EUVD-2026-91992

In Bouncy Castle for Java LTS before 2.73.13, the one-shot native packet ciphers for AES-CBC, CCM, CFB, CTR, GCM and GCM-SIV released the caller's key, IV and additional authenticated data arrays with JNI's ReleaseByteArrayElements in mode 0, which commits the native copy back into the Java array...

CVE-2026-71883 Native AES packet cipher returns the raw AES key on an alias

In Bouncy Castle for Java LTS before 2.73.13, the one-shot native packet ciphers for AES-CBC, CCM, CFB, CTR, GCM and GCM-SIV released the caller's key, IV and additional authenticated data arrays with JNI's ReleaseByteArrayElements in mode 0, which commits the native copy back into the Java array...

openssl

Welcome to the OpenSSL Project !openssl logowww.openssl.org !github actions ci badgegithub actions ci OpenSSL is a robust, commercial-grade, full-featured Open Source Toolkit for the Transport Layer Security TLS, formerly SSL, Datagram TLS DTLS, and QUIC protocols. The protocol implementations ar...

WAF_buster

WAFbuster 通过滥用 SSL/TLS 密码套件来绕过 WAF 关于 WAFbuster 此工具旨在分析 Web 服务器端所使用的 Web 应用防火墙支持的密码套件。参考：https://0x09al.github.io/waf/bypass/ssl/2018/07/02/web-application-firewall-bypass.html。它首先触发 SslScan 来查找与 Web 服务器进行 SSL/TLS 协商时支持的所有密码套件。获取所有支持密码套件的文本文件后，使用 Curl 逐一查询每个密码套件，以检查哪些密码套件不被 WAF 支持但被 Web...

CTFCrackTools

CTFCrackTools X 次世代ノード型CTFツールボックス English | 简体中文 V4 から X へ – 単なるバージョンアップではない ダウンロード | 機能 | 作者より ブランドアップデート CTFCrackTools X は CTFCrackTools の全く新しい世代のバージョンです。"X" は以下を意味します： eXtreme — 極限のパフォーマンスと体験 eXtensible — 拡張可能なノード型アーキテクチャ neXt — 未来志向のテクノロジースタック | CTFCrackTools V4| CTFCrackTools X ---|---|---...

cipherscan

CipherScan Cipherscanは、指定されたターゲット上のSSL/TLS暗号の順序を、すべての主要なSSLおよびTLSバージョンについてテストします。また、いくつかの証明書情報、TLSオプション、OCSPステープリングなども抽出します。Cipherscanは openssl sclient コマンドラインのラッパーです。...

cryptovenom

CryptoVenom CryptoVenom: 暗号のスイスアーミーナイフ CryptoVenomとは？ CryptoVenomは、古典アルゴリズム、ハッシュアルゴリズム、エンコーディングアルゴリズム、論理ゲート、数学関数、現代の対称・非対称暗号など、多数の暗号方式と暗号解析手法を1つにまとめたオープンソースツールです。 CryptoVenomの目的は？ 暗号解析や暗号方式の利用・操作を容易にすることです。 もしあなたがCTFプレイヤー、あるいは学習目的の好奇心旺盛な学生なら、このツールはあなたのためのものです！ エラー？アップデート？...

ssh_scan

sshscan A SSH configuration and policy scanner ⚠️ Deprecation Notice ⚠️ Mozilla is no longer maintaining the SSH Scan project. Please fork it to continue development. Key Benefits Minimal Dependencies - Uses native Ruby and BinData to do its work, no heavy dependencies. Not Just a Script -...

AlmaLinux 9.2 [TuxCare] Security Update: openssl / openssl-devel / openssl-libs / openssl-perl (ALMALINUX9.2:CLSA-2023:1702495193)

The AlmaLinux 9.2 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2023:1702495193 advisory. - Issue summary: A bug has been identified in the processing of key and initialisation vector IV lengths. This can lead to potential truncati...

CVE-2026-102822

A flaw was found in russh. This vulnerability allows a remote attacker to cause a Denial of Service DoS by terminating active connection tasks. When a connection is configured to permit sessions without a Message Authentication Code MAC, improper algorithm negotiation allows pairing with block...

Freak-Scanner

Freak-Scanner 多线程 Python FREAK 扫描器，用于检测 SSL EXP 密码套件，存在 CVE-2015-0204 漏洞。 它运行相当快，应该能在一小时内扫描接近1000个主机。 不过输出比较杂乱，你需要用 grep 搜索 Vulnerable/NotVulnerable。 如果有需要，我稍后会尝试清理它。...

PT-2026-96246

Name of the Vulnerable Software and Affected Versions OpenStack Octavia versions prior to 18.0.1 Description The Amphora provider driver fails to validate the tls ciphers field for listeners and pools against control characters. Because this value is written directly into the HAProxy configuratio...

CVE-2026-75803

A flaw in OpenSSL causes EVPCipher to skip AEAD tag verification for ChaCha20-Poly1305 and AES-OCB ciphers when decrypting empty ciphertexts. This allows remote attackers to submit forged messages that affected applications incorrectly accept as valid. Mitigation To mitigate this ensure that all...

CVE-2026-14663

A flaw was found in PostgreSQL pgcrypto. When using disabled ciphers, a user can recover cleartext data by observing faulty ciphertext. This issue arises because the application may accept encrypted data as input, leading to successful decryption even with an incorrect key. Consequently, the...

EUVD-2026-67517

In the Linux kernel, the following vulnerability has been resolved: wifi: wlcore: enable the right set of ciphers The firmware version number check for IGTK introduced in commit c34dbc5900b0 "wifi: wlcore: Add support for IGTK key" lets the amount of ciphers decrease on every boot of a too old...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: postgresql (UTSA-2026-104784)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-104784 advisory. Cleartext storage in PostgreSQL pgcrypto disabled ciphers allows a user to recover cleartext, via direct observation of the faulty ciphertext. The OpenSSL version an...

postgresql: PostgreSQL pgcrypto: Information disclosure via cleartext storage with disabled ciphers

A flaw was found in PostgreSQL pgcrypto. When using disabled ciphers, a user can recover cleartext data by observing faulty ciphertext. This issue arises because the application may accept encrypted data as input, leading to successful decryption even with an incorrect key. Consequently, the...

BIT-POSTGRESQL-2026-14663 PostgreSQL pgcrypto, for OpenSSL-disabled ciphers, silently encrypts to and decrypts from cleartext

Cleartext storage in PostgreSQL pgcrypto disabled ciphers allows a user to recover cleartext, via direct observation of the faulty ciphertext. The OpenSSL version and OpenSSL configuration determine the disabled ciphers. If the application accepts encrypted data as input, decryption will succeed...

postgresql: PostgreSQL pgcrypto: Information disclosure via cleartext storage with disabled ciphers

A flaw was found in PostgreSQL pgcrypto. When using disabled ciphers, a user can recover cleartext data by observing faulty ciphertext. This issue arises because the application may accept encrypted data as input, leading to successful decryption even with an incorrect key. Consequently, the...

Cleartext Storage in a File or on Disk

Overview Affected versions of this package are vulnerable to Cleartext Storage in a File or on Disk in the pgcrypto process when OpenSSL-disabled ciphers are used. An attacker can access sensitive information and potentially modify data by observing the faulty ciphertext or submitting encrypted...