106 matches found
LiberationPlay-CVE-2025-24132-AirBourne-POC
LiberationPlay! CVE-2025-24132 AirBourne POC CVE-2025-24132 AirBourne のPOCです。現時点ではオーバーフローをトリガーし、クラッシュを引き起こすだけです。 私の車のヘッドユニットへのrootアクセスを試みるため、Oligo Security社が発見したAirplayエクスプロイトCVE-2025-24132（Airbourneと命名）について調査し、学んだすべてをまとめました。 https://www.oligo.security/blog/airborne...
SDK-SMS-Stack
SMS Stack Sms Stack は、GSMショートメッセージサービスにTCP/IPベースの特性を提供するフレームワークです。 このフレームワークは複数の環境で動作し、サービス内でのフルスタック統合を提供します。 メインレイヤーは、特定のストリームに対するSMSの順序と数を制御する技術と、AES + CTR暗号によるセキュリティレイヤーを特徴としています。 Sms Stack のスタック上に独自のプロトコルを簡単に実装し、デバイス間のSMSベースの通信に新しい機能を追加できます。 前提条件 sms-stack は複数の環境でダウンロードして使用でき、さまざまなシナリオに実装できます...
CVE-2026-74901
opensslencrypt versions before 1.4.0 contain an authentication bypass vulnerability in pqc.py where AES-GCM decryption failures trigger fallback to unauthenticated AES-CTR mode. Attackers can modify ciphertext in transit to bypass integrity verification and perform bit-flipping attacks without...
CVE-2026-74901 openssl_encrypt before 1.4.0 Authentication Bypass via AES-CTR Fallback
opensslencrypt versions before 1.4.0 contain an authentication bypass vulnerability in pqc.py where AES-GCM decryption failures trigger fallback to unauthenticated AES-CTR mode. Attackers can modify ciphertext in transit to bypass integrity verification and perform bit-flipping attacks without...
CVE-2026-74901 openssl_encrypt before 1.4.0 Authentication Bypass via AES-CTR Fallback
opensslencrypt versions before 1.4.0 contain an authentication bypass vulnerability in pqc.py where AES-GCM decryption failures trigger fallback to unauthenticated AES-CTR mode. Attackers can modify ciphertext in transit to bypass integrity verification and perform bit-flipping attacks without...
CVE-2026-74901
The Python package openssl_encrypt (versions before 1.4.0) has a flaw in pqc.py : when AES-GCM decryption fails, the code silently falls back to unauthenticated AES-CTR mode. This removes integrity verification, allowing an attacker with network access to modify ciphertext in transit via bit-flip...
EUVD-2026-60118
opensslencrypt versions before 1.4.0 contain an authentication bypass vulnerability in pqc.py where AES-GCM decryption failures trigger fallback to unauthenticated AES-CTR mode. Attackers can modify ciphertext in transit to bypass integrity verification and perform bit-flipping attacks without...
PT-2026-76635
openssl encrypt versions before 1.4.0 contain an authentication bypass vulnerability in pqc.py where AES-GCM decryption failures trigger fallback to unauthenticated AES-CTR mode. Attackers can modify ciphertext in transit to bypass integrity verification and perform bit-flipping attacks without...
Dissecting the JWR phishing framework
Cisco Talos recently identified an undocumented phishing framework, internally branded "JWR" by its developer, built to convincingly impersonate checkout and login pages across major payment and shopping platforms. The client engine of the JWR phishing framework is a real-time, operator-driven...
Improper Validation of Integrity Check Value
Overview org.bouncycastle:bcprov-jdk15on is a Java implementation of cryptographic algorithms. Affected versions of this package are vulnerable to Improper Validation of Integrity Check Value that leads to information exposure in the processPacket method of CCMBlockCipher, with equivalent paths i...
Improper Validation of Integrity Check Value
Overview org.bouncycastle:bcprov-jdk12 is a Java implementation of cryptographic algorithms. Affected versions of this package are vulnerable to Improper Validation of Integrity Check Value that leads to information exposure in the processPacket method of CCMBlockCipher, with equivalent paths in...
UBUNTU-CVE-2026-56369
ImageMagick before 7.1.2-22 contains an information disclosure vulnerability in the PasskeyEncipherImage method due to AES-CTR nonce reuse. Attackers can exploit nonce reuse in the cipher implementation to recover plaintext information from encrypted images...
CVE-2026-56369
Removed by vendor...
Insecure Randomness
Overview Magick.NET-Q16-HDRI-OpenMP-arm64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this...
CVE-2026-25998
strongMan is a management interface for strongSwan, an OpenSource IPsec-based VPN. When storing credentials in the database private keys, EAP secrets, strongMan encrypts the corresponding database fields. So far it used AES in CTR mode with a global database key. Together with an initialization...
Improper Verification of Cryptographic Signature
Overview Affected versions of this package are vulnerable to Improper Verification of Cryptographic Signature when the spark.network.crypto.enabled is true and the cipher is not explicitly configured, resulting in the use of AES in CTR mode without authentication. An attacker can compromise the...
CVE-2025-55039 Apache Spark, Apache Spark: RPC encryption defaults to unauthenticated AES-CTR mode, enabling man-in-the-middle ciphertext modification attacks
This issue affects Apache Spark versions before 3.4.4, 3.5.2 and 4.0.0. Apache Spark versions before 4.0.0, 3.5.2 and 3.4.4 use an insecure default network encryption cipher for RPC communication between nodes. When spark.network.crypto.enabled is set to true it is set to false by default, but...
EUVD-2020-12576
Malware in sbrugna...