Digital-Signature-Forgery-Attack

在本文中，我们将探讨数字签名伪造攻击（Digital Signature Forgery Attack）的密码学原理，其后果对比特币网络中的交易安全构成威胁，因为数字签名用于确认加密货币转账的所有权和授权。我们将根据现代研究和已识别的漏洞，分析此类攻击对比特币的影响示例。 数字签名伪造攻击（Digital Signature Forgery Attack）是指攻击者试图创建一个被比特币网络视为有效的虚假 ECDSA 数字签名。这种攻击允许在不知道所有者私钥的情况下授权交易，从而危及 BTC 币持有者加密钱包中资金的安全。 教程：https://youtu.be/qbu1mC1wyA...

Johnny-You-Are-Fired

Johnny-You-Are-Fired Artifacts for the USENIX publication | Full paper here Abstract OpenPGP and S/MIME are the two major standards to encrypt and digitally sign emails. Digital signatures are supposed to guarantee authenticity and integrity of messages. In this work we show practical forgery...

CVE-2022-21449

CVE-2022-21449 该仓库展示了在nodejs环境中为容易受到Java中"心理签名"攻击的应用程序生成base64签名的方法 😅 在运行之前，请确保从 https://github.com/davwwwx/elliptic 安装修改后的elliptic分支 root@kitploit: $ npm install 生成签名 root@kitploit: $ node index.js 从DataDog/security-labs-pocs获取一个易受攻击的示例应用程序 -...

CVE-2026-22001-SPHINCS-WOTS-Weak-Randomness-Forgeable-Signature

CVE-2026-22001 – Falsificación de Firmas por Aleatoriedad Débil en WOTS+ de SPHINCS+ Resumen Una implementación del esquema de firmas post-cuánticas SPHINCS+ utiliza un generador de números aleatorios defectuoso durante la generación de firmas WOTS+. El mismo nonce k se reutiliza en múltiples...

DEBIAN-CVE-2026-87733

An issue was discovered in the mirage-crypto-ec function before 2.2.0 for OCaml. The ECDSA functions P256,P384,P521.Dsa.pubofoctets accept 0x00, the encoding of the point at infinity, as a public key. With that public key, signatures can be forged without a private key...

CVE-2026-87733

An issue was discovered in the mirage-crypto-ec function before 2.2.0 for OCaml. The ECDSA functions P256,P384,P521.Dsa.pubofoctets accept 0x00, the encoding of the point at infinity, as a public key. With that public key, signatures can be forged without a private key...

CVE-2026-87733

An issue was discovered in the mirage-crypto-ec function before 2.2.0 for OCaml. The ECDSA functions P256,P384,P521.Dsa.pubofoctets accept 0x00, the encoding of the point at infinity, as a public key. With that public key, signatures can be forged without a private key...

CVE-2026-87733

mirage-crypto-ec for OCaml , versions before 2.2.0 , contains a flaw in the ECDSA functions {P256, P384, P521}.Dsa.pub_of_octets. The function accepts 0x00 —the encoding of the point at infinity —as a valid public key, allowing an attacker to forge ECDSA signatures without knowledge of the privat...

EUVD-2026-74619

An issue was discovered in the mirage-crypto-ec function before 2.2.0 for OCaml. The ECDSA functions P256,P384,P521.Dsa.pubofoctets accept 0x00, the encoding of the point at infinity, as a public key. With that public key, signatures can be forged without a private key...

Linux Distros Unpatched Vulnerability : CVE-2026-87733

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in the mirage-crypto-ec function before 2.2.0 for OCaml. The ECDSA functions P256,P384,P521.Dsa.pubofoctets accept 0x00, the encoding of...

CVE-2026-0265-check

CVE-2026-0265 漏洞评估工具 安全地判断 Palo Alto Networks PAN-OS GlobalProtect 门户是否易受 CVE-2026-0265 影响，无需认证任何会话或修改任何状态。 描述 CVE-2026-0265 是一个影响 PAN-OS 和 Panorama 的远程认证绕过漏洞，当认证配置文件使用云认证服务 CAS 时触发。libpanmpmp.so 中存在漏洞的 panauthverify 函数完全根据攻击者控制的 alg 头部分派 JSON Web Token 签名验证——一个伪造的 JWT，其 alg=HS256 且签名为...

CVE-2026-67276

RouterOS does not compare the complete RSA public key when matching an SSH authentication request to an authorized user key, checking the key type and modulus but omitting the exponent. Because signature verification uses the client-supplied key, an attacker knowing an authorized RSA modulus can...

CVE-2026-67278

MikroTik RouterOS accepts malformed RSA/PKCS#1 v1.5 signatures during X.509 validation. Because its trust store includes a root CA with e=3 , an attacker who controls or redirects an outbound TLS connection can use the root's public certificate—without its private key—to forge a trusted intermedi...

EUVD-2026-72024

RouterOS does not compare the complete RSA public key when matching an SSH authentication request to an authorized user key, checking the key type and modulus but omitting the exponent. Because signature verification uses the client-supplied key, an attacker knowing an authorized RSA modulus can...

CVE-2026-67276 SSH user impersonation possible in Mikrotik RouterOS

RouterOS does not compare the complete RSA public key when matching an SSH authentication request to an authorized user key, checking the key type and modulus but omitting the exponent. Because signature verification uses the client-supplied key, an attacker knowing an authorized RSA modulus can...

Linux Distros Unpatched Vulnerability : CVE-2026-85393

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - node-forge through 1.4.0 fails to validate element count in nested DigestAlgorithm sequences during RSA PKCS1 v1.5 signature verification. Attackers can embed...

UBUNTU-CVE-2026-85393

node-forge through 1.4.0 fails to validate element count in nested DigestAlgorithm sequences during RSA PKCS1 v1.5 signature verification. Attackers can embed garbage bytes inside the DigestAlgorithm sequence to forge valid signatures for arbitrary messages using low-exponent RSA keys. This is an...

CVE-2026-85393

A flaw was found in node-forge. This vulnerability allows a remote attacker to forge valid RSA PKCS1 v1.5 signatures for arbitrary messages. The flaw occurs because the software fails to properly validate the element count in nested DigestAlgorithm sequences during signature verification. By...

CVE-2026-85393

node-forge through 1.4.0 fails to validate element count in nested DigestAlgorithm sequences during RSA PKCS1 v1.5 signature verification. Attackers can embed garbage bytes inside the DigestAlgorithm sequence to forge valid signatures for arbitrary messages using low-exponent RSA keys. This is an...

AZL-99750 CVE-2026-85393 affecting package python-tensorboard 2.16.2-6

node-forge through 1.4.0 fails to validate element count in nested DigestAlgorithm sequences during RSA PKCS1 v1.5 signature verification. Attackers can embed garbage bytes inside the DigestAlgorithm sequence to forge valid signatures for arbitrary messages using low-exponent RSA keys. This is an...