XposedOrNot

XposedOrNot XposedOrNot XoN 工具用于搜索一个由约8.5亿个实时暴露密码组成的聚合库。使用此类泄露密码对个人账户安全有害。 截图 什么是 Xposed Passwords？ 本项目的主要目的是为公众提供一个免费平台，用于检查其密码是否已被暴露和泄露。 这个庞大的密码集合是来自全球各种数据泄露事件中真实密码的累积。密码来源于诸如 Collection 1、Yahoo 等泄露事件。此外，密码还常通过 pastebin.com 上的"paste"暴露。我们已经收集了超过 40,000 个此类暴露，并将其添加到这个巨大的列表中。 整理后的密码使用高度安全的哈希算法...

Security update for libsodium

This update for libsodium fixes the following issues: Update to 1.0.22 jscPED-16890: Post-quantum key encapsulation is now available. ML-KEM768, the NIST-standardized lattice-based KEM, is accessible through the cryptokemmlkem768 functions. X-Wing, a hybrid KEM combining ML-KEM768 with X25519 for...

challenge_repo

🎲 熵挑战 🇬🇧 英文阅读 | 🇹🇷 Türkçe Oku 引言 我们开发了一款下一代随机数生成器，通过专有的神经网络架构 处理射频噪声 ，并经过SHA-3后处理。我们声称该源提供真正随机性 质量，与理想噪声源不可区分。 我们公开输出结果和验证报告，但不公开源代码 。挑战很简单：证明我们是错的。 数据 样本文件: data/randomsample.bin 17 MB 质量: 通过NIST STS SP 800-22 和 NIST SP 800-90B 验证。 熵: 0.999 比特/比特。 详细报告见 NISTREPORT.md。 🏆 挑战 我们向任何能成功“破解”此生成器的人提供赏金。...

CVE-2026-40257: Out-of-bounds Write

OP-TEE is a Trusted Execution Environment TEE designed as companion to a non-secure Linux kernel running on Arm; Cortex-A cores using the TrustZone technology. Starting in version 3.21.0 and prior to version 4.11.0, the ARM Crypto Extensions accelerated SHA-3 implementation has an off-by-one erro...

CLSA-2026-1776958842 python3: Fix of CVE-2022-37454

CVE-2022-37454: port xkcp fix for buffer overflows in the bundled sha-3 keccak sponge implementation...

EUVD-2017-8957

Malware in sbrugna...

EUVD-2023-1219

Malicious code in bioql PyPI...

BIT-PHP-MIN-2022-37454

The Keccak XKCP SHA-3 reference implementation before fdc6fef has an integer overflow and resultant buffer overflow that allows attackers to execute arbitrary code or eliminate expected cryptographic properties. This occurs in the sponge function interface...

ROS-20240731-06

A vulnerability in the SHA-3 cryptographic hash function of the eXtended Keccak Code Package XKCP software package is related to errors in block processing of input data and type conversion. Exploitation of the vulnerability could allow an attacker acting remotely to execute arbitrary code during...

ROS-20240731-05

A vulnerability in the SHA-3 cryptographic hash function of the eXtended Keccak Code Package XKCP software package is related to errors in block processing of input data and type conversion. Exploitation of the vulnerability could allow an attacker acting remotely to execute arbitrary code during...

Fedora 37 : pypy3.8 (2023-943556a733)

The remote Fedora 37 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-943556a733 advisory. Update to 7.3.11. See https://doc.pypy.org/en/latest/release-v7.3.11.html Security fix for CVE-2022-37454, CVE-2022-45061. Tenable has extracted the...

Fedora 37 : pypy3.9 (2023-af5206f71d)

The remote Fedora 37 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-af5206f71d advisory. Update to 7.3.11. See https://doc.pypy.org/en/latest/release-v7.3.11.html Security fix for CVE-2022-37454, CVE-2022-45061, CVE-2022-42919. Tenable h...

BIT-PYTHON-2022-37454

The Keccak XKCP SHA-3 reference implementation before fdc6fef has an integer overflow and resultant buffer overflow that allows attackers to execute arbitrary code or eliminate expected cryptographic properties. This occurs in the sponge function interface...

BIT-PHP-2022-37454

The Keccak XKCP SHA-3 reference implementation before fdc6fef has an integer overflow and resultant buffer overflow that allows attackers to execute arbitrary code or eliminate expected cryptographic properties. This occurs in the sponge function interface...

USN-6525-1: pysha3 vulnerability

Nicky Mouha discovered that pysha incorrectly handled certain SHA-3 operations. An attacker could possibly use this issue to cause pysha3 to crash, resulting in a denial of service, or possibly execute arbitrary code...

USN-6524-1: PyPy vulnerability

Nicky Mouha discovered that PyPy incorrectly handled certain SHA-3 operations. An attacker could possibly use this issue to cause PyPy to crash, resulting in a denial of service, or possibly execute arbitrary code...

Amazon Linux 2 : php (ALASPHP8.1-2023-001)

The version of php installed on the remote host is prior to 8.1.12-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2PHP8.1-2023-001 advisory. In PHP versions prior to 7.4.33, 8.0.25 and 8.2.12, when using imageloadfont function in gd extension, it is possible to...

EulerOS Virtualization 3.0.6.0 : php (EulerOS-SA-2023-2243)

According to the versions of the php packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - The zendstringextend function in Zend/zendstring.h in PHP through 7.1.5 does not prevent changes to string objects that result in a...

Oracle Linux 8 : php:7.4 (ELSA-2023-2903)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2023-2903 advisory. - CVE-2015-2331: integer overflow when processing ZIP archives 1204676,1204677 - fixes for CVE-2012-1162 and CVE-2012-1163 - fix: due to an integer...

Huawei EulerOS: Security Advisory for python3 (EulerOS-SA-2023-1927)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...