noise-java

Librería Noise-Java Noise-Java es una implementación en Java puro del Protocolo Noise, pensada como una implementación de referencia. El código se distribuye bajo los términos de la licencia MIT. Esta librería está escrita en Java puro, haciendo uso de la Extension de Criptografía Java JCE para...

hmac-bcrypt

hmac-bcrypt Este repositorio contiene implementaciones de referencia de la función de hash de contraseñas hmac-bcrypt en varios lenguajes. Cada implementación de referencia intenta ser un puerto 1:1 de las implementaciones originales en C y Perl creadas por @epixoip cuando es posible, y son...

private-landing

Private Landing 通过正确构建来学习身份验证。 在线演示 · 威胁模型 · 认证流程 · ADRs 演示说明： 登录端点受自适应 PoW 挑战保护——重复失败会返回更高的工作量证明难度。基于缓存的速度限制已实现并测试，但当前未在在线演示中启用；翻转 app.ts 中的 createCacheClient（位于 apps/cloudflare-workers/src/app.ts）可激活它。 一个从零开始为 Cloudflare Workers 构建的认证参考实现——PBKDF2 密码哈希、JWT 双令牌会话、常量时间比较、滑动过期和可移除的可观测性插件——全部通过...

hibernate__hibernate-validator_CVE-2019-10219_6-0-17-Final

Hibernate Validator Versione: 6.0.17.Final - 13-06-2019 Cos'è? Questa è l'implementazione di riferimento di JSR-380 - Bean Validation 2.0. Bean Validation definisce un modello di metadati e un'API per JavaBean oltre alla validazione dei metodi. La sorgente predefinita dei metadati sono le...

defending-code-reference-harness

Referenz-Harness zur Code-Verteidigung Eine Referenzimplementierung für die autonome Erkennung und Behebung von Schwachstellen mit Claude, basierend auf unseren Erkenntnissen aus der Zusammenarbeit mit Sicherheitsteams mehrerer Organisationen seit dem Start von Claude Mythos Preview. Eine...

python-tuf

Ein Framework zur Sicherung von Software-Update-Systemen The Update Framework TUF ist ein Framework für sichere Inhaltsauslieferung und Updates. Es schützt vor verschiedenen Arten von Lieferkettenangriffen und bietet Widerstandsfähigkeit gegenüber Kompromittierung. Dieses Repository ist eine...

spire

!Production...

[SECURITY] Fedora 43 Update: jpegxl-0.11.2-1.fc43

This package contains a reference implementation of JPEG XL encoder and decoder...

[SECURITY] Fedora 44 Update: jpegxl-0.11.2-1.fc44

This package contains a reference implementation of JPEG XL encoder and decoder...

Astra Linux – Vulnerability in Python 3.7, PHP 7.3

The Keccak XKCP SHA-3 reference implementation, prior to the update of fdc6fef, has an integer overflow and resulting buffer overflow issue. This vulnerability allows attackers to execute arbitrary code or compromise the expected cryptographic properties of the algorithm. This issue occurs within...

CVE-2026-42217

OpenEXR provides the specification and reference implementation of the EXR file format, an image storage format for the motion picture industry. From versions 3.0.0 to before 3.2.9, 3.3.0 to before 3.3.11, and 3.4.0 to before 3.4.11, readVariableLengthInteger decodes a variable-length integer fro...

CVE-2026-42216

OpenEXR provides the specification and reference implementation of the EXR file format, an image storage format for the motion picture industry. From versions 3.0.0 to before 3.2.9, 3.3.0 to before 3.3.11, and 3.4.0 to before 3.4.11, IDManifest::init reconstructs strings from a prefix-compressed...

CVE-2026-41142

OpenEXR provides the specification and reference implementation of the EXR file format, an image storage format for the motion picture industry. From versions 3.0.0 to before 3.2.9, 3.3.0 to before 3.3.11, and 3.4.0 to before 3.4.11, there is an integer overflow in ImageChannel::resize that leads...

UBUNTU-CVE-2026-40250

OpenEXR provides the specification and reference implementation of the...

UBUNTU-CVE-2026-39886

OpenEXR provides the specification and reference implementation of the...

CVE-2026-40250

OpenEXR provides the specification and reference implementation of the EXR file format, an image storage format for the motion picture industry. In versions 3.4.0 through 3.4.9, 3.3.0 through 3.3.9, and 3.2.0 through 3.2.7, internaldwacompressor.h:1040 performs chan-width chan-bytesperelement in...

CVE-2026-40244

OpenEXR provides the specification and reference implementation of the EXR file format, an image storage format for the motion picture industry. In versions 3.4.0 through 3.4.9, 3.3.0 through 3.3.9, and 3.2.0 through 3.2.7, internaldwacompressor.h:1722 performs curc-width curc-height in int32...

AppSec-Penetration-Testing-Lab

🔐 AppSec Penetration Testing Lab A hands-on application sec...

[SECURITY] Fedora 43 Update: python-scitokens-1.9.7-1.fc43

SciToken reference implementation library...

Cert CC: CVE-2025-2884 Out-of-Bounds read vulnerability in TCG TPM2.0 reference implementation

CVE-2025-2884 is regarding a vulnerability in TCG TPM2.0 Reference implementation's CryptHmacSign helper function that is vulnerable to Out-of-Bounds read due to the lack of validation the signature scheme with the signature key's algorithm. CERT/CC created this CVE on their behalf. The documente...