Rocky Linux 8 [CIQ] Security Update: libssh / libssh-config / libssh-debuginfo / libssh-debugsource / etc Multiple Vulnerabilities (crlsa-2020_4545)

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20204545 advisory. libssh: denial of service when handling AES-CTR or DES ciphers CVE-2020-1730 libssh: unsanitized location in scp could lead to unwanted command execution...

AlmaLinux 9.2 [TuxCare] Security Update: openssl / openssl-devel / openssl-libs / openssl-perl Multiple Vulnerabilities (ALMALINUX9.2:CLSA-2026:1782976762)

The AlmaLinux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1782976762 advisory. - Issue summary: The implementations of AES-SIV RFC 5297 and AES-GCM-SIV RFC 8452 mishandle the authentication of AAD Additional...

Rocky Linux 8 [CIQ] Security Update: apcu-panel / libzip / libzip-debuginfo / libzip-debugsource / etc Multiple Vulnerabilities (crlsa-2021_4213)

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20214213 advisory. php: Wrong ciphertext/tag in AES-CCM encryption for a 12 bytes IV CVE-2020-7069 php: FILTERVALIDATEURL accepts URLs with invalid userinfo CVE-2020-7071 php...

Rocky Linux 9 [CIQ] Security Update: apcu-panel / php / php-bcmath / php-bcmath-debuginfo / php-cli / etc (crlsa-2026_40416)

The Rocky Linux 9 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202640416 advisory. php: PHP OpenSSL extension: Denial of Service due to buffer allocation flaw in AES-WRAP-PAD CVE-2026-14355 Bug Fixes and Enhancements: Rebase PHP to 8.2.32 for...

AlmaLinux 9.2 [TuxCare] Security Update: openssl / openssl-devel / openssl-libs / openssl-perl Multiple Vulnerabilities (ALMALINUX9.2:CLSA-2024:1718291413)

The AlmaLinux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.2:CLSA-2024:1718291413 advisory. - Issue summary: The AES-SIV cipher implementation contains a bug that causes it to ignore empty associated data entries which are...

Rocky Linux 10.2 [CIQ] Security Update: php8.4 / php8.4-bcmath / php8.4-bcmath-debuginfo / php8.4-cli / etc (crlsa-2026_49914)

The Rocky Linux 10.2 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202649914 advisory. php: PHP OpenSSL extension: Denial of Service due to buffer allocation flaw in AES-WRAP-PAD CVE-2026-14355 Bug Fixes and Enhancements: Rebase PHP to 8.4.23 for...

AlmaLinux 9.6 [TuxCare] Security Update: gnupg2 / gnupg2-smime (ALMALINUX9.6:CLSA-2026:1786609750)

The AlmaLinux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1786609750 advisory. - CMS Cryptographic Message Syntax parsing in gpgsm in GnuPG through 2.5.20 mishandles the CMS format for AES-GCM because aes-ICVlen is...

CVE-2026-47097

AJA HELO Plus firmware before 2.1.7 contains an information disclosure vulnerability that allows unauthenticated attackers to decrypt sensitive diagnostics bundles by exploiting a static AES passphrase embedded in obfuscated form within the firmware. Attackers can reverse engineer the publicly...

EUVD-2026-89967

AJA HELO Plus firmware before 2.1.7 contains an information disclosure vulnerability that allows unauthenticated attackers to decrypt sensitive diagnostics bundles by exploiting a static AES passphrase embedded in obfuscated form within the firmware. Attackers can reverse engineer the publicly...

CVE-2026-47097 AJA HELO Plus < 2.1.7 Hardcoded AES Passphrase for Diagnostics Export Bundle

AJA HELO Plus firmware before 2.1.7 contains an information disclosure vulnerability that allows unauthenticated attackers to decrypt sensitive diagnostics bundles by exploiting a static AES passphrase embedded in obfuscated form within the firmware. Attackers can reverse engineer the publicly...

CVE-2026-47097 AJA HELO Plus < 2.1.7 Hardcoded AES Passphrase for Diagnostics Export Bundle

AJA HELO Plus firmware before 2.1.7 contains an information disclosure vulnerability that allows unauthenticated attackers to decrypt sensitive diagnostics bundles by exploiting a static AES passphrase embedded in obfuscated form within the firmware. Attackers can reverse engineer the publicly...

