crypto-attacks

Introduction Python implementations of cryptographic attacks and utilities. Requirements SageMath with Python 3.9 PyCryptodome You can check your SageMath Python version using the following command: $ sage -python --version Python 3.9.0 If your SageMath Python version is older than 3.9.0, some...

ROCA-attack-on-vulnerability-CVE-2017-15361

ROCA-attack-on-vulnerability-CVE-2017-15361 This repository contains the thesis developed for my bachelor's degree in Mathematical Engineering at Polytechnic of Turin. It's a script based on python and sage. The goal of the script is to generate an RSA key, evaluete if it's vulnerable by the ROCA...

@justice8096/sagemath-mcp-server: executes arbitrary code via the escapeShellString and sanitizeCode functions

An issue in @justice8096/sagemath-mcp-server 1.0.1 allows a remote attacker to execute arbitrary code via the escapeShellString and sanitizeCode functions...

GHSA-2VQ3-MPMF-9XGR @justice8096/sagemath-mcp-server: executes arbitrary code via the escapeShellString and sanitizeCode functions

An issue in @justice8096/sagemath-mcp-server 1.0.1 allows a remote attacker to execute arbitrary code via the escapeShellString and sanitizeCode functions...

CVE-2026-106763

An issue in @justice8096/sagemath-mcp-server 1.0.1 allows a remote attacker to execute arbitrary code via the escapeShellString and sanitizeCode functions...

CVE-2026-106763

An issue in @justice8096/sagemath-mcp-server 1.0.1 allows a remote attacker to achieve arbitrary code execution . The vulnerability originates within the escapeShellString and sanitizeCode functions. The documents do not provide specific details regarding remediation or evidence of in-the-wild ex...

CVE-2026-106763

An issue in @justice8096/sagemath-mcp-server 1.0.1 allows a remote attacker to execute arbitrary code via the escapeShellString and sanitizeCode functions...

EUVD-2026-109096

An issue in @justice8096/sagemath-mcp-server 1.0.1 allows a remote attacker to execute arbitrary code via the escapeShellString and sanitizeCode functions...

CVE-2026-106763

An issue in @justice8096/sagemath-mcp-server 1.0.1 allows a remote attacker to execute arbitrary code via the escapeShellString and sanitizeCode functions...

PT-2026-122137

An issue in @justice8096/sagemath-mcp-server 1.0.1 allows a remote attacker to execute arbitrary code via the escapeShellString and sanitizeCode functions...

CVE-2025-61514

An arbitrary file upload vulnerability in SageMath, Inc CoCalc before commit 0d2ff58 allows attackers to execute arbitrary code via uploading a crafted SVG file...

CVE-2025-61514

SageMath, Inc CoCalc (specifically the @cocalc/frontend and @cocalc/hub components) is vulnerable to an arbitrary file upload flaw in versions prior to commit 0d2ff58 . The root cause is inadequate validation of specially crafted SVG files , which allows an attacker to achieve arbitrary code exec...

PT-2025-42531

Name of the Vulnerable Software and Affected Versions SageMath CoCalc versions prior to commit 0d2ff58 Description An arbitrary file upload issue exists in SageMath CoCalc. Successful exploitation allows attackers to execute arbitrary code by uploading a specially crafted SVG file. Recommendation...

CVE-2025-61514

An arbitrary file upload vulnerability in SageMath, Inc CoCalc before commit 0d2ff58 allows attackers to execute arbitrary code via uploading a crafted SVG file...

CVE-2025-61514: Improper Neutralization of Special Elements used in a Command

An arbitrary file upload vulnerability in SageMath, Inc CoCalc before commit 0d2ff58 allows attackers to execute arbitrary code via uploading a crafted SVG file...

CVE-2025-61514

An arbitrary file upload vulnerability in SageMath, Inc CoCalc before commit 0d2ff58 allows attackers to execute arbitrary code via uploading a crafted SVG file...

EUVD-2023-33034

Malicious code in bioql PyPI...

CVE-2019-17526

An issue was discovered in SageMath Sage Cell Server through 2019-10-05. Python Code Injection can occur in the context of an internet facing web application. Malicious actors can execute arbitrary commands on the underlying operating system, as demonstrated by an import'os'.popen'whoami'.read...

CVE-2023-29465

SageMath FlintQS 1.0 relies on pathnames under TMPDIR typically world-writable, which for example allows a local user to overwrite files with the privileges of a different user who is running FlintQS...

CVE-2023-29465

SageMath FlintQS 1.0 relies on pathnames under TMPDIR typically world-writable, which for example allows a local user to overwrite files with the privileges of a different user who is running FlintQS...