rewerse-engineering

rewerse engineering Неофициальный клиент API REWE на Go и Python. Он реализует публично доступные неаутентифицированные конечные точки, которые приложение REWE использует для запроса текущих скидок Angebote, товаров, магазинов и отзывов. Поддерживаемая версия APK: 5.16.2 по состоянию на 06.08.26...

py_certificate_extractor

pycertificateextractor 가끔은 디지털 서명 파일에서 인증서 정보를 추출해야 할 필요가 있습니다. 그럴 때 이 도구를 사용하세요. 쉽게 끝낼 수 있습니다. 변경이 필요하거나 추가 기능이 필요하면 알려주세요. 기능 디지털 서명 파일에서 인증서 정보를 추출하고 인증서를 내보내기저장합니다. 그게 전부입니다. v1.0.0 https://github.com/password123456/digitalsignedpefilecertificateextractor/blob/main/Changes 미리보기...

Driver-SoulExtraction

SoulExtraction SoulExtraction은 Windows 드라이버의 인증서 정보를 추출하기 위한 Windows 드라이버 라이브러리입니다 컴파일 Visual Studio 2022 & WDK10 llvm-msvc link 크레딧 linux BackEngineerLab https://git.back.engineering/gmh5225/Driver-SoulExtraction UnknownCheats에서의 몇 가지 논의...

cipherscan

CipherScan Cipherscan проверяет порядок шифров SSL/TLS на заданной цели для всех основных версий SSL и TLS. Он также извлекает некоторую информацию о сертификатах, параметрах TLS, OCSP stapling и многое другое. Cipherscan является обёрткой над командной строкой openssl sclient. Cipherscan...

certificate-ripper

Certificate Ripper 🔐 A CLI tool to extract server certificates Demo Advantages It is fast Easy to use No openssl required Runs on any Operating System Can be used with or without Java, native executables are present in the releases Extracts all the sub-fields of the certificate Certificates can b...

rewerse-engineering v1.4.0

rewerse engineering An unofficial REWE API client in Go and Python. It implements the publicly accessible unauthenticated endpoints the REWE app uses for querying current discounts Angebote, products, markets and recalls. Current supported APK version: 5.16.2 as of 06.08.26 !CAUTION The...

CVE-2026-33753

A flaw was found in rfc3161-client, a Python library implementing the Time-Stamp Protocol TSP. This authorization bypass vulnerability allows a remote attacker to impersonate a trusted TimeStamping Authority TSA. The flaw exists in the library's signature verification process, specifically in how...

rfc3161-client Has Improper Certificate Validation

Summary An Authorization Bypass vulnerability in rfc3161-client's signature verification allows any attacker to impersonate a trusted TimeStamping Authority TSA. By exploiting a logic flaw in how the library extracts the leaf certificate from an unordered PKCS7 bag of certificates, an attacker ca...

GHSA-3XXC-PWJ6-JGRJ rfc3161-client Has Improper Certificate Validation

Summary An Authorization Bypass vulnerability in rfc3161-client's signature verification allows any attacker to impersonate a trusted TimeStamping Authority TSA. By exploiting a logic flaw in how the library extracts the leaf certificate from an unordered PKCS7 bag of certificates, an attacker ca...

CVE-2026-33753 Improper Certificate Validation in rfc3161-client

rfc3161-client is a Python library implementing the Time-Stamp Protocol TSP described in RFC 3161. Prior to 1.0.6, an Authorization Bypass vulnerability in rfc3161-client's signature verification allows any attacker to impersonate a trusted TimeStamping Authority TSA. By exploiting a logic flaw i...

CVE-2026-0754

An embedded test key and certificate could be extracted from a Poly Voice device using specialized reverse engineering tools. This extracted certificate could be accepted by a SIP service provider if the service provider does not perform proper validation of the device certificate...

CVE-2026-0754

An embedded test key and certificate could be extracted from a Poly Voice device using specialized reverse engineering tools. This extracted certificate could be accepted by a SIP service provider if the service provider does not perform proper validation of the device certificate...

SIP Service Providers – Possible Impersonation of Poly Voice Device

An embedded test key and certificate could be extracted from a Poly Voice device using specialized reverse engineering tools. This extracted certificate could be accepted by a SIP service provider if the service provider does not perform proper validation of the device certificate. Service...

EUVD-2025-199605

An issue was discovered in Syrotech SY-GPON-1110-WDONT SYRO3.7L3.1.02-240517 allowing attackers to exctract the SSL Private Key, CA Certificate, SSL Certificate, and Client Certificates in .pem format in firmware in etc folder...

EUVD-2019-5553

Malware in sbrugna...

CVE-2019-14334

An issue was discovered on D-Link 6600-AP, DWL-3600AP, and DWL-8610AP Ax 4.2.0.14 21/03/2019 devices. There is post-authenticated Certificate and RSA Private Key extraction through an insecure sslcert-get.cgi HTTP command...

SSRF in sliver teamserver

Summary The reverse port forwarding in sliver teamserver allows the implant to open a reverse tunnel on the sliver teamserver without verifying if the operator instructed the implant to do so Reproduction steps Run server wget...

CVE-2022-28371

On Verizon 5G Home LVSKIHP InDoorUnit IDU 3.4.66.162 and OutDoorUnit ODU 3.33.101.0 devices, the CRTC and ODU RPC endpoints rely on a static certificate for access control. This certificate is embedded in the firmware, and is identical across the fleet of devices. An attacker need only download...

Verizon 5G Home LVSKIHP 信任管理问题漏洞

The Verizon 5G Home LVSKIHP is an all-in-one integrated modem and router from Verizon USA. It provides access to Verizon Wireless 5G wireless home Internet service. A security vulnerability exists in the Verizon 5G Home LVSKIHP InDoorUnit IDU version 3.4.66.162 and OutDoorUnit ODU version...

CVE-2019-14334

An issue was discovered on D-Link 6600-AP, DWL-3600AP, and DWL-8610AP Ax 4.2.0.14 21/03/2019 devices. There is post-authenticated Certificate and RSA Private Key extraction through an insecure sslcert-get.cgi HTTP command...