cve-2021-40444-analysis

CVE-2021-40444 Analysis This repository contains the deobfuscated exploit code for CVE-2021-40444 as recovered by Immersive Labs during their analysis. This repository supports the blog article that can be found at https://immersivelabs.com/resources/blog/analyzing-the-cve-2021-40444-exploit/...

gv_decryptor

Gallery Vault Decryptor Recovery tool for assets encrypted by the Gallery Vault ThinkYeah Android application. It supports the V2 container layout documented below and does not require the Gallery Vault PIN. Only recover data that you own or are authorized to examine. Requirements Python 3.10 or...

CVE-2023-3350

CVE-2023-3349 / CVE-2023-3350 | IBERMATICA RPS 2019 Security research documenting an unauthenticated information disclosure and a cryptographic design flaw in IBERMATICA RPS 2019. The vulnerabilities can be chained to expose application logs containing authentication-related SQL queries and recov...

CVE-2026-65630

Observable Timing Discrepancy vulnerability in potatosalad jose allows recovery of a long-term X25519 private key through a timing side channel in the pure-Erlang Curve25519 fallback. The pure-Erlang X25519 implementation performs scalar multiplication over the secret private key using a recursiv...

CVE-2026-65626

The pure-Erlang RSAES-PKCS1-v15 decryption in the josejwapkcs1 module is a Bleichenbacher padding oracle. emepkcs1decode/2 returns the recovered message when a decrypted block has valid PKCS1 v1.5 padding a leading 0x00 0x02, a padding string of at least eight non-zero bytes, and a 0x00 separator...

CVE-2026-65630 Timing side-channel in pure-Erlang X25519 scalar multiplication leaks the private key in jose

Observable Timing Discrepancy vulnerability in potatosalad jose allows recovery of a long-term X25519 private key through a timing side channel in the pure-Erlang Curve25519 fallback. The pure-Erlang X25519 implementation performs scalar multiplication over the secret private key using a recursiv...

CVE-2026-65630

The potatosalad jose library (versions 1.10.0 before 1.11.13 ) contains an Observable Timing Discrepancy (CWE-208) in its pure-Erlang Curve25519 fallback. The vulnerability arises because the recursive Montgomery ladder uses value-dependent Erlang bignum arithmetic (multiplication, remainder, and...

CVE-2026-65626

The jose library (versions 1.3.0 before 1.11.13 ) contains a Bleichenbacher padding oracle in its pure-Erlang jose_jwa_pkcs1 module. The vulnerability arises because the eme_pkcs1_decode/2 and rsaes_pkcs1_decrypt/2 functions fail to implement implicit-rejection countermeasures (RFC 8017 §7.2.2), ...

CVE-2026-65626 Bleichenbacher padding oracle in RSAES-PKCS1-v1_5 decryption in jose

The pure-Erlang RSAES-PKCS1-v15 decryption in the josejwapkcs1 module is a Bleichenbacher padding oracle. emepkcs1decode/2 returns the recovered message when a decrypted block has valid PKCS1 v1.5 padding a leading 0x00 0x02, a padding string of at least eight non-zero bytes, and a 0x00 separator...

EEF-CVE-2026-65626 Bleichenbacher padding oracle in RSAES-PKCS1-v1_5 decryption in jose

Summary The pure-Erlang RSAES-PKCS1-v15 decryption in the josejwapkcs1 module is a Bleichenbacher padding oracle. emepkcs1decode/2 returns the recovered message when a decrypted block has valid PKCS1 v1.5 padding a leading 0x00 0x02, a padding string of at least eight non-zero bytes, and a 0x00...

CVE-2023-0748

CVE-2023-0748 BTCPayServer 1.7.5 and lower version is vulnerable for Open Redirection attack. Step to Reproduce 1. Login your account on https://mainnet.demo.btcpayserver.org/login 2. Then Click the link below...

CVE-2020-15392

CVE-2020-15392 User Enumeration on Supravizio BPM 10.1.2 Description A user enumeration vulnerability flaw was found in Supravizio BPM, version 10.1.2. This issue occurs during password recovery, where a difference in messages could allow an attacker to determine if the user is valid or not,...

CVE-2026-98894

A flaw was found in the AMD GPU driver within the Linux kernel. When handling overflow conditions in the Common Platform Error Record CPER ring buffer, the driver relies on parsed entry sizes from the buffer contents without verifying that the read pointer advances. Corrupt error record data can...

WinRE-Patch

WinRE-Patch Patches CVE-2022-41099 Original: https://github.com/halsey51013/UpdateWindowsRE-CVE-2022-41099...

PoC_CurveBall

CVE-2020-0601 - CurveBall Highlights PoC for CVE-2020-0601 Trivial solution for private-key of 1 Non-trivial solution for 1 private-key curve-order Written in C, uses OpenSSL's libcrypto Requirements Linux of some variety apt install libssl libssl-dev Or whatever package mananger you use Compilin...

CVE-2026-94380

Weak Password Recovery Mechanism for Forgotten Password vulnerability in HAVELSAN Inc. Liman MYS allows Password Recovery Exploitation. This issue affects Liman MYS: from 2.3.4-1124 before 2.3.5-1131...

CVE-2026-94380

The HAVELSAN Inc. Liman MYS software (versions 2.3.4-1124 through 2.3.5-1131 ) is vulnerable to a Weak Password Recovery Mechanism for forgotten passwords (CWE-640 ). This flaw allows for Password Recovery Exploitation , potentially leading to high impacts on confidentiality and integrity as refl...

EUVD-2026-109777

Weak Password Recovery Mechanism for Forgotten Password vulnerability in HAVELSAN Inc. Liman MYS allows Password Recovery Exploitation. This issue affects Liman MYS: from 2.3.4-1124 before 2.3.5-1131...

CSRFBrute

CSRFBrute CSRF login brute-force tool - V 0.5.0 Dev It is recommended to prioritize the stable and streamlined version csrfbrute.py 🚀 Features Dynamic CSRF Token refresh - Ensures accuracy on high-security targets Thread-safe session management - Supports high-concurrency operations, up to 100...

Total-Commander-FTP-Password-Recovery-Tool-Python

Total Commander FTP password recovery Python Total Commander formerly known as Windows Commander is a classic file manager for Windows, Windows CE, Windows Phone, and now also Android. Total Commander has a built-in FTP/FXP client and it keeps the FTP logins and encrypted passwords in wcxftp.ini...