Telerik UI - Remote Code Execution via Insecure Deserialization

Telerik UI - Remote Code Execution via Insecure Deserialization See the full write-up at Bishop Fox, CVE-2019-18935: https://know.bishopfox.com/research/cve-2019-18935-remote-code-execution-in-telerik-ui, for a complete walkthrough of vulnerability and exploit details for this issue along with...

Telerik UI - Remote Code Execution via Insecure Deserialization

See the full write-up at Bishop Fox, CVE-2019-18935: https://know.bishopfox.com/research/cve-2019-18935-remote-code-execution-in-telerik-ui, for a complete walkthrough of vulnerability and exploit details for this issue along with patching instructions. Install git clone...

Exploit for Deserialization of Untrusted Data in Telerik Ui_For_Asp.Net_Ajax

CVE-2019-18935 Proof-of-concept exploit for a .NET JSON deser...

UPDATED VERSION: RouterSploit 3.4.0

PenTestIT RSS Feed RouterSploit 3.4.0, the long awaited router exploitation framework update is out guys! This release includes some really cool features and updates such as using pycryptodome from pycryptoand newer exploitation modules! Read on for the improvements. What is RouterSploit? The...

[SECURITY] Fedora 27 Update: python-pycryptodomex-3.6.6-1.fc27

PyCryptodome is a self-contained Python package of low-level cryptographic primitives. It's a fork of PyCrypto. It brings several enhancements with respect to the last official version of PyCrypto 2.6.1, for instance: Authenticated encryption modes GCM, CCM, EAX, SIV, OCB Accelerated AES on Intel...

PyCryptodome integer overflow vulnerability

PyCryptodome before 3.6.6 has an integer overflow in the datalen variable in AESNI.c, related to the AESNIencrypt and AESNIdecrypt functions, leading to the mishandling of messages shorter than 16 bytes...

aat-downloader (>=0.0.1, <=0.0.3), amaascore (>=0.5.16, <=0.9.6) +77 more potentially affected by CVE-2018-15560 via pycryptodome (>=3.3.1, <=3.6.4)

pycryptodome PYPI version =3.3.1, =0.0.1, =0.5.16, =0.1.1, =0.0.0, =0.4.1, =0.0.1, =1.4.2, =1.0.0, =0.0.17, =2.6.0, =0.0.1b6, =1.0.0b4 - cotoba-cli 0.1.6 and more Source cves: CVE-2018-15560 Source advisory: GHSA-HGG3-G7GR-66R7...

GHSA-HGG3-G7GR-66R7 PyCryptodome integer overflow vulnerability

PyCryptodome before 3.6.6 has an integer overflow in the datalen variable in AESNI.c, related to the AESNIencrypt and AESNIdecrypt functions, leading to the mishandling of messages shorter than 16 bytes...

aat-downloader (>=0.0.1, <=0.0.3), amaascore (>=0.5.16, <=0.9.6) +77 more potentially affected by CVE-2018-15560 via pycryptodome (>=3.3.1, <=3.6.4)

pycryptodome PYPI version =3.3.1, =0.0.1, =0.5.16, =0.1.1, =0.0.0, =0.4.1, =0.0.1, =1.4.2, =1.0.0, =0.0.17, =2.6.0, =0.0.1b6, =1.0.0b4 - cotoba-cli 0.1.6 and more Source cves: CVE-2018-15560 Source advisory: OSV:GHSA-HGG3-G7GR-66R7...

Integer Overflow

pycryptodome is vulnerable to integer overflows. The library does not properly check if it is decrypting any incomplete blocks, allowing a malicious user to pass a message encrypted in AES with the ECB mode, causing the application to crash...

PYSEC-2018-21

PyCryptodome before 3.6.6 has an integer overflow in the datalen variable in AESNI.c, related to the AESNIencrypt and AESNIdecrypt functions, leading to the mishandling of messages shorter than 16 bytes...

CVE-2018-15560

PyCryptodome before 3.6.6 has an integer overflow in the datalen variable in AESNI.c, related to the AESNIencrypt and AESNIdecrypt functions, leading to the mishandling of messages shorter than 16 bytes...

Integer overflow

PyCryptodome before 3.6.6 has an integer overflow in the datalen variable in AESNI.c, related to the AESNIencrypt and AESNIdecrypt functions, leading to the mishandling of messages shorter than 16 bytes...

aat-downloader (>=0.0.1, <=0.0.3), amaascore (>=0.5.16, <=0.9.6) +77 more potentially affected by CVE-2018-15560 via pycryptodome (>=3.3.1, <=3.6.4)

pycryptodome PYPI version =3.3.1, =0.0.1, =0.5.16, =0.1.1, =0.0.0, =0.4.1, =0.0.1, =1.4.2, =1.0.0, =0.0.17, =2.6.0, =0.0.1b6, =1.0.0b4 - cotoba-cli 0.1.6 and more Source cves: CVE-2018-15560 Source advisory: OSV:PYSEC-2018-21...

CVE-2018-15560

PyCryptodome before 3.6.6 has an integer overflow in the datalen variable in AESNI.c, related to the AESNIencrypt and AESNIdecrypt functions, leading to the mishandling of messages shorter than 16 bytes...

CVE-2018-15560

PyCryptodome before 3.6.6 has an integer overflow in the datalen variable in AESNI.c, related to the AESNIencrypt and AESNIdecrypt functions, leading to the mishandling of messages shorter than 16 bytes...

PT-2018-13086 · Legion Of The Bouncy Castle · Pycryptodome

Name of the Vulnerable Software and Affected Versions: PyCryptodome versions prior to 3.6.6 Description: The issue is related to an integer overflow in the data len variable in AESNI.c, which affects the AESNI encrypt and AESNI decrypt functions. This leads to the mishandling of messages shorter...

CVE-2018-15560

CVE-2018-15560 affects PyCryptodome prior to 3.6.6. The vulnerability is an integer overflow in the data_len variable of AESNI.c, related to AESNI_encrypt and AESNI_decrypt, causing mishandling of messages shorter than 16 bytes. Fedora advisories and Nessus/OpenVAS entries reference security fixe...

CVE-2018-15560: Integer Overflow or Wraparound

PyCryptodome before 3.6.6 has an integer overflow in the datalen variable in AESNI.c, related to the AESNIencrypt and AESNIdecrypt functions, leading to the mishandling of messages shorter than 16 bytes...

aat-downloader (>=0.0.1, <=0.0.3), amaascore (>=0.5.16, <=0.9.6) +77 more potentially affected by CVE-2018-15560 via pycryptodome (>=3.3.1, <=3.6.4)

pycryptodome PYPI version =3.3.1, =0.0.1, =0.5.16, =0.1.1, =0.0.0, =0.4.1, =0.0.1, =1.4.2, =1.0.0, =0.0.17, =2.6.0, =0.0.1b6, =1.0.0b4 - cotoba-cli 0.1.6 and more Source cves: CVE-2018-15560 Source advisory: MEND:CVE-2018-15560...