memguard

MemGuard Software enclave for storage of sensitive information in memory. This package attempts to reduce the likelihood of sensitive data being exposed when in memory. It aims to support all major operating systems and is written in pure Go. Features Sensitive data is encrypted and authenticated...

pown

Pown Pown.js is a security testing and exploitation toolkit built on top of Node.js and NPM. Unlike traditional security tools, notably Metasploits, Pown.js considers frameworks to be an anti-pattern. Therefore, each feature in Pown is in fact a standalone NPM module allowing greater degree of...

CentOS Linux 6 [TuxCare] Security Update: libgcrypt / libgcrypt-devel (CENTOS6:CLSA-2026:1793168366)

The CentOS Linux 6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS6:CLSA-2026:1793168366 advisory. - Libgcrypt before 1.8.8 and 1.9.x before 1.9.3 mishandles ElGamal encryption because it lacks exponent blinding to address a side-channel attack...

chackd

chackd chackd is a daemon which randomize each second the kernel parameter tcpchallengeacklimit to prevent side channel attacks Introduction A shortly presented side-channel attack has given strong attention of the community 1 . For lots of servers or smartphone devices this attack considered...

CVE-2018-3639

CVE-2018-3639 Speculative Store Bypass CVE-2018-3639 proof of concept for Linux Download git clone [email protected]:mmxsrup/CVE-2018-3639.git Build cd CVE-2018-3639 make Run ./specter Output $ ./spectre idx: 0, highest:P, hitrate:21.340000 idx: 1, highest:A, hitrate:15.520000 idx: 2,...

CVE-2022-20866

RSA Key Checker for CVE-2022-20866 A vulnerability in the handling of RSA keys on devices running the Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software could allow an unauthenticated, remote attacker to retrieve the RSA private key. This vulnerability is due to a...

CLEANSTART-2026-RP91233 When converting coordinates from projective to affine, the modular inversion was not performed in constant time, resulting in a possible timing-based side channel attack

CVE-2020-12400 affects multiple packages. When converting coordinates from projective to affine, the modular inversion was not performed in constant time, resulting in a possible timing-based side channel attack. See references for individual vulnerability details...

CLEANSTART-2025-ZT05905 OpenSSL DSA signature algorithm has been shown to be vulnerable to a timing side channel attack

CVE-2018-0734 affects multiple packages. The OpenSSL DSA signature algorithm has been shown to be vulnerable to a timing side channel attack. See references for individual vulnerability details...

CLEANSTART-2025-ZF20781 OpenSSL ECDSA signature algorithm has been shown to be vulnerable to a timing side channel attack

CVE-2018-0735 affects multiple packages. The OpenSSL ECDSA signature algorithm has been shown to be vulnerable to a timing side channel attack. See references for individual vulnerability details...

CLEANSTART-2026-MY48509 cached side channel attack during handshakes using RSA encryption could allow for the decryption of encrypted content

Security vulnerability affects the nss package. A cached side channel attack during handshakes using RSA encryption could allow for the decryption of encrypted content...

CLEANSTART-2026-OA66833 NSS was susceptible to a timing side-channel attack when performing RSA decryption

Security vulnerability affects the nss package. NSS was susceptible to a timing side-channel attack when performing RSA decryption...

lvi-lfb-attack-poc

PoC for the LVI-LFB Control Flow Hijacking attack CVE-2020-0551 This repository holds the sources for the LVI-LFB Control Flow Hijacking attack PoC. Contents lvi-cfh-poc - hijack the control flow of another process via line-fill buffer spraying whitepaper Prerequisites 1. Visual Studio 2015 2. A...

CLEANSTART-2024-HY25374 When converting coordinates from projective to affine, the modular inversion was not performed in constant time, resulting in a possible timing-based side channel attack

Security vulnerability affects the firefox package. When converting coordinates from projective to affine, the modular inversion was not performed in constant time, resulting in a possible timing-based side channel attack...

libgcrypt: Fix of CVE-2021-33560

CVE-2014-3591: use ciphertext blinding for Elgamal decryption prerequisite for CVE-2021-33560 - CVE-2021-33560: add exponent blinding to Elgamal decryption to mitigate side-channel attack on mpipowm, and always use a full-size ephemeral k in Elgamal encryption...

kernel: tcp: restrict SO_ATTACH_FILTER to priv users

A flaw was found in the Linux kernel's handling of TCP sockets. An unprivileged application can exploit this vulnerability by attaching a Berkeley Packet Filter BPF using the SOATTACHFILTER option. This allows the application to conduct a side-channel attack, leading to the leakage of sensitive T...

kernel: tcp: restrict SO_ATTACH_FILTER to priv users

A flaw was found in the Linux kernel's handling of TCP sockets. An unprivileged application can exploit this vulnerability by attaching a Berkeley Packet Filter BPF using the SOATTACHFILTER option. This allows the application to conduct a side-channel attack, leading to the leakage of sensitive T...

kernel: tcp: restrict SO_ATTACH_FILTER to priv users

A flaw was found in the Linux kernel's handling of TCP sockets. An unprivileged application can exploit this vulnerability by attaching a Berkeley Packet Filter BPF using the SOATTACHFILTER option. This allows the application to conduct a side-channel attack, leading to the leakage of sensitive T...

SUSE CVE-2026-99076

In the Linux kernel, the following vulnerability has been resolved: ipv6: udp: Create exceptions before socket matching Currently, when ICMPv6 Packet Too Big and Redirect Message packets are locally delivered and quote a UDP packet, an exception is only created in the IPv6 exception cache if the...

SUSE CVE-2026-99077

In the Linux kernel, the following vulnerability has been resolved: ipv4: udp: Create exceptions before socket matching Currently, when ICMP Fragmentation Needed and Redirect Message packets are locally delivered and quote a UDP packet, a FIB nexthop exception FNHE is only created if the kernel c...

CVE-2026-99077

In the Linux kernel, the following vulnerability has been resolved: ipv4: udp: Create exceptions before socket matching Currently, when ICMP Fragmentation Needed and Redirect Message packets are locally delivered and quote a UDP packet, a FIB nexthop exception FNHE is only created if the kernel c...