Lucene search
+L

7 matches found

Snyk
Snyk
•added 2026/08/17 6:15 p.m.•8 views

Improper Verification of Cryptographic Signature

Overview openssl-encrypt is an A package for secure file encryption and decryption based on modern ciphers using heavy-compute-load chaining of hashing and KDF to generate strong encryption password based on users provided password to ensure secure encryption of files Affected versions of this...

9.8CVSS5.8AI score0.00405EPSS
SaveExploits0References2
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•13 views

EUVD-2005-0040

Malware in sbrugna...

6.4CVSS6.4AI score0.04081EPSS
SaveExploits0References11
RedhatCVE
RedhatCVE
•added 2025/05/22 9:32 a.m.•13 views

CVE-2015-6964

MultiBit HD before 0.1.2 allows attackers to conduct bit-flipping attacks that insert unspendable Bitcoin addresses into the list that MultiBit uses to send fees to the developers. Attackers cannot realistically steal these fees for themselves. This occurs because there is no message authenticati...

5.3CVSS7.3AI score0.00517EPSS
SaveExploits1References1
Cvelist
Cvelist
•added 2023/09/25 12:00 a.m.•50 views

CVE-2015-6964

MultiBit HD before 0.1.2 allows attackers to conduct bit-flipping attacks that insert unspendable Bitcoin addresses into the list that MultiBit uses to send fees to the developers. Attackers cannot realistically steal these fees for themselves. This occurs because there is no message authenticati...

5.5AI score0.00517EPSS
SaveExploits1References1
Github Security Blog
Github Security Blog
•added 2020/09/04 5:36 p.m.•32 views

Insecure Cryptography Algorithm in parsel

All versions of parsel use an insecure cryptography algorithm. The package uses aes-256-cbc without integrity checks, which renders the ciphertext vulnerable to bit-flipping attacks. Recommendation The package is deprecated and will not be updated. Consider using an alternative package...

4.2AI score
SaveExploits0References2Affected Software1
Kitploit
Kitploit
•added 2020/06/09 12:30 p.m.•78 views

URLCrazy - Generate And Test Domain Typos And Variations To Detect And Perform Typo Squatting, URL Hijacking, Phishing, And Corporate Espionage

URLCrazy is an OSINT tool to generate and test domain typos or variations to detect or perform typo squatting, URL hijacking, phishing, and corporate espionage. Homepage: https://www.morningstarsecurity.com/research/urlcrazy Use Cases Detect typo squatters profiting from typos on your domain name...

7.1AI score
SaveExploits0References5
UbuntuCve
UbuntuCve
•added 2005/05/10 4:00 a.m.•37 views

CVE-2005-0039

Certain configurations of IPsec, when using Encapsulating Security Payload ESP in tunnel mode, integrity protection at a higher layer, or Authentication Header AH, allow remote attackers to decrypt IPSec communications by modifying the outer packet in ways that cause plaintext data from the inner...

6.4CVSS6AI score0.04081EPSS
SaveExploits0References1
Rows per page
Query Builder