testing labs Out-of-Band OOB interaction capture · HTTP/HTTPS · DNS · SQLite · Exfil reassembly What is this? Phantom Grid is a self-hosted OOB Out-of-Band interaction capture tool — a free alternative to Burp...

6.3AI score
SaveExploits0
Snyk
Snyk
•added 2026/10/03 9:45 a.m.•14 views

Improper Verification of Cryptographic Signature

Overview org.bouncycastle:bcprov-jdk15to18 is a Java implementation of cryptographic algorithms. Affected versions of this package are vulnerable to Improper Verification of Cryptographic Signature via the BLS12381BasicScheme.keyValidate path in BLS12381BasicScheme.java. An attacker can be accept...

7.1CVSS5.8AI score0.00174EPSS
SaveExploits0References2
Snyk
Snyk
•added 2026/10/03 9:45 a.m.•14 views

Improper Verification of Cryptographic Signature

Overview Affected versions of this package are vulnerable to Improper Verification of Cryptographic Signature via the BLS12381BasicScheme.keyValidate path in BLS12381BasicScheme.java. An attacker can be accepted as a signer in BLS aggregate verification by supplying an ECPoint built on a...

7.1CVSS5.8AI score0.00174EPSS
SaveExploits0References2
Snyk
Snyk
•added 2026/10/03 9:45 a.m.•19 views

Improper Verification of Cryptographic Signature

Overview Affected versions of this package are vulnerable to Improper Verification of Cryptographic Signature via the BLS12381BasicScheme.keyValidate path in BLS12381BasicScheme.java. An attacker can be accepted as a signer in BLS aggregate verification by supplying an ECPoint built on a...

7.1CVSS5.8AI score0.00174EPSS
SaveExploits0References2
Snyk
Snyk
•added 2026/10/03 9:45 a.m.•26 views

Improper Verification of Cryptographic Signature

Overview Affected versions of this package are vulnerable to Improper Verification of Cryptographic Signature via the BLS12381BasicScheme.keyValidate path in BLS12381BasicScheme.java. An attacker can be accepted as a signer in BLS aggregate verification by supplying an ECPoint built on a...

7.1CVSS5.8AI score0.00174EPSS
SaveExploits0References2
NVD
NVD
•added 2026/10/03 9:17 a.m.•18 views

CVE-2026-71891

In Bouncy Castle for Java before 1.86, BLS12381BasicScheme.keyValidate, and so BLSPublicKeyParameters and every BasicScheme, MessageAugmentation and ProofOfPossession verify and aggregateVerify that gate on it, accepted a public key built on a foreign ECCurve that merely shares BLS12-381's field...

7.1CVSS0.00174EPSS
SaveExploits0References2
osv_debian
osv_debian
•added 2026/10/03 9:17 a.m.•15 views

DEBIAN-CVE-2026-71891

In Bouncy Castle for Java before 1.86, BLS12381BasicScheme.keyValidate, and so BLSPublicKeyParameters and every BasicScheme, MessageAugmentation and ProofOfPossession verify and aggregateVerify that gate on it, accepted a public key built on a foreign ECCurve that merely shares BLS12-381's field...

7.1CVSS5.9AI score0.00174EPSS
SaveExploits0References1
osv_ubuntu
osv_ubuntu
•added 2026/10/03 9:17 a.m.•23 views

UBUNTU-CVE-2026-71891

In Bouncy Castle for Java before 1.86, BLS12381BasicScheme.keyValidate, and so BLSPublicKeyParameters and every BasicScheme, MessageAugmentation and ProofOfPossession verify and aggregateVerify that gate on it, accepted a public key built on a foreign ECCurve that merely shares BLS12-381's field...

7.1CVSS5.9AI score0.00174EPSS
SaveExploits0References4
UbuntuCve
UbuntuCve
•added 2026/10/03 9:17 a.m.•16 views

CVE-2026-71891

In Bouncy Castle for Java before 1.86, BLS12381BasicScheme.keyValidate, and so BLSPublicKeyParameters and every BasicScheme, MessageAugmentation and ProofOfPossession verify and aggregateVerify that gate on it, accepted a public key built on a foreign ECCurve that merely shares BLS12-381's field...

7.1CVSS5.9AI score0.00174EPSS
SaveExploits0References3
EUVD
EUVD
•added 2026/10/03 8:56 a.m.•21 views

EUVD-2026-92005

In Bouncy Castle for Java before 1.86, BLS12381BasicScheme.keyValidate, and so BLSPublicKeyParameters and every BasicScheme, MessageAugmentation and ProofOfPossession verify and aggregateVerify that gate on it, accepted a public key built on a foreign ECCurve that merely shares BLS12-381's field...

7.1CVSS5.9AI score0.00174EPSS
SaveExploits0References2
CVE
CVE
•added 2026/10/03 8:56 a.m.•39 views

CVE-2026-71891

In Bouncy Castle for Java before version 1.86 , the BLS12_381BasicScheme.keyValidate function (and associated components like BLSPublicKeyParameters) failed to properly validate public keys. It accepted keys built on a foreign ECCurve that shared the same field characteristic as BLS12-381 . The r...

7.1CVSS5.9AI score0.00174EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2026/10/03 8:56 a.m.•12 views

CVE-2026-71891 BLS12-381 key validation accepts a public key built on a foreign curve

In Bouncy Castle for Java before 1.86, BLS12381BasicScheme.keyValidate, and so BLSPublicKeyParameters and every BasicScheme, MessageAugmentation and ProofOfPossession verify and aggregateVerify that gate on it, accepted a public key built on a foreign ECCurve that merely shares BLS12-381's field...

7.1CVSS5.9AI score0.00174EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2026/10/03 8:56 a.m.•43 views

CVE-2026-71891 BLS12-381 key validation accepts a public key built on a foreign curve

In Bouncy Castle for Java before 1.86, BLS12381BasicScheme.keyValidate, and so BLSPublicKeyParameters and every BasicScheme, MessageAugmentation and ProofOfPossession verify and aggregateVerify that gate on it, accepted a public key built on a foreign ECCurve that merely shares BLS12-381's field...

7.1CVSS0.00174EPSS
SaveExploits0References2
Rows per page
Query Builder