Concryptor

Concryptor Un moteur de chiffrement AEAD multi-threadé construit en Rust. Chiffre et déchiffre des fichiers à un débit de gigaoctets par seconde grâce à un pipeline iouring triple-bufferisé, un traitement par blocs parallèle via Rayon, et des ciphers optimisés en assembleur via ring. ⚠️...

java-remote-class-loader

Cet outil vous permet d'envoyer du bytecode Java sous forme de fichiers de classe à vos clients ou cibles potentielles pour les charger et les exécuter en utilisant Java ClassLoader avec l'API Reflect. Le client reçoit le fichier de classe du serveur et renvoie la sortie d'exécution respective. L...

torchat

TorChat - دردشة P2P مجهولة دردشة آمنة وخاصة ومجهولة الهوية من نظير إلى نظير عبر شبكة Tor. ما هو TorChat؟ إنها أداة مراسلة خفيفة الوزن تركز على الخصوصية، تتيح لك التواصل مباشرة مع الآخرين عبر شبكة Tor—بدون أي خوادم مركزية. صُممت لأولئك الذين يهتمون كثيرًا بالخصوصية والأمان والبساطة. ما الذي يجعل...

java-remote-class-loader

This tool allows you to send Java bytecode in the form of class files to your clients or potential targets to load and execute using Java ClassLoader together with Reflect API. The client receives the class file from the server and return the respective execution output. Payloads must be written ...

CESS

CESS — क्रिप्टोलॉजिकल रूप से मंत्रमुग्ध शमीर का सीक्रेट क्या यह AI बकवास या घटिया है? CESS की समीक्षा करने वाला कोई क्रिप्टोग्राफर या गंभीर कार्यान्वयनकर्ता आमतौर पर गद्य पढ़ने से पहले vectors/ और testdata/ खोलेगा। परीक्षण सुइट कार्य का प्रमाण है: यह डोमेन ज्ञान को कूटबद्ध करता है जिसे केवल वर्णन...

sorry-ransomware-analysis

Analyse du Ransomware Sorry Campagne CVE-2026-41940 cPanel Pack d'IOC public, règles YARA, scripts forensiques et méthodologie d'analyse pour la famille du ransomware « Sorry » extension .sorry apparue fin avril 2026, propagée via le contournement d'authentification cPanel/WHM CVE-2026-41940. ⚠️...

EphemeralNet

EphemeralNet एक सुरक्षित P2P नेटवर्क जिसमें शत्रुतापूर्ण NAT के लिए कस्टम Relay है, जो C++20 में बनाया गया है। उच्च-आश्वासन पीयर-टू-पीयर स्टोरेज के लिए प्रोग्रामेबल भूलने की क्षमता। EphemeralNet क्यों? Shardian उन टीमों के लिए इंफ्रास्ट्रक्चर डिज़ाइन करता है जो गोपनीयता की तरह ही विलोपन गारंटी को...

SUSE CVE-2026-75803

Issue summary: ChaCha20-Poly1305 and AES-OCB decryption with an empty ciphertext can report success without verifying the supplied authentication tag when the operation is finalized by calling the EVPCipher function. Impact summary: Applications calling EVPCipher on an empty ciphertext and...

Improper Validation of Integrity Check Value

Overview Affected versions of this package are vulnerable to Improper Validation of Integrity Check Value in the chacha20poly1305cipher and aesocbcipher implementations under providers/implementations/ciphers/. An attacker can forge messages by supplying an empty ciphertext and a bad tag, then...

AZL-97884 CVE-2026-75803 affecting package edk2 20240524git3e722403cd16-18

Issue summary: ChaCha20-Poly1305 and AES-OCB decryption with an empty ciphertext can report success without verifying the supplied authentication tag when the operation is finalized by calling the EVPCipher function. Impact summary: Applications calling EVPCipher on an empty ciphertext and...

CVE-2026-75803

Issue summary: ChaCha20-Poly1305 and AES-OCB decryption with an empty ciphertext can report success without verifying the supplied authentication tag when the operation is finalized by calling the EVPCipher function. Impact summary: Applications calling EVPCipher on an empty ciphertext and...

AZL-97935 CVE-2026-75803 affecting package openssl 3.3.7-4

Issue summary: ChaCha20-Poly1305 and AES-OCB decryption with an empty ciphertext can report success without verifying the supplied authentication tag when the operation is finalized by calling the EVPCipher function. Impact summary: Applications calling EVPCipher on an empty ciphertext and...

AZL-97671 CVE-2026-75803 affecting package openssl-fips-provider 3.1.2-2

Issue summary: ChaCha20-Poly1305 and AES-OCB decryption with an empty ciphertext can report success without verifying the supplied authentication tag when the operation is finalized by calling the EVPCipher function. Impact summary: Applications calling EVPCipher on an empty ciphertext and...

ALPINE-CVE-2026-75803

Issue summary: ChaCha20-Poly1305 and AES-OCB decryption with an empty ciphertext can report success without verifying the supplied authentication tag when the operation is finalized by calling the EVPCipher function. Impact summary: Applications calling EVPCipher on an empty ciphertext and...

EUVD-2026-65488

Issue summary: ChaCha20-Poly1305 and AES-OCB decryption with an empty ciphertext can report success without verifying the supplied authentication tag when the operation is finalized by calling the EVPCipher function. Impact summary: Applications calling EVPCipher on an empty ciphertext and...

CVE-2026-75803

OpenSSL 's EVP_Cipher() function, a one-shot AEAD encryption/decryption API, skips authentication tag verification when an empty ciphertext is passed for ChaCha20-Poly1305 and AES-OCB ciphers, yet still returns success. Callers expecting a valid AEAD tag check may therefore accept forged messages...

CVE-2026-75803 AEAD Forgeries with Empty Ciphertext When Using EVP_Cipher()

Issue summary: ChaCha20-Poly1305 and AES-OCB decryption with an empty ciphertext can report success without verifying the supplied authentication tag when the operation is finalized by calling the EVPCipher function. Impact summary: Applications calling EVPCipher on an empty ciphertext and...

CVE-2026-75803 AEAD Forgeries with Empty Ciphertext When Using EVP_Cipher()

Issue summary: ChaCha20-Poly1305 and AES-OCB decryption with an empty ciphertext can report success without verifying the supplied authentication tag when the operation is finalized by calling the EVPCipher function. Impact summary: Applications calling EVPCipher on an empty ciphertext and...

CVE-2026-75803

Issue summary: ChaCha20-Poly1305 and AES-OCB decryption with an empty ciphertext can report success without verifying the supplied authentication tag when the operation is finalized by calling the EVPCipher function. Impact summary: Applications calling EVPCipher on an empty ciphertext and...

PT-2026-81308

Name of the Vulnerable Software and Affected Versions The product name cannot be determined affected versions not specified Description Decryption using ChaCha20-Poly1305 and AES-OCB ciphers may report success without verifying the authentication tag when an empty ciphertext is processed via the...