MrRAT

MrRAT This is a cross-platform Python 2.x Remote Access Trojan RAT, MrRAT was created to maintain a clean design full-featured Python RAT. Currently a work in progress and still being actively hacked on. Disclaimer: This RAT is for research purposes only, and should only be used on authorized...

CVE-2025-15467

CVE-2025-15467: OpenSSL CMS AuthEnvelopedData Stack Buffer Overflow Overview CVE-2025-15467 is a critical stack buffer overflow vulnerability in OpenSSL's CMS Cryptographic Message Syntax parsing code. The vulnerability exists in the evpciphergetasn1aeadparams function when processing AES-GCM...

Fragnesia-go

fragnesia-go One SA. One byte at a time. No race. Go port of fragnesia CVE-2026-46300. Member of the Dirty Frag vulnerability class - separate bug, same surface, own patch. How it works tl;dr The bug is in the Linux XFRM ESP-in-TCP subsystem. When TCPULP espintcp is installed on a socket after da...

gohide

gohide Tunnel port to port traffic via an obfuscated channel with AES-GCM encryption. Obfuscation Modes Session Cookie HTTP GET http-client Set-Cookie Session Cookie HTTP/2 200 OK http-server WebSocket Handshake "Sec-WebSocket-Key" websocket-client WebSocket Handshake "Sec-WebSocket-Accept"...

NetSpy

NetSpyC2 NetSpyC2 is a Python-based Command & Control C2 server created for educational purposes, security research, and controlled laboratory environments. The project demonstrates how encrypted client-server communication, session management, and secure file transfer can be implemented at the...

openmeetings-remember-me-password

abraxaslabs.tech · github.com/abraxas · @abraxasnull · [email protected] · openmeetings-remember-me-password openmeetings-remember-me-password Class: ATO Reach: Remote Apache OpenMeetings 9.1.0. CVE-2026-33266 closed the hardcoded remember-me key per-instance AES-GCM. Cookie LoggedIn still...

GateX

GateX TUI that re-keys the "Fortinet Hunter 2026" Nuitka password gate. Part of a capture-the-flag challenge from @YoSoth0 Write-up: Hunting the Fortinet Hunter 0-day The ELF never runs on the host. GateX statically unpacks the onefile payload, XOR-unmasks the scrambled Argon2id hash and AES-GCM...

CVE-2026-65625

The pure-Erlang AES-GCM fallback in josejwaaes derives the number of verified authentication tag bits from the attacker-supplied tag itself. In the aesgcm, Bits clause of blockdecrypt/4, the incoming tag is guarded only by isbinary/1, with no check on its length. Verification in gcmblockdecrypt/6...

CryptHook

CryptHook CryptHook is a modular implementation for securing existing applications with symmetrical block cipher encryption. It works by hooking the base system calls for network communication send/sendto and recv/recvfrom. Crypthook will work with any existing application that relies on these...

CVE-2026-11110-AES-GCM-Nonce-Reuse-Leading-to-Key-Recovery

CVE-2026-11110 – AES-GCM Nonce Reuse Leading to Key Recovery Program Code Python aesgcmnoncereusesim.py - Simulated encryption oracle with fixed nonce from Crypto.Cipher import AES import os key = os.urandom16 nonce = b'\x00' 12 ALWAYS SAME NONCE def encryptplaintext: cipher = AES.newkey,...

CVE-2026-49230-APISIX-jwe-decrypt-Auth-Bypass

CVE-2026-49230 — Apache APISIX jwe-decrypt Authentication Bypass Proof of concept for an authentication bypass in the Apache APISIX jwe-decrypt plugin. The plugin decrypts a JWE token and forwards its plaintext to the upstream, acting as an authentication gate — but it never validates the AES-GCM...

UBUNTU-CVE-2026-65625

The pure-Erlang AES-GCM fallback in josejwaaes derives the number of verified authentication tag bits from the attacker-supplied tag itself. In the aesgcm, Bits clause of blockdecrypt/4, the incoming tag is guarded only by isbinary/1, with no check on its length. Verification in gcmblockdecrypt/6...

CVE-2026-65625

The pure-Erlang AES-GCM fallback in josejwaaes derives the number of verified authentication tag bits from the attacker-supplied tag itself. In the aesgcm, Bits clause of blockdecrypt/4, the incoming tag is guarded only by isbinary/1, with no check on its length. Verification in gcmblockdecrypt/6...

EEF-CVE-2026-65625 Attacker-controlled AES-GCM authentication tag length allows tag forgery in jose

Summary The pure-Erlang AES-GCM fallback in josejwaaes derives the number of verified authentication tag bits from the attacker-supplied tag itself. In the aesgcm, Bits clause of blockdecrypt/4, the incoming tag is guarded only by isbinary/1, with no check on its length. Verification in...

CVE-2026-65625 Attacker-controlled AES-GCM authentication tag length allows tag forgery in jose

The pure-Erlang AES-GCM fallback in josejwaaes derives the number of verified authentication tag bits from the attacker-supplied tag itself. In the aesgcm, Bits clause of blockdecrypt/4, the incoming tag is guarded only by isbinary/1, with no check on its length. Verification in gcmblockdecrypt/6...

EUVD-2026-110303

The pure-Erlang AES-GCM fallback in josejwaaes derives the number of verified authentication tag bits from the attacker-supplied tag itself. In the aesgcm, Bits clause of blockdecrypt/4, the incoming tag is guarded only by isbinary/1, with no check on its length. Verification in gcmblockdecrypt/6...

CVE-2026-65625 Attacker-controlled AES-GCM authentication tag length allows tag forgery in jose

The pure-Erlang AES-GCM fallback in josejwaaes derives the number of verified authentication tag bits from the attacker-supplied tag itself. In the aesgcm, Bits clause of blockdecrypt/4, the incoming tag is guarded only by isbinary/1, with no check on its length. Verification in gcmblockdecrypt/6...

CVE-2026-65625

The jose library (versions 1.2.0 to before 1.11.13) contains a vulnerability in its pure-Erlang AES-GCM fallback. The jose_jwa_aes component fails to validate the length of the attacker-supplied authentication tag, leading to a tag forgery and integrity bypass . By truncating the tag to as little...

PT-2026-125110

Name of the Vulnerable Software and Affected Versions jose versions 1.2.0 through 1.11.12 Description The pure-Erlang AES-GCM fallback in jose jwa aes derives the number of verified authentication tag bits from the attacker-supplied tag. In the aes gcm, Bits clause of the block decrypt/4 function...

K000163881: Golang vulnerabilities CVE-2026-46597, CVE-2026-46600, and CVE-2026-56852

Security Advisory Description CVE-2026-46597 An incorrectly placed cast from bytes to int allowed for server-side panic in the AES-GCM packet decoder for well-crafted inputs. CVE-2026-46600 Parsing an invalid SVCB or HTTPS RR can panic when the size of a parameter value overflows the message...