3287 matches found
CVE-2026-81681
openssl_encrypt (pip package openssl-encrypt) versions ≤ 1.4.8 advertise a portable USB workspace as an "Encrypted USB Workspace" with AES-256-GCM encryption and write a marker declaring it encrypted, but the workspace directory is actually stored in cleartext — the derived encryption key is neve...
CVE-2026-81681 openssl_encrypt before 1.4.9 False Encryption via Cleartext Storage
opensslencrypt pip package openssl-encrypt versions = 1.4.8 advertise a portable USB workspace as an 'Encrypted USB Workspace' with AES-256-GCM encryption and write a marker declaring the workspace encrypted, but the workspace directory is actually stored in cleartext and the derived encryption k...
cryptovenom
CryptoVenom CryptoVenom: The Cryptography Swiss Army knife What is CryptoVenom? CryptoVenom is an OpenSource tool which contains a lot of cryptosystems and cryptoanalysis methods all in one, including classical algorithms, hash algorithms, encoding algorithms, logic gates, mathematical functions,...
HTB-Snapped-Writeup
HTB-Snapped-Writeup Writeup da máquina HTB Snapped — Linux de dificuldade Hard. CVE-2026-27944 divulgação não autenticada de backup no Nginx UI encadeada com CVE-2026-3888 condição de corrida no snapd para escalonamento local de privilégios para comprometimento total do sistema. HTB: Snapped —...
CVE-2025-56802
CVE-2025-56802 Schwachstelle bei der AES-CFB-Schlüsselerzeugung und -Verwaltung in der Reolink-Desktop-Anwendung 1. Überblick Name : Reolink-Desktop-Anwendung Version : 8.18.12 Anbieter : Reolink CWE : CWE-321: Verwendung eines hartcodierten kryptografischen Schlüssels, CWE-522: Unzureichend...
CVE-2025-56801
CVE-2025-56801 Schwachstelle bei der AES-CFB-IV-Erzeugung in der Reolink-Desktop-Anwendung 1. Überblick Name : Reolink-Desktop-Anwendung Version : 8.18.12 Anbieter : Reolink CWE : CWE-1204: Erzeugung eines schwachen Initialisierungsvektors IV, CWE-321: Verwendung eines fest verdrahteten...
meesho-android-improper-encryption-cve-2026-5682
🔐 Proof of Concept: App Android Meesho – Implementazione Crittografica Insicura AES-CBC senza Integrità + Derivazione Chiave Debole Autore: Soyam Arya alias honestcorrupt Data della Scoperta: Marzo 2026 App Interessata: App Android Meesho com.meesho.supply Stato: In Verifica Categoria: Crittograf...
CVE-2025-59287
CVE-2025-59287 WSUS RCE Exploit Automatisierter Exploit für die Schwachstelle zur nicht authentifizierten Remote-Codeausführung in Windows Server Update Services WSUS. Details zur Schwachstelle CVE-ID: CVE-2025-59287 CVSS-Score: 9.8 Kritisch Angriffsvektor: Netzwerk Authentifizierung: Keine...
NetSpy
NetSpyC2 NetSpyC2 एक Python-आधारित कमांड एंड कंट्रोल C2 सर्वर है जो शैक्षिक उद्देश्यों, सुरक्षा अनुसंधान और नियंत्रित प्रयोगशाला वातावरण के लिए बनाया गया है। यह प्रोजेक्ट दर्शाता है कि Python का उपयोग करके एप्लिकेशन प्रोटोकॉल स्तर पर एन्क्रिप्टेड क्लाइंट-सर्वर संचार, सत्र प्रबंधन और सुरक्षित फ़ाइ...
CVE-2026-27944
CVE-2026-27944 POC: Download de Backup Não Autenticado do Nginx UI + Acesso ao Painel Este repositório contém um Proof of Concept POC aprimorado para CVE-2026-27944 , uma vulnerabilidade crítica no Nginx UI. A vulnerabilidade permite que um atacante não autenticado baixe backups do sistema atravé...
CVE-2026-33032-nginx-ui-vuln-lab
CVE-2026-27944 + CVE-2026-33032 — nginx-ui Zero-Credential RCE Lab Haftungsausschluss: Dieses Repository dient ausschließlich Bildungs- und autorisierten Sicherheitsforschungszwecken. Alle hier demonstrierten Techniken sollten nur gegen Systeme eingesetzt werden, die Ihnen gehören oder für die Si...
CryptHook
CryptHook CryptHook é uma implementação modular para proteger aplicações existentes com criptografia simétrica de blocos. Ele funciona interceptando as chamadas de sistema base para comunicação de rede send/sendto e recv/recvfrom. O Crypthook funcionará com qualquer aplicação existente que depend...
Burp_AES_Plugin
Burpsuite-Plugin für AES-Crack 0x00 mvn install, um die Jar-Datei zu erhalten git clone https://github.com/jas502n/BurpAESPlugin/ cd /github/BurpAESPlugin/AESDecode vi src/main/java/burp/BurpExtender.java mvn install root@kitploit: INFO --- maven-install-plugin:2.4:install default-install @...
Stealth-Kid-RAT
Stealth Kid RAT Кодовое имя: Kiddo Версия: 0.01A Stealth Kid RAT — это инструмент удаленного администрирования с открытым исходным кодом, написанный на C. В настоящее время разрабатывается в ветке POC Concept. Разрабатываемые функции:- Поток TCP-сети поддержка IPv4 и IPv6 Быстрая сетевая...
LiberationPlay-CVE-2025-24132-AirBourne-POC
LiberationPlay! CVE-2025-24132 AirBourne POC POC para CVE-2025-24132 AirBourne. Atualmente apenas desencadeia o estouro e causa uma falha. Em uma tentativa de obter acesso root à unidade principal do meu carro, pesquisei e compilei tudo o que aprendi sobre o exploit Airplay CVE-2025-24132 chamado...
CVE-2025-15467
CVE-2025-15467: Estouro de Buffer na Pilha no CMS AuthEnvelopedData do OpenSSL Visão Geral CVE-2025-15467 é uma vulnerabilidade crítica de estouro de buffer na pilha no código de análise de CMS Cryptographic Message Syntax do OpenSSL. A vulnerabilidade existe na função evpciphergetasn1aeadparams ...
6cy
sixcy — .6cy कंटेनर फ़ॉर्मेट .6cy संग्रह प्रारूप का एक Rust कार्यान्वयन जिसमें निम्नलिखित विशेषताएँ हैं: स्व-वर्णन ब्लॉक : प्रत्येक ब्लॉक अपना स्वयं का जादू, संस्करण, कोडेक UUID, आकार और अखंडता चेकसम रखता है अनिवार्य अखंडता सत्यापन : प्रत्येक ब्लॉक पर CRC32 हेडर चेक + BLAKE3 सामग्री हैश एकाधिक...
PhantomFS
PhantomFS Provedor ProjFS. Projeta arquivos onde o conteúdo depende de qual processo os lê. O payload é armazenado criptografado em AES-256-CBC no disco, descriptografado apenas em memória em tempo de execução. Isso não deve contornar nenhum EDR, pois o payload será gravado no disco quando...
BlackBerryC2
BlackBerryC2 2.0.0-beta BlackBerryC2 ist ein verschlüsseltes Fernverwaltungs- und C2-Framework , das ausschließlich für Bildungszwecke, Sicherheitsforschung und kontrollierte Laborumgebungen entwickelt wurde. Das Projekt zeigt, wie man einen benutzerdefinierten Command-and-Control-Server mit...