CVE-2023-3446

creationtimestamp| type| source ---|---|--- 2023-11-17 06:28:22+00:00| seen| https://t.me/arpsyndicate/222 2023-12-02 02:17:52+00:00| seen| https://t.me/arpsyndicate/879 2023-12-02 02:24:58+00:00| seen| https://t.me/arpsyndicate/881 2024-11-14 12:00:00+00:00| seen|...

The vulnerability of the Read() function in the open-source cryptographic algorithm library Circl allows a perpetrator to compromise the confidentiality and integrity of the protected information.

The vulnerability of the Read function in the open-source cryptographic algorithm library Circl is related to insufficient validation of input data and the failure to eliminate instructions in dynamically executed code. Exploiting this vulnerability can allow attackers to compromise the...

CVE-2023-42669

creationtimestamp| type| source ---|---|--- 2023-11-06 12:25:43+00:00| seen| https://t.me/cibsecurity/73581 2026-01-21 21:18:16+00:00| seen| https://vulnerability.circl.lu/bundle/bbcbc485-b88d-4831-b8e9-6e37e7bd9875...

CVE-2023-40139

creationtimestamp| type| source ---|---|--- 2023-10-28 06:42:35+00:00| seen| https://t.me/cibsecurity/73080 2025-02-03 19:33:09+00:00| seen| https://vulnerability.circl.lu/bundle/cf59c148-4047-4ccd-8ba0-26fb7197899c...

CVE-2023-40135

creationtimestamp| type| source ---|---|--- 2023-10-28 00:17:32+00:00| seen| https://t.me/cibsecurity/73092 2025-02-03 19:33:09+00:00| seen| https://vulnerability.circl.lu/bundle/cf59c148-4047-4ccd-8ba0-26fb7197899c...

CVE-2023-36584

creationtimestamp| type| source ---|---|--- 2023-10-10 22:22:53+00:00| seen| https://t.me/cibsecurity/72011 2023-11-16 18:10:02+00:00| seen| MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123 2023-11-17 07:02:15+00:00| exploited| https://t.me/thehackernews/4162 2023-11-17 07:07:36+00:00| seen|...

CVE-2023-4047

creationtimestamp| type| source ---|---|--- 2023-08-01 18:38:28+00:00| seen| https://t.me/cibsecurity/67503 2023-08-02 18:10:05+00:00| seen| https://t.me/truesecator/4685 2023-09-20 10:12:47+00:00| published-proof-of-concept| Telegram/OrzbdSrsyNGre50gvdWTC8vdVTcvnVlN80j6OCu5SA6tOfA 2023-09-20...

Insecure Randomness

github.com/cloudflare/circl is vulnerable to Insecure Randomness. Kyber and FrodoKEM did not check whether crypto/rand.Read returned an error, leading to a predictable shared secret. The tkn20 and blindrsa components did not check if enough randomness was returned from the user provided randomnes...

Improper random reading in CIRCL

Impact When sampling randomness for a shared secret, the implementation of Kyber and FrodoKEM, did not check whether crypto/rand.Read returns an error. In rare deployment cases error thrown by the Read function, this could lead to a predictable shared secret. The tkn20 and blindrsa components did...

GHSA-2Q89-485C-9J2X Improper random reading in CIRCL

Impact When sampling randomness for a shared secret, the implementation of Kyber and FrodoKEM, did not check whether crypto/rand.Read returns an error. In rare deployment cases error thrown by the Read function, this could lead to a predictable shared secret. The tkn20 and blindrsa components did...

PT-2023-6901 · Circl · Circl

Name of the Vulnerable Software and Affected Versions: CIRCL versions prior to 1.3.3 Description: The issue arises from insufficient input validation and lack of measures to neutralize instructions in dynamically executed code in the crypto/rand.Read function. This could lead to a predictable...

CIRCL 安全漏洞

CIRCL is an open source collection of cryptographic primitives written in Go by Cloudflare. CIRCL has a security vulnerability that stems from the fact that the tkn20 and blindrsa components do not check whether a user-supplied random source returns sufficient randomness...

CVE-2023-1393

creationtimestamp| type| source ---|---|--- 2023-03-31 00:31:47+00:00| seen| https://t.me/cibsecurity/61207 2026-01-21 21:18:16+00:00| seen| https://vulnerability.circl.lu/bundle/bbcbc485-b88d-4831-b8e9-6e37e7bd9875...

CVE-2023-28503

creationtimestamp| type| source ---|---|--- 2023-03-30 00:16:03+00:00| seen| https://t.me/cibsecurity/61150 2023-04-12 09:58:37+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/misc/unidataudadminauthbypass.rb 2024-01-07 05:30:41+00:00| seen|...

CVE-2023-25194

creationtimestamp| type| source ---|---|--- 2023-02-14 06:59:01+00:00| published-proof-of-concept| Telegram/UgjyfN33Nakq6MmMsTBw0rSSkp77M7XZKGq62f2fQ8miTg 2023-02-14 19:43:14+00:00| published-proof-of-concept| https://t.me/malwar3s/32 2023-02-20 06:51:35+00:00| seen| https://t.me/cKure/10688...

Vulnerability fixed in MISP

A vulnerability has been fixed in MISP. The vulnerability allows an authenticated malicious person to perform a Cross-Site Scripting XSS attack. Such an attack can result in the execution of arbitrary script code in the browser used to visit the application being visited. CIRCL has released an...

CVE-2022-45047

creationtimestamp| type| source ---|---|--- 2022-11-17 15:58:44+00:00| seen| https://t.me/cibsecurity/53051 2024-02-16 15:31:45+00:00| seen| https://t.me/ctinow/186441 2026-01-21 21:18:16+00:00| seen| https://vulnerability.circl.lu/bundle/bbcbc485-b88d-4831-b8e9-6e37e7bd9875 2026-07-29...

circl:cryptofuzz: Null-dereference READ with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=5069741467500544 Project: circl Fuzzing Engine: libFuzzer Fuzz Target: cryptofuzz Job Type: libfuzzerasancircl Platform Id: linux Crash Type: Null-dereference READ Crash Address: 0x000000000000 Crash State: NULL Sanitizer: address ASAN Crash...

CVE-2022-36446

creationtimestamp| type| source ---|---|--- 2022-07-25 12:32:52+00:00| seen| https://t.me/cibsecurity/46883 2022-08-09 20:35:21+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/webminpackageupdatesrce.rb 2022-08-11 16:14:53+00:00|...

CVE-2022-2068

creationtimestamp| type| source ---|---|--- 2022-06-21 16:50:50+00:00| seen| https://t.me/antichat/9887 2025-01-26 09:43:06+00:00| published-proof-of-concept| Telegram/6MjhSnJNjnU7ZuaxfNMF1kI6EhfOaDQaVfpRiMhlDYDzF4 2025-02-14 16:37:45+00:00| seen|...