CVE-2023-41892_poc

CVE-2023-41892poc Für meine eigene Verwendung angepasst pocnoauth.py Einfache einzeilige PHP-Webshell OS-Befehlsausführung über ?cmd= pocauth.py Webshell mit einfacher schlüsselbasierter Authentifizierung SHA-256-Hashvergleich Befehlsausführung nur mit dem korrekten Schlüssel möglich Codeänderung...

temcrypt

A Criptografia de Próxima Geração Experimente temcrypt na Web → temcrypt SDK Focado em proteger dados altamente sensíveis, o temcrypt é um mecanismo avançado de criptografia evolutiva de dados em múltiplas camadas que oferece complexidade escalável ao longo do tempo e é resistente a ataques comun...

SHA-256-Backdoor-Discovery-Engine

इस रिपॉजिटरी में README नहीं है।...

rainbowcrackalack

Rainbow Crackalack Author: Joe Testa @therealjoetesta About This project produces open-source code to generate rainbow tables as well as use them to look up password hashes. While the current release only supports NTLM, future releases may support MD5, SHA-1, SHA-256, and possibly more. Both Linu...

web_exploit_detector

Web Exploit Detector Introduction The Web Exploit Detector is a Node.js application and NPM module used to detect possible infections, malicious code and suspicious files in web hosting environments. This application is intended to be run on web servers hosting one or more websites. Running the...

jdbc.postgresql.org: pgjdbc: Client-side Denial of Service via malicious SCRAM-SHA-256 authentication

A flaw was found in pgjdbc, an open-source PostgreSQL JDBC Driver. A malicious server can exploit this vulnerability by instructing the driver to perform SCRAM-SHA-256 Salted Challenge Response Authentication Mechanism Secure Hash Algorithm 256 authentication with an excessively large iteration...

Important: Red Hat Security Advisory: postgresql-jdbc security update

An update for postgresql-jdbc is now available for Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support and Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On. Red Hat Product Security has rated this update as having a security impact of Important. A Common...

cryptovenom

CryptoVenom CryptoVenom: The Cryptography Swiss Army knife What is CryptoVenom? CryptoVenom is an OpenSource tool which contains a lot of cryptosystems and cryptoanalysis methods all in one, including classical algorithms, hash algorithms, encoding algorithms, logic gates, mathematical functions,...

hash-identifier

hash-identifier Software to identify the different types of hashes used to encrypt data and especially passwords. Encryption formats supported: ADLER-32 CRC-32 CRC-32B CRC-16 CRC-16-CCITT DESUnix FCS-16 GHash-32-3 GHash-32-5 GOST R 34.11-94 Haval-160 Haval-192 110080 ,Haval-224 114080 ,Haval-256...

log4j-checker

Log4j-Checker Dieses Repository enthält Skripte, die dabei helfen können, .jar-Dateien zu identifizieren, die möglicherweise anfällig für CVE-2021-44228, auch bekannt als Log4Shell, sind. Log4Shell Hash-Prüfung Dieses Skript findet .jar-Dateien im Dateisystem, beginnend ab einem bestimmten Pfad,...

SHA256-CDP

SHA256-CDP: Projeção de Soma de Dígitos Cíclica Implementação de tabela arco-íris acelerada por GPU do framework de análise estrutural CDP para SHA-256. Construído com base nos achados do artigo CDP DOI: 10.5281/zenodo.20627240, este repositório fornece uma implementação completa e funcional de...

Hybrid Submit

Hybrid Analysis Batch Submission-Skript Dieses Python-Skript durchsucht rekursiv einen Ordner und reicht ausführbare Dateien, Skripte, Dokumente und andere relevante Dateien bei Hybrid Analysis Falcon Sandbox zur automatisierten Malware-Analyse ein. Funktionen Durchläuft rekursiv Verzeichnisse...

CVE-2026-59308

Spring AI 2.0.0 contains a vulnerability in its Semantic Cache support. The context hash mechanism, intended to isolate cached responses between different system prompts, is insufficient and could allow cached responses to be shared across unrelated contexts . This results in low confidentiality ...

CVE-2026-59308 Semantic Cache Cross-Tenant Isolation Bypass via SHA-256 Truncation

In Spring AI's Semantic Cache support, the context hash used to isolate cached responses between different system prompts could allow cached responses to be shared across unrelated contexts. Affected versions: Spring AI: 2.0.0...

EUVD-2026-63685

CloudNativePG is a platform designed to manage PostgreSQL databases within Kubernetes environments. Prior to 1.28.4 and 1.29.2, CloudNativePG embedded cleartext role passwords in ALTER ROLE and CREATE ROLE statements generated by SetUserPassword in pkg/management/postgres/utils/roles.go and...

CVE-2026-50720

The Ingenic T31 SoC boot ROM flash-boot verification path compares only a single 32-bit word of the RSA signature output against a single 32-bit word of the SHA-256 payload digest, rather than compare the full data. This allows an attacker with physical write access to boot media to forge modifie...

CVE-2026-50720

The Ingenic T31 SoC boot ROM flash-boot verification path compares only a single 32-bit word of the RSA signature output against a single 32-bit word of the SHA-256 payload digest, rather than compare the full data. This allows an attacker with physical write access to boot media to forge modifie...

EUVD-2026-62480

The Ingenic T31 SoC boot ROM flash-boot verification path compares only a single 32-bit word of the RSA signature output against a single 32-bit word of the SHA-256 payload digest, rather than compare the full data. This allows an attacker with physical write access to boot media to forge modifie...

CVE-2026-50720

CVE-2026-50720 affects the Ingenic T31 SoC boot ROM flash-boot verification path. The root cause is a partial signature comparison : only a single 32-bit word of the RSA signature output is checked against a single 32-bit word of the SHA-256 payload digest, rather than the full digest. An attacke...

CVE-2026-75625

Kraken agents fail to verify peer-to-peer downloaded blobs against their requested SHA-256 digest before committing to the content-addressable cache, relying only on CRC32 checksums for piece validation. Attackers on the agent-to-agent path or malicious peers can supply substituted content with...