SUSE SLED15 / SLES15 Security Update : python3-paramiko (SUSE-SU-2026:4618-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2026:4618-1 advisory. This update for python3-paramiko fixes the following issue: - CVE-2026-44405: data integrity compromise due to allowed...

Microsoft Windows: CVE-2026-83906: Windows Shell Spoofing Vulnerability

Incorrect implementation of authentication algorithm in Windows Shell allows an unauthorized attacker to perform spoofing over a network...

CVE-2026-59116: Use of a Broken or Risky Cryptographic Algorithm

Use of a broken or risky cryptographic algorithm in Windows Remote Desktop allows an unauthorized attacker to bypass a security feature over a network...

CVE-2026-83906: Incorrect Implementation of Authentication Algorithm

Incorrect implementation of authentication algorithm in Windows Shell allows an unauthorized attacker to perform spoofing over a network...

PT-2026-112667

Name of the Vulnerable Software and Affected Versions Windows Shell affected versions not specified Description An incorrect implementation of the authentication algorithm in Windows Shell allows an unauthorized attacker to perform spoofing over a network. Recommendations At the moment, there is ...

PT-2026-112043

Name of the Vulnerable Software and Affected Versions Windows Remote Desktop affected versions not specified Description The use of a broken or risky cryptographic algorithm in Windows Remote Desktop enables an unauthorized attacker to bypass a security feature over a network. Recommendations At...

Security update for python3-paramiko

This update for python3-paramiko fixes the following issue: CVE-2026-44405: data integrity compromise due to allowed SHA-1 algorithm use bsc1264225. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch". Alternativel...

SUSE-SU-2026:4618-1 Security update for python3-paramiko

This update for python3-paramiko fixes the following issue: - CVE-2026-44405: data integrity compromise due to allowed SHA-1 algorithm use bsc1264225...

pantagrule

Pantagrule conjuntos de reglas hashcat gigantescos generados a partir de contraseñas comprometidas Advertencia de mantenimiento del proyecto : Este proyecto se considera completado. No se realizarán solicitudes de extracción ni cambios en este proyecto en el futuro a menos que sean errores reales...

Dagon

Dagon - Manipulación Avanzada de Hashes Llamado así por el príncipe del Infierno, Dagon day-gone es un sistema avanzado de cracking y manipulación de hashes, capaz de realizar fuerza bruta en múltiples tipos de hash, crear diccionarios de fuerza bruta, verificación automática de algoritmos de has...

shortscan

🌀 Shortscan Una herramienta de enumeración de nombres cortos de archivos en IIS. Funcionalidad Shortscan está diseñado para determinar rápidamente qué archivos con nombres cortos existen en un servidor web IIS. Una vez identificado un nombre corto, la herramienta intentará identificar...

domain_generation_algorithms

Algoritmos de Generación de Dominios Algoritmos de Generación de Dominios DGAs de malware reimplementados en Python. Resumen banjori también conocido como MultiBanker 2, BankPatcher Enlaces http://johannesbader.ch/2015/02/the-dga-of-banjori/ Dominios de ejemplo earnestnessbiophysicalohax.com...

ssh-audit

ssh-audit ssh-audit es una herramienta para auditoría de servidores SSH. Características soporte de servidores con protocolos SSH1 y SSH2; captura de banner, reconocimiento de dispositivo, software y sistema operativo, detección de compresión; recopilación de algoritmos de intercambio de claves,...

CLEANSTART-2026-TQ95555 archive/zip uses a super-linear file name indexing algorithm that is invoked the first time a file in an archive is opened

Security vulnerability affects the victoria-metrics package. archive/zip uses a super-linear file name indexing algorithm that is invoked the first time a file in an archive is opened...

GHSA-WW5H-9M49-7XX4 fast-jwt: Incomplete patch of CVE-2026-34950: Non-whitespace key-prefix re-enables RSA→HS256 algorithm confusion

Summary The fix for CVE-2026-34950 CVSS 9.1, released in v6.2.0 is incomplete. It adds key.trim to the PEM-detection path in src/crypto.js, but String.prototype.trim only strips characters classified as whitespace by the ECMAScript specification. The subsequent ^-anchored regex /^-----BEGIN?: RSA...

NPM: fast-jwt: Incomplete patch of CVE-2026-34950: Non-whitespace key-prefix re-enables RSA→HS256 algorithm confusion

NPM: fast-jwt: Incomplete patch of CVE-2026-34950: Non-whitespace key-prefix re-enables RSA→HS256 algorithm confusion vulnerability discovered by ? in WordPress Npm fast-jwt versions = 6.2.0, = 6.2.4...

fast-jwt: Incomplete patch of CVE-2026-34950: Non-whitespace key-prefix re-enables RSA→HS256 algorithm confusion

Summary The fix for CVE-2026-34950 CVSS 9.1, released in v6.2.0 is incomplete. It adds key.trim to the PEM-detection path in src/crypto.js, but String.prototype.trim only strips characters classified as whitespace by the ECMAScript specification. The subsequent ^-anchored regex /^-----BEGIN?: RSA...

EUVD-2026-95347

fast-jwt provides fast JSON Web Token JWT implementation. From 6.2.0 until 6.3.0, fast-jwt can misclassify RSA public-key text as an HMAC secret when the key has non-whitespace content before its PEM header. In src/crypto.js, performDetectPublicKeyAlgorithms trims whitespace but publicKeyPemMatch...

CVE-2026-107722 fast-jwt: Incomplete patch of CVE-2026-34950: Non-whitespace key-prefix re-enables RSA→HS256 algorithm confusion

fast-jwt provides fast JSON Web Token JWT implementation. From 6.2.0 until 6.3.0, fast-jwt can misclassify RSA public-key text as an HMAC secret when the key has non-whitespace content before its PEM header. In src/crypto.js, performDetectPublicKeyAlgorithms trims whitespace but publicKeyPemMatch...

CVE-2026-107722 fast-jwt: Incomplete patch of CVE-2026-34950: Non-whitespace key-prefix re-enables RSA→HS256 algorithm confusion

fast-jwt provides fast JSON Web Token JWT implementation. From 6.2.0 until 6.3.0, fast-jwt can misclassify RSA public-key text as an HMAC secret when the key has non-whitespace content before its PEM header. In src/crypto.js, performDetectPublicKeyAlgorithms trims whitespace but publicKeyPemMatch...