50 matches found
CVE-2020-0601
CVE-2020-0601 CVE-2020-0601용 PoC - Windows CryptoAPICrypt32.dll PoC: https://github.com/ollypwn/CurveBall Kali에서: 1. PKCS12 파일 생성 openssl req -new -x509 -key spoofedca.key -out spoofedca.crt openssl ecparam -name secp384r1 -genkey -noout -out Microsoft.key openssl req -new -key Microsoft.key -out...
chainoffools
CryptoAPI CVE-2020-0601: Windows CryptoAPI 스푸핑 취약점 악용. 자세한 내용은 블로그 게시물을 참조하세요. 설치 요구 사항 pip install -U -r requirements.txt 인증서 생성은 OpenSSL 버전 1.0.2u까지 지원됩니다. CA 인증서 우리는 USERTrust ECC Certification Authority를 사용했지만 P-384 곡선에서 작동하는 모든 루트 인증서를 사용할 수 있습니다. 루트 인증서의 공개 키와 일치하는 개인 키를 생성하기 위해 gen-key.py...
CVE-2026-55144
Missing cryptographic step in Windows CryptoAPI allows an authorized attacker to perform tampering locally...
CVE-2026-55144
Missing cryptographic step in Windows CryptoAPI allows an authorized attacker to perform tampering locally...
Windows Cryptography API: Next Generation (CNG) Tampering Vulnerability
Missing cryptographic step in Windows CryptoAPI allows an authorized attacker to perform tampering locally...
CVE-2026-55144: Missing Cryptographic Step
Missing cryptographic step in Windows CryptoAPI allows an authorized attacker to perform tampering locally...
PT-2026-58256
Name of the Vulnerable Software and Affected Versions Windows CryptoAPI affected versions not specified Description A missing cryptographic step in the Windows CryptoAPI allows an authorized attacker to perform local tampering, which can affect the system. Recommendations At the moment, there is ...
EUVD-2023-39342
Malicious code in bioql PyPI...
EUVD-2023-28924
Malicious code in bioql PyPI...
EUVD-2021-7146
Malicious code in bioql PyPI...
EUVD-2023-28925
Malicious code in bioql PyPI...
BIT-GOLANG-2020-0601
A spoofing vulnerability exists in the way Windows CryptoAPI Crypt32.dll validates Elliptic Curve Cryptography ECC certificates.An attacker could exploit the vulnerability by using a spoofed code-signing certificate to sign a malicious executable, making it appear the file was from a trusted,...
CVE-2023-35339
Windows CryptoAPI Denial of Service Vulnerability...
CVE-2023-35339: Uncontrolled Resource Consumption
Windows CryptoAPI Denial of Service Vulnerability...
PT-2023-3852 · Microsoft · Windows Cryptoapi +1
Name of the Vulnerable Software and Affected Versions: Windows CryptoAPI affected versions not specified Description: The issue is related to incorrect clearing or release of resources in the Windows CryptoAPI, which can be exploited by a remote attacker to cause a denial of service...
Microsoft Windows CryptoAPI 安全漏洞
Microsoft Windows CryptoAPI is a cryptographic compiler added to the Windows operating system by Microsoft. CryptoAPI supports synchronous and asynchronous key encryption and the management of digital certificates in the operating system as the basis for data encryption and decryption functions. ...
CVE-2023-24937
Windows CryptoAPI Denial of Service Vulnerability...
CVE-2023-24937
Windows CryptoAPI Denial of Service Vulnerability...
