ssh-enum

ssh-enum CVE-2016-6210에 대한 통계적 검증 연구 널리 알려진 OpenSSH 사용자 이름 열거 취약점을 통계적 분석을 사용하여 재현 가능하게 재조사합니다. 이 프로젝트는 문서화된 OpenSSH 타이밍 사이드 채널인 CVE-2016-6210 을 재조사하여, 기본 PAM 구성을 사용하는 최신 Ubuntu Server에서 여전히 관찰 가능한지 확인합니다. 게시된 동작이 여전히 유효하다고 가정하지 않고, 이 프로젝트는 Welch의 t-검정 과 Cohen의 d 를 사용하여 수동 프로빙, Hydra, Metasploit을...

CVE-2023-1206-CVE-2025-40040-CVE-2024-49882

複合カバートチャネル：CVE-2023-1206 + CVE-2024-49882 概要 このプロジェクトは、2つのLinuxカーネル脆弱性を利用したカバート通信チャネルを実証します： コンポーネント| CVE| 目的 ---|---|--- 同期チャネル| CVE-2023-1206| IPv6ハッシュ衝突タイミングによるクロック同期 データチャネル| CVE-2024-49882| hugepageリークによるコンテナ間データ転送 root@kitploit:...

[SECURITY] [DLA 4791-1] memcached security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-4791-1 [email protected] https://www.debian.org/lts/security/ Abhijith PA September 23, 2026 https://wiki.debian.org/LTS -...

Debian dla-4791 : memcached - security update

The remote Debian 12 host has a package installed that is affected by multiple vulnerabilities as referenced in the dla-4791 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-4791-1 [email protected]...

EUVD-2026-84532

Traefik is an open source HTTP reverse proxy and load balancer. From 3.6.11 until 3.7.13, checkPassword in pkg/middlewares/auth/basicauth.go constructs the BasicAuth singleflight key from the submitted password and stored secret. Concurrent requests for absent usernames therefore coalesce on one...

Sync-in Server has Username/Login Enumeration via Timing Side-Channel on POST /api/auth/login (incomplete fix of the prior timing-attack advisory)

Summary validateUser in backend/src/authentication/providers/mysql/auth-provider-mysql.service.ts returns immediately when the supplied login/email does not match any account, without ever calling comparePassword: async validateUserloginOrEmail: string, password: string, ip?: string, scope?:...

CVE-2026-4567-Post-Quantum-KEM-Timing-Side-Channel-Kyber-Decapsulation-

2. CVE-2026-4567 – ポスト量子KEMタイミングサイドチャネル（Kyberデカプセル化） 概要 Kyber KEMデカプセル化の脆弱な実装は、暗号文拒否ステップにおけるタイミング差を通じて秘密鍵のビットを漏洩させ、完全な鍵回復を可能にします。 深刻度: 重大（秘密鍵の侵害） 脆弱なサーバー（C言語）& 攻撃スクリプト（Python） root@kitploit: // kybervulndecaps.c - Simulated vulnerable Kyber decapsulation include include include include // Secret...

AVX-Side-Channel

AVXベースのタイミングサイドチャネル — ASLR検出 作者: Byte Reaper 説明 AVXメモリロード + RDTSCP タイミングとオプションのSIGSEGV検出を用いてASLR検出を示すスクリプト。 要件 : Linux x8664 -mavx2 対応のGCC AVX2およびRDTSCPをサポートするCPU ビルド : root@kitploit: gcc -mavx2 -O2 file.c -o AVX-Side-Channel ./AVX-Side-Channel クイック出力（例） 高速アクセス → ASLR not detected 低速アクセスまたはSIGSEG...

CVE-2026-58272 Sync-in Server has Username/Login Enumeration via Timing Side-Channel on POST /api/auth/login (incomplete fix of the prior timing-attack advisory)

Sync-in Server is an open-source platform for file storage, sharing, collaboration, and syncing. Versions prior to 2.4.1 contain an observable timing discrepancy in the login endpoint because authentication attempts for nonexistent accounts return without performing the bcrypt comparison used for...

CVE-2026-58272 Sync-in Server has Username/Login Enumeration via Timing Side-Channel on POST /api/auth/login (incomplete fix of the prior timing-attack advisory)

Sync-in Server is an open-source platform for file storage, sharing, collaboration, and syncing. Versions prior to 2.4.1 contain an observable timing discrepancy in the login endpoint because authentication attempts for nonexistent accounts return without performing the bcrypt comparison used for...

CVE-2026-58272

Sync-in Server (open-source file storage and collaboration platform) prior to 2.4.1 exposes a timing side-channel on the POST /api/auth/login endpoint. The root cause is that authentication attempts for nonexistent accounts skip the bcrypt comparison performed for existing accounts, producing a m...

K000163349: Gnutls vulnerability CVE-2026-5419

Security Advisory Description A flaw was found in gnutls. The PKCS7 padding check, performed during decryption, was not constant-time. This timing side-channel could allow a remote attacker to potentially leak sensitive information about the padding bytes through observable timing differences. Th...

CVE-2026-8794

CVE-2026-8794 — PaperCut NG 中通过认证时序侧信道进行的用户名枚举 字段| 详情 ---|--- CVE ID| CVE-2026-8794 产品| PaperCut NG 受影响版本| 25.0.11（Build 75758）及更早版本 CWE| CWE-208 — 可观察的时序差异 CVSS 分数| 3.7（低）— 单独使用时；与 CVE-2026-8793 链式利用时升级 研究人员| Vivien LEBAS（@Hazaz） 报告时间| 2026 年 5 月 状态| 已修复 — PaperCut NG 26.0.3 摘要 PaperCut NG...

EulerOS Virtualization 2.11.0 : shim (EulerOS-SA-2026-3560)

According to the versions of the shim package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : A timing based side channel exists in the OpenSSL RSA Decryption implementation which could be sufficient to recover a plaintext acros...

EulerOS Virtualization 2.11.1 : openssl (EulerOS-SA-2026-3448)

According to the versions of the openssl packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : Issue summary: Use of the low-level GF2^m elliptic curve APIs with untrusted explicit values for the field polynomial can lead to...

EulerOS Virtualization 2.11.1 : shim (EulerOS-SA-2026-3473)

According to the versions of the shim packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : A timing based side channel exists in the OpenSSL RSA Decryption implementation which could be sufficient to recover a plaintext acro...

CVE-2026-84308

A flaw was found in phpseclib, a PHP secure communications library. This vulnerability arises from non-constant-time X25519 scalar multiplication, where data-dependent conditional modular reductions create observable timing differences or variations in libgmp call counts. A local attacker, capabl...

Astra Linux – Vulnerability in mbedtls

A timing side channel in mbedtlsssldecryptbuf in library/sslmsg.c in Trusted Firmware Mbed TLS from version 2.23.0 allows an attacker to obtain secret key information. This issue affects the CBC mode, as it involves a calculated time difference based on the padding length...

Astra Linux – Vulnerability in OpenSSL

Issue summary: A timing side-channel that could potentially allow the recovery of the private key exists in the ECDSA signature computation. Impact summary: A timing side-channel in ECDSA signature computations could allow an attacker to recover the private key. However, measuring the timing woul...

Astra Linux – Vulnerability in Erlang

A vulnerability in the Observable Timing Discrepancy mechanism in Erlang/OTP’s SSH libraries modules sshauth and sshoptions allows unauthenticated remote users to enumerate usernames through timing side-channels during password authentication. When the SSH daemon is configured with the...