SafeGuard

root@kitploit: ./safeguard --version 1.0 Safeguard is a fast, lightweight, cross-platform command-line file encryption tool written in Go. Security Notice This project is a learning-oriented file encryption tool. While it uses standard cryptographic primitives from Go’s standard library e.g...

paranoid_crypto

مشروع Paranoid نظرة عامة يتحقق مشروع Paranoid من نقاط الضعف المعروفة في القطع الأثرية التشفيرية مثل المفاتيح العامة والتوقيعات الرقمية والأرقام العشوائية الزائفة بشكل عام. تحتوي هذه المكتبة على تطبيقات وتحسينات لأعمال قائمة منشورة في الأدبيات. أظهرت الأعمال القائمة أن توليد هذه القطع الأثرية كان...

CVE-2019-6693

CVE-2019-6693 فك تشفير أسرار تكوين FortiGate التنبيه الأصلي تنبيه البائع بالنسبة لأجهزة FortiGate الافتراضية/الأجهزة أسفل الإصدارات 6.2.0، 6.0.0 إلى 6.0.6، 5.6.10 يتم تخزين أسرار التكوين مشفرة بمفتاح فريد. بالنسبة للإصدارات الأعلى، تسمح المعلمة غير الافتراضية private-data-encryption للمستخدم...

debianopenssl

debianopenssl مفاتيح خاصة معرّضة لخلل OpenSSL في دبيان CVE-2008-0166 في عام 2008، أدى خلل في حزمة OpenSSL الخاصة بدبيان وأوبونتو إلى مفاتيح خاصة يمكن توقعها. على الرغم من أن عدد المفاتيح محدود، إلا أن إنشاء قائمة صحيحة بجميع المفاتيح المعرّضة للاحتمال يتطلب بعض الاعتبارات. يحتوي هذا المستودع على...

CVE-2020-12712

CVE-2020-12712: SOS JobScheduler فك تشفير كلمة المرور المخزنة يتيح لك البرنامج النصي في هذا المستودع فك تشفير كلمة المرور أو كلمات المرور المخزنة في ملف تكوين SFTP لمثيل JobScheduler. الوصف SOS JobScheduler هي أداة لإدارة الأنظمة عن بُعد تتيح للمستخدمين استدعاء البرامج النصية للصيانة عبر واجهة وي...

CVE-2026-19806

The Support Genix – Helpdesk, AI Chatbot, Knowledge Base & Customer Support Ticketing System plugin for WordPress is vulnerable to Authentication Bypass leading to Administrator Account Takeover in all versions up to, and including, 1.4.52 via the guestticketlogin function and its p parameter. Th...

CVE-2026-19806 Support Genix <= 1.4.52 - Authenticated (Subscriber+) Authentication Bypass to Administrator Account Takeover via 'p' Parameter Forged Guest Token

The Support Genix – Helpdesk, AI Chatbot, Knowledge Base & Customer Support Ticketing System plugin for WordPress is vulnerable to Authentication Bypass leading to Administrator Account Takeover in all versions up to, and including, 1.4.52 via the guestticketlogin function and its p parameter. Th...

PT-2026-84106

Name of the Vulnerable Software and Affected Versions Support Genix – Helpdesk, AI Chatbot, Knowledge Base & Customer Support Ticketing System versions prior to 1.4.53 Description An authentication bypass exists that allows for administrator account takeover. The issue resides in the guest ticket...

CVE-2026-81704

opensslencrypt versions before 1.4.9 contain a weak key derivation vulnerability in the D-Bus CryptoService.EncryptFile handler that uses unstretched SHA-256 instead of Argon2id. Attackers can perform offline password guessing against encrypted files roughly six to seven orders of magnitude faste...

CVE-2026-81689

opensslencrypt versions before 1.4.9 derive the remote-pepper wrap key using unsalted HKDF-SHA256 or bare SHA-256 of the password, allowing identical keys across all users and files. Attackers with access to wrapped pepper blobs can precompute a single dictionary table and perform fleet-wide...

EUVD-2026-67060

opensslencrypt versions before 1.4.9 contain a weak key derivation vulnerability in the D-Bus CryptoService.EncryptFile handler that uses unstretched SHA-256 instead of Argon2id. Attackers can perform offline password guessing against encrypted files roughly six to seven orders of magnitude faste...

CVE-2026-81704 openssl_encrypt before 1.4.9 Weak Key Derivation via D-Bus

opensslencrypt versions before 1.4.9 contain a weak key derivation vulnerability in the D-Bus CryptoService.EncryptFile handler that uses unstretched SHA-256 instead of Argon2id. Attackers can perform offline password guessing against encrypted files roughly six to seven orders of magnitude faste...

CVE-2026-81704

openssl_encrypt versions before 1.4.9 contain a weak key derivation vulnerability in the D-Bus CryptoService.EncryptFile handler. The affected code uses unstretched SHA-256 instead of Argon2id , omitting key stretching and hash rounds. This allows attackers to perform offline password guessing ag...

CVE-2026-81704 openssl_encrypt before 1.4.9 Weak Key Derivation via D-Bus

opensslencrypt versions before 1.4.9 contain a weak key derivation vulnerability in the D-Bus CryptoService.EncryptFile handler that uses unstretched SHA-256 instead of Argon2id. Attackers can perform offline password guessing against encrypted files roughly six to seven orders of magnitude faste...

CVE-2026-81689

openssl_encrypt versions before 1.4.9 derive the remote-pepper wrap key using unsalted HKDF-SHA256 or bare SHA-256 of the password, resulting in identical keys across all users and files. An attacker with access to wrapped pepper blobs can precompute a single dictionary table and perform fleet-wi...

CVE-2026-81689 openssl_encrypt before 1.4.9 Weak Pepper Key Derivation

opensslencrypt versions before 1.4.9 derive the remote-pepper wrap key using unsalted HKDF-SHA256 or bare SHA-256 of the password, allowing identical keys across all users and files. Attackers with access to wrapped pepper blobs can precompute a single dictionary table and perform fleet-wide...

CVE-2026-81689 openssl_encrypt before 1.4.9 Weak Pepper Key Derivation

opensslencrypt versions before 1.4.9 derive the remote-pepper wrap key using unsalted HKDF-SHA256 or bare SHA-256 of the password, allowing identical keys across all users and files. Attackers with access to wrapped pepper blobs can precompute a single dictionary table and perform fleet-wide...

PT-2026-82590

Name of the Vulnerable Software and Affected Versions openssl encrypt versions prior to 1.4.9 Description The software derives the remote-pepper wrap key using unsalted HKDF-SHA256 or bare SHA-256 of the password. This results in identical keys being used across all users and files. An attacker...

PT-2026-82605

Name of the Vulnerable Software and Affected Versions openssl encrypt versions prior to 1.4.9 Description The D-Bus CryptoService.EncryptFile handler uses unstretched SHA-256 instead of Argon2id for key derivation. This allows attackers to perform offline password guessing against encrypted files...

CVE-2026-53762

VeraCrypt provides disk encryption with strong security based on TrueCrypt. Prior to 1.26.29, non-default builds created with WOLFCRYPT=1 and WOLFCRYPTBACKEND route SHA-256 and SHA-512 volume-header key derivation through derivekeysha256 and derivekeysha512 in src/Crypto/wolfCrypt.c, where the...