CVE-2026-47097

The AJA HELO Plus firmware (versions before 2.1.7 ) is vulnerable to an information disclosure vulnerability. The root cause is a static AES passphrase embedded in an obfuscated form within the firmware, which can be recovered via reverse engineering of the publicly available firmware image. Unau...

StealthCrypter

💀StealthCrypter💀 📜 설명 StealthCrypter는 강력하고 사용하기 쉬운 암호화 도구로, AES-256 암호화 를 사용하여 민감한 파일과 디렉토리를 보호합니다. 개인 문서를 안전하게 보관하거나 기밀 데이터를 보호해야 하는 경우, CryptShield는 파일이 비공개로 유지되고 변조되지 않도록 보장합니다. 🔑 기능 ✅ AES-256 암호화 – 최대 보안을 위한 업계 표준 암호화. ✅ 대화형 CLI – 명령줄 인수가 필요 없음; 프롬프트를 따라가기만 하면 됩니다. ✅ 파일 또는 디렉토리 암호화 및 복호화 – 여러...

Malicious code in imgbundle (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e14218599b46d143fa8e150156864d14d58c327bd8a8816221ac4e8c5cc99350 The package advertises itself as an image bundler, but index.js performs no image bundling. On require, a top-level IIFE reads an AES-256-CBC-encrypt...

PublicSafe

PublicSafe 당신의 브라우저, 당신의 안전 공간 PublicSafe는 개인정보 보호, 암호화, 사용자 통제에 중점을 둔 무료 오픈소스 브라우저 확장 프로그램입니다. 사용자의 민감한 정보가 브라우저를 떠나기 전에 보호할 수 있도록 설계된 클라이언트 측 암호화 도구를 제공합니다. PublicSafe는 투명성, 보안, 접근성, 그리고 커뮤니티 주도 개발을 기반으로 구축되었습니다. 이 프로젝트는 제로 지식 설계, 로컬 키 관리, 누구나 독립적으로 감사할 수 있는 오픈소스 코드를 바탕으로 한 개인정보 우선 철학을 따릅니다. 목표...

reyee_decrypt

reyeedecrypt Ruijie ReyeeOS のファームウェアと設定バックアップを適応的に復号し、設定から平文パスワードを復元します。 使用方法 python3 reyeedecrypt.py 出力ディレクトリ は自動判別され、以下の種類をサポートします： 入力| 例 ---|--- ファームウェア tar パッケージ| AP3.01...withbootencryptov1.tar.gz ファームウェア展開ディレクトリ| ...withbootencryptov1/ 暗号化 install bin| ...installencryptov1.bin /...

CVE-2026-86132

An integer underflow vulnerability in the WatchGuard Fireware OS IKEv2 daemon iked allows a remote, unauthenticated attacker to crash the process by sending a specially crafted encrypted IKEv2 message negotiated with an AES-GCM cipher suite...

CentOS Linux 8 [TuxCare] Security Update: libssh / libssh-config / libssh-devel Multiple Vulnerabilities (CENTOS-STREAM8:CLSA-2026:1786012443)

The CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS-STREAM8:CLSA-2026:1786012443 advisory. - A flaw was found in libssh. Incorrect AES-GCM finalization checks in builds using the OpenSSL backend can effectively remove...

CentOS Linux 8.4 [TuxCare] Security Update: libssh / libssh-config / libssh-devel Multiple Vulnerabilities (CENTOS8.4:CLSA-2026:1786012208)

The CentOS Linux 8.4 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS8.4:CLSA-2026:1786012208 advisory. - A flaw was found in libssh. Incorrect AES-GCM finalization checks in builds using the OpenSSL backend can effectively remove...

AlmaLinux 9.2 [TuxCare] Security Update: libssh / libssh-config / libssh-devel Multiple Vulnerabilities (ALMALINUX9.2:CLSA-2026:1786466122)

The AlmaLinux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1786466122 advisory. - A flaw was found in libssh. Incorrect AES-GCM finalization checks in builds using the OpenSSL backend can effectively remove...