CVE-2023-41892_poc

CVE-2023-41892poc Personalizzato per uso personale pocnoauth.py Web shell PHP one-line di base Esecuzione di comandi OS tramite ?cmd= pocauth.py Web shell con semplice autenticazione basata su chiave confronto hash SHA-256 Richiede l'inserimento della chiave corretta per eseguire comandi Modifica...

temcrypt

A Criptografia de Próxima Geração Experimente temcrypt na Web → temcrypt SDK Focado em proteger dados altamente sensíveis, o temcrypt é um mecanismo avançado de criptografia evolutiva de dados em múltiplas camadas que oferece complexidade escalável ao longo do tempo e é resistente a ataques comun...

rainbowcrackalack

Rainbow Crackalack Author: Joe Testa @therealjoetesta About This project produces open-source code to generate rainbow tables as well as use them to look up password hashes. While the current release only supports NTLM, future releases may support MD5, SHA-1, SHA-256, and possibly more. Both Linu...

web_exploit_detector

Web Exploit Detector Introduction The Web Exploit Detector is a Node.js application and NPM module used to detect possible infections, malicious code and suspicious files in web hosting environments. This application is intended to be run on web servers hosting one or more websites. Running the...

jdbc.postgresql.org: pgjdbc: Client-side Denial of Service via malicious SCRAM-SHA-256 authentication

A flaw was found in pgjdbc, an open-source PostgreSQL JDBC Driver. A malicious server can exploit this vulnerability by instructing the driver to perform SCRAM-SHA-256 Salted Challenge Response Authentication Mechanism Secure Hash Algorithm 256 authentication with an excessively large iteration...

Important: Red Hat Security Advisory: postgresql-jdbc security update

An update for postgresql-jdbc is now available for Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support and Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On. Red Hat Product Security has rated this update as having a security impact of Important. A Common...

SHA-256-Backdoor-Discovery-Engine

Questo repository non contiene un README...

cryptovenom

CryptoVenom CryptoVenom: The Cryptography Swiss Army knife What is CryptoVenom? CryptoVenom is an OpenSource tool which contains a lot of cryptosystems and cryptoanalysis methods all in one, including classical algorithms, hash algorithms, encoding algorithms, logic gates, mathematical functions,...

hash-identifier

hash-identifier Software to identify the different types of hashes used to encrypt data and especially passwords. Encryption formats supported: ADLER-32 CRC-32 CRC-32B CRC-16 CRC-16-CCITT DESUnix FCS-16 GHash-32-3 GHash-32-5 GOST R 34.11-94 Haval-160 Haval-192 110080 ,Haval-224 114080 ,Haval-256...

log4j-checker

Log4j-Checker Questo repository contiene script che possono aiutare a identificare i file .jar che potrebbero essere vulnerabili a CVE-2021-44228, noto anche come Log4Shell. Log4Shell Hash Check Questo script trova i file .jar nel filesystem a partire da un percorso specifico, calcola un hash...

SHA256-CDP

SHA256-CDP: Cyclic Digit-sum Projection Implementazione GPU-accelerata di rainbow table del framework di analisi strutturale CDP per SHA-256. Basato sui risultati del paper CDP DOI: 10.5281/zenodo.20627240, questo repository fornisce un'implementazione completa e funzionante di tabelle rainbow a...

Hybrid Submit

Script di Invio Batch per Hybrid Analysis Questo script Python esegue una scansione ricorsiva di una cartella e invia file eseguibili, script, documenti e altri file rilevanti a Hybrid Analysis Falcon Sandbox per l'analisi automatizzata di malware. Caratteristiche Attraversa ricorsivamente le...

CVE-2026-59308

Spring AI 2.0.0 contains a vulnerability in its Semantic Cache support. The context hash mechanism, intended to isolate cached responses between different system prompts, is insufficient and could allow cached responses to be shared across unrelated contexts . This results in low confidentiality ...

CVE-2026-59308 Semantic Cache Cross-Tenant Isolation Bypass via SHA-256 Truncation

In Spring AI's Semantic Cache support, the context hash used to isolate cached responses between different system prompts could allow cached responses to be shared across unrelated contexts. Affected versions: Spring AI: 2.0.0...

EUVD-2026-63685

CloudNativePG is a platform designed to manage PostgreSQL databases within Kubernetes environments. Prior to 1.28.4 and 1.29.2, CloudNativePG embedded cleartext role passwords in ALTER ROLE and CREATE ROLE statements generated by SetUserPassword in pkg/management/postgres/utils/roles.go and...

CVE-2026-50720

The Ingenic T31 SoC boot ROM flash-boot verification path compares only a single 32-bit word of the RSA signature output against a single 32-bit word of the SHA-256 payload digest, rather than compare the full data. This allows an attacker with physical write access to boot media to forge modifie...

CVE-2026-50720

The Ingenic T31 SoC boot ROM flash-boot verification path compares only a single 32-bit word of the RSA signature output against a single 32-bit word of the SHA-256 payload digest, rather than compare the full data. This allows an attacker with physical write access to boot media to forge modifie...

CVE-2026-50720

CVE-2026-50720 affects the Ingenic T31 SoC boot ROM flash-boot verification path. The root cause is a partial signature comparison : only a single 32-bit word of the RSA signature output is checked against a single 32-bit word of the SHA-256 payload digest, rather than the full digest. An attacke...

EUVD-2026-62480

The Ingenic T31 SoC boot ROM flash-boot verification path compares only a single 32-bit word of the RSA signature output against a single 32-bit word of the SHA-256 payload digest, rather than compare the full data. This allows an attacker with physical write access to boot media to forge modifie...

CVE-2026-75625

Kraken agents fail to verify peer-to-peer downloaded blobs against their requested SHA-256 digest before committing to the content-addressable cache, relying only on CRC32 checksums for piece validation. Attackers on the agent-to-agent path or malicious peers can supply substituted content with...