CVE-2026-59276

Several components in Spring Security compare security-sensitive values using standard string equality String.equals rather than a constant-time comparison. Because String.equals returns as soon as it finds a differing character, the time taken to reject an incorrect value is proportional to the...

ssh-enum

ssh-enum Statistical Validation Study of CVE-2016-6210 A reproducible re-investigation of OpenSSH username enumeration using statistical analysis. This project re-investigates CVE-2016-6210 , a documented OpenSSH timing side-channel, to determine whether it remains observable on a modern Ubuntu...

spectre-attack

Пример атаки Spectre Пример использования раскрытого эксплойта «Spectre» от 2 января 2018 года CVE-2017-5753 и CVE-2017-5715 Spectre нарушает изоляцию между различными приложениями. Он позволяет атакующему обманом заставить безошибочные программы, следующие лучшим практикам, раскрыть свои секреты...

vhf-morse-transmitter-monitor

📡 جهاز إرسال VHF من شاشة العرض مولّد مورس عبر القنوات الجانبية TEMPEST / EMI المؤلف: TA1EEI Efe Işık الإصدار: 1.2 الترخيص: MIT مفتوح المصدر / تعليمي وتجريبي 📰 الظهور الإعلامي والتغطية الصحفية Hackaday - Get Your Monitor Transmitting VHF With A Browser Tool RTL-SDR.com - An HTML Browser Page That...

CVE-2026-84308

phpseclib is a PHP secure communications library. Prior to 3.0.57 and 4.0.1, pure-PHP X25519 scalar multiplication in phpseclib/Math/PrimeField/Integer.php performs data-dependent conditional modular reductions in add and subtract. During the Montgomery ladder in...

DEBIAN-CVE-2026-84308

phpseclib is a PHP secure communications library. Prior to 3.0.57 and 4.0.1, pure-PHP X25519 scalar multiplication in phpseclib/Math/PrimeField/Integer.php performs data-dependent conditional modular reductions in add and subtract. During the Montgomery ladder in...

spectre-attack-demo

Spectre Attack Example Example of using revealed "Spectre" exploit from 2 Jan 2018 CVE-2017-5753 and CVE-2017-5715 Spectre breaks the isolation between different applications. It allows an attacker to trick error-free programs, which follow best practices, into leaking their secrets. In fact, the...

CVE-2026-84308

phpseclib is a PHP secure communications library. Prior to 3.0.57 and 4.0.1, pure-PHP X25519 scalar multiplication in phpseclib/Math/PrimeField/Integer.php performs data-dependent conditional modular reductions in add and subtract. During the Montgomery ladder in...

CVE-2026-84308 phpseclib — non-constant-time X25519 scalar multiplication permits full private-key recovery

phpseclib is a PHP secure communications library. Prior to 3.0.57 and 4.0.1, pure-PHP X25519 scalar multiplication in phpseclib/Math/PrimeField/Integer.php performs data-dependent conditional modular reductions in add and subtract. During the Montgomery ladder in...

CVE-2026-84308

phpseclib , a PHP secure communications library, has a non-constant-time X25519 scalar multiplication flaw in versions prior to 3.0.57 and 4.0.1 . The root cause is data-dependent conditional modular reductions in the pure-PHP implementation (Math/PrimeField/Integer.php), which leak per-step timi...

CVE-2026-84308 phpseclib — non-constant-time X25519 scalar multiplication permits full private-key recovery

phpseclib is a PHP secure communications library. Prior to 3.0.57 and 4.0.1, pure-PHP X25519 scalar multiplication in phpseclib/Math/PrimeField/Integer.php performs data-dependent conditional modular reductions in add and subtract. During the Montgomery ladder in...

http-react2shell

سكربت كشف React2Shell لـ Nmap NSE كشف لـ CVE-2025-55182 / CVE-2025-66478 – مكونات خادم React / Next.js يحتوي هذا المستودع على سكربت لمحرك سكربتات Nmap NSE مكتوب بلغة Lua، مصمم لاكتشاف الثغرة الحرجة المعروفة باسم React2Shell بشكل آمن، والتي تؤثر على تطبيقات مكونات خادم React RSC وإجراءات خادم Reac...

CVE-2018-3639

CVE-2018-3639 Speculative Store Bypass CVE-2018-3639 proof of concept for Linux Download root@kitploit: git clone [email protected]:mmxsrup/CVE-2018-3639.git Build root@kitploit: cd CVE-2018-3639 make Run root@kitploit: ./specter Output root@kitploit: $ ./spectre idx: 0, highest:P,...

Security update for libapr-util1

This update for libapr-util1 fixes the following issues: CVE-2025-49506: leaking content via side channel timing attack bsc1274237. CVE-2026-32327: XML stack recursion crash bsc1274235. CVE-2026-34191: SQL Injection via aprdbdoracle bsc1274850. CVE-2026-34502: heap buffer overflow in APR memcache...

Alibaba Cloud Linux 3 : 0274: pam (ALINUX3-SA-2026:0274)

The remote Alibaba Cloud Linux 3 host has packages installed that are affected by a vulnerability as referenced in the ALINUX3-SA-2026:0274 advisory. Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities: CVE-2026-54411: Linux-PAM through 1.7.2 contains an...

SPOILER

SPOILER: अनुमानित लोड खतरे Rowhammer और कैश हमलों को बढ़ावा देते हैं CVE-2019-0162 INTEL-SA-00238 https://www.usenix.org/system/files/sec19-islam.pdf root@kitploit: @inproceedings 236252, author = Saad Islam and Ahmad Moghimi and Ida Bruhns and Moritz Krebbel and Berk Gulmezoglu and Thomas...

CVE-2019-5489

CVE 2019-5489 This repository contains Page Cache Side Channel Attacks CVE-2019-5489 proof of concept for Linux. In order to evaluate page cache side channel, I have implemented covert channel between two processes. The sender process send confidential data to a receiver process via the page cach...

CVE-2026-4567-Post-Quantum-KEM-Timing-Side-Channel-Kyber-Decapsulation-

2. CVE-2026-4567 – قناة جانبية زمنية في KEM ما بعد الكم فك تغليف Kyber نظرة عامة تنفيذ هشّ لفك تغليف Kyber KEM يسرّب بتات المفتاح السري عبر فروق التوقيت في خطوة رفض النص المشفر، مما يتيح استعادة كاملة للمفتاح. الخطورة: حرجة اختراق المفتاح الخاص الخادم الهش C ونص الهجوم Python root@kitploit: //...

CVE-2026-2828-WebGPU-Cross-Origin-Pixel-Stealing-via-Timing

4. CVE-2026-2828 – سرقة البكسلات عبر الأصل باستخدام توقيت WebGPU نظرة عامة يستخدم موقع ويب خبيث توقيت تظليل الحوسبة WebGPU لقياس زمن عرض إطار iframe عبر الأصل، مما يتيح استرجاع قيم بكسلات محتوى حساس مثل التفاصيل المصرفية. الخطورة: عالية كشف معلومات العرض التوضيحي HTML/JS ملف واحد root@kitploit:...

CVE-2026-42527

Permissive Default ObjectInputFilter — DNS साइड-चैनल रिप्रोड्यूसर CVE-2026-42527 यह प्रोजेक्ट अपाचे कैमल में CVE-2026-42527 को प्रदर्शित करता है। डिफ़ॉल्ट ObjectInputFilter पैटर्न जो कई कैमल घटक डिफेंस-इन-डेप्थ डिसीरियलाइज़ेशन फ़िल्टरिंग के लिए शिप करते हैं — java.;javax.;org.apache.camel.;! — एक...