wavecrack

Wavecrack Description A user-friendly Web interface to share an hashcat cracking box among multiple users with some pre-defined options. Screenshots The homepage Adding an hash to crack Seeing the results and some stats Outline This Web application can be used to launch asynchronous password crac...

ROS-20261028-73-0027

The vulnerability in rabbitmq-server relates to unrestricted resource allocation. Exploitation of this vulnerability may allow a remote attacker to cause a denial of service...

CLEANSTART-2026-YH85200 jQuery before 3

Security vulnerability affects the rabbitmq-server package. jQuery before 3...

CLEANSTART-2026-FZ67762 jQuery before 3

Security vulnerability affects the rabbitmq-server package. jQuery before 3...

CLEANSTART-2026-IO65038 RabbitMQ is a multi-protocol messaging broker

Security vulnerability affects the rabbitmq-server package. RabbitMQ is a multi-protocol messaging broker...

ROS-20261027-73-0041

The vulnerability in rabbitmq-server is related to flaws in the authorization mechanism. Exploitation of this vulnerability may allow a remote attacker to gain unauthorized access to protected information...

ROS-20261027-73-0045

The vulnerability in rabbitmq-server is related to flaws in the authorization mechanism. Exploitation of this vulnerability may allow a remote attacker to gain unauthorized access to protected information...

ROS-20261027-73-0037

A vulnerability in rabbitmq-server related to improper restriction of the path name for directories. Exploitation of this vulnerability may allow a remote attacker to gain unauthorized access to protected information...

ROS-20261027-73-0039

The vulnerability in rabbitmq-server relates to unrestricted resource allocation. Exploitation of this vulnerability may allow a remote attacker to cause a denial of service...

ROS-20261027-73-0047

The vulnerability in rabbitmq-server is related to a lack of protection for sensitive data. Exploitation of this vulnerability may allow a remote attacker to gain unauthorized access to protected information...

ROS-20261027-73-0043

The vulnerability in rabbitmq-server is related to improper handling of web page structures. Exploitation of this vulnerability may allow a remote attacker to execute arbitrary code...

AZL-112184 CVE-2026-65630 affecting package rabbitmq-server 3.13.7-10

Observable Timing Discrepancy vulnerability in potatosalad jose allows recovery of a long-term X25519 private key through a timing side channel in the pure-Erlang Curve25519 fallback. The pure-Erlang X25519 implementation performs scalar multiplication over the secret private key using a recursiv...

AZL-112202 CVE-2026-65631 affecting package rabbitmq-server 3.13.7-11

Inefficient Algorithmic Complexity in erlang-jose allows an unauthenticated remote attacker to cause a CPU-exhaustion denial of service by submitting a crafted RSA JSON Web Key. When an application parses an untrusted JWK through the public josejwk:frombinary/1 or josejwk:frommap/1 API or the...

AZL-112199 CVE-2026-65627 affecting package rabbitmq-server 3.13.7-9

Improper Handling of Highly Compressed Data Data Amplification vulnerability in potatosalad jose erlang-jose allows a remote attacker to exhaust a node's memory with a small crafted JWE token. The josejwezip:uncompress/2 function in src/jwe/josejwezip.erl decompresses the DEFLATE-compressed...

AZL-112196 CVE-2026-65626 affecting package rabbitmq-server for versions less than 3.13.7-10

The pure-Erlang RSAES-PKCS1-v15 decryption in the josejwapkcs1 module is a Bleichenbacher padding oracle. emepkcs1decode/2 returns the recovered message when a decrypted block has valid PKCS1 v1.5 padding a leading 0x00 0x02, a padding string of at least eight non-zero bytes, and a 0x00 separator...

AZL-112190 CVE-2026-65629 affecting package rabbitmq-server 3.13.7-9

Use of Password Hash With Insufficient Computational Effort in the jose library allows an attacker who obtains a password-encrypted private-key export to recover the private key through an offline password-cracking attack. When jose exports a password-encrypted private key with josejwk:toder/2...

AZL-112205 CVE-2026-65628 affecting package rabbitmq-server 3.13.7-9

josejwk:sharedsecret/2 exposed in Elixir as JOSE.JWK.sharedsecret/2 derives an ECDH shared secret from two JWKs. Its first function clause only matches when both JWKs carry the same key type kty module, and its fallback clause re-invokes itself as sharedsecretfromYourJWK, fromMyJWK. Because from/...

AZL-112187 CVE-2026-65625 affecting package rabbitmq-server 3.13.7-10

The pure-Erlang AES-GCM fallback in josejwaaes derives the number of verified authentication tag bits from the attacker-supplied tag itself. In the aesgcm, Bits clause of blockdecrypt/4, the incoming tag is guarded only by isbinary/1, with no check on its length. Verification in gcmblockdecrypt/6...

ROS-20261026-73-0205

The vulnerability in rabbitmq-server relates to unlimited resource distribution. Exploiting this vulnerability could allow a malicious actor to cause service failures...

ROS-20261026-73-0203

The vulnerability in rabbitmq-server relates to incorrect restrictions on the path name to the restricted access catalog. Exploiting this vulnerability could allow an attacker operating remotely to gain unauthorized access to protected information...