905 matches found
pivit
Pivit Pivit is a command line tool for managing x509 certificates stored on smart cards with PIV applet support Yubikey, and using those certificates to sign and verify data. It is fully compatible with how the git command line calls external programs to sign and verify commits and tags. Install...
dameflare
DameFlare Unauthenticated RCE via Smart Card Authentication Bypass in SolarWinds Dameware MRC CVE-2019-3980 | CVSS 9.8 Critical | TCP/6129 Original research and POC: Tenable, Inc. TRA-2019-43 Python 3 tool: David Boyd @Fir3d0g How It Works Dameware MRC exposes a remote control service DWRCS.exe o...
OpenSC.tokend
OpenSC.tokend The open source OS X smart card driver A tokend makes the keys and certificates on your smart card appear in Keychain Access.app and available to applications like Safari or Chrome. OpenSC.tokend is the open source tokend implementation from OpenSC, with support for many different...
OpenSC
OpenSC documentation Manual pages for the OpenSC command line tools as well as for the OpenSC configuration files are available online and typically distributed along with your installation. The OpenSC Wiki includes, among others, information for: Windows Quick Start macOS Quick Start Compiling a...
rdesktop
IMPORTANT: rdesktop is no longer maintained Please, beware that this project is no longer maintained and hadn't received a patch in many years. There are reported security vulnerabilities, yet those haven't been reviewed. Use with caution and use it at your own risk. rdesktop - A Remote Desktop...
secretive
Secretive Secretive is an app for protecting and managing SSH keys with the Secure Enclave. Why? Safer Storage The most common setup for SSH keys is just keeping them on disk, guarded by proper permissions. This is fine in most cases, but it's not super hard for malicious users or malware to copy...
PIVert
PIVert - PIV smart card emulator Introduction PIVert is a NIST SP 800-73 PIV smart card emulator. You can supply PIVert with a PFX file containing a certificate and corresponding private key and the tool will emulate the card to Windows as a genuine PIV card. The card can then be used for...
CVE_2022_3141
CVE-2022-3141: SQL Injection in ACS EDU 3rd Generation This repository contains a detailed security analysis and report for the vulnerability identified as CVE-2022-3141, affecting the ACS EDU 3rd Generation smart-card system. Vulnerability Overview CVE ID : CVE-2022-3141 Product : ACS EDU 3rd...
OpenSC
OpenSC documentation Wiki is available online Please take a look at the documentation before trying to use OpenSC. Build and test status of specific cards: Cards| Status ---|--- CAC| Coolkey|...
Improper FreeRDP exception handling vulnerability
Versions FreeRDP from 3.0.0 up to 3.32.0 contain an improper exception handling vulnerability. This vulnerability stems from a null pointer dereference in the smart card simulation backend; it fails to properly handle empty reader names in SCardGetStatusChange requests. A malicious RDP server can...
Astra Linux - vulnerability in opensc
A vulnerability was found in OpenSC, OpenSC tools, the PKCS11 module, minidriver, and CTK. An attacker could use a specially crafted USB device or smart card, which would send a system a response APDU that was specifically crafted. The following issues arose due to insufficient control over the...
Astra Linux – Vulnerability in opensc
A stack overflow vulnerability exists in the OpenSC smart card middleware before version 0.23, due to improper responses to APDUs...
Astra Linux – Vulnerability in opensc
The TCOS smart card software driver in OpenSC before version 0.21.0-rc1 has a stack-based buffer overflow in the tcosdecipher function...
CVE-2026-83584
Use after free in Windows Smart Card allows an authorized attacker to elevate privileges locally...
CVE-2026-83579
Heap-based buffer overflow in Windows Smart Card allows an authorized attacker to elevate privileges locally...
CVE-2026-83579
A heap-based buffer overflow exists in the Windows Smart Card component. This vulnerability allows an authorized attacker to achieve local privilege escalation . No specific software versions, root causes, or exploit details are provided in the documents, but an official fix is indicated by the r...
EUVD-2026-99922
Heap-based buffer overflow in Windows Smart Card allows an authorized attacker to elevate privileges locally...
EUVD-2026-99306
Use after free in Windows Smart Card allows an authorized attacker to elevate privileges locally...
CVE-2026-83584
A Use after free vulnerability exists in Windows Smart Card , which allows an authorized attacker to achieve local privilege escalation . The vulnerability is categorized under CWE-416 . No specific affected versions, root causes, or exploit details are provided in the documentation. Remediation ...
