ssh-auditor

SSH Auditor Features ssh-auditor will automatically: Re-check all known hosts as new credentials are added. It will only check the new credentials. Queue a full credential scan on any new host discovered. Queue a full credential scan on any known host whose ssh version or key fingerprint changes...

private-landing

Private Landing Learn authentication by building it right. Live Demo · Threat Model · Auth Flows · ADRs Demo note: The login endpoint is protected by adaptive PoW challenges — repeated failures return increasing proof-of-work difficulty. Cache-backed rate limiting is implemented and tested but no...

CVE-2026-54912

The WebAssembly Micro Runtime (WAMR) (prior to version 2.4.5 ) contains a heap buffer overflow vulnerability in the two-pass fast interpreter loader located at core/iwasm/interpreter/wasm_loader.c. The root cause is an inconsistent constant-table decision between the sizing and emitting passes; s...

CVE-2026-54912 WAMR fast interpreter loader heap buffer overflow via constant deduplication mismatch

WebAssembly Micro Runtime WAMR is a lightweight standalone WebAssembly Wasm runtime. Prior to 2.4.5, the two-pass fast interpreter loader in core/iwasm/interpreter/wasmloader.c can make inconsistent constant-table decisions between the sizing pass and the emitting pass. After duplicate constants...

CVE-2026-54912 WAMR fast interpreter loader heap buffer overflow via constant deduplication mismatch

WebAssembly Micro Runtime WAMR is a lightweight standalone WebAssembly Wasm runtime. Prior to 2.4.5, the two-pass fast interpreter loader in core/iwasm/interpreter/wasmloader.c can make inconsistent constant-table decisions between the sizing pass and the emitting pass. After duplicate constants...

simplify

Simplify Generic Android Deobfuscator Simplify virtually executes an app to understand its behavior and then tries to optimize the code so that it behaves identically but is easier for a human to understand. Each optimization type is simple and generic, so it doesn't matter what the specific type...

CVE-2026-99267

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...

CVE-2026-114116

A flaw was found in Vyper. An attacker contributing source code can manipulate constant values in compiled contracts by embedding non-standard line-break characters into comments, strings, or indentation. Because the compiler interprets these line breaks differently from the underlying language...

[SECURITY] Fedora 43 Update: rust-ctutils-0.4.5-1.fc43

Constant-time utility library with selection and equality testing support targeting cryptographic applications. Supports const fn where appropriate. Built on the cmov crate which provides architecture- specific predication intrinsics. Heavily inspired by the subtle crate...

[SECURITY] Fedora 44 Update: rust-ctutils-0.4.5-1.fc44

Constant-time utility library with selection and equality testing support targeting cryptographic applications. Supports const fn where appropriate. Built on the cmov crate which provides architecture- specific predication intrinsics. Heavily inspired by the subtle crate...

[SECURITY] Fedora 45 Update: rust-ctutils-0.4.5-1.fc45

Constant-time utility library with selection and equality testing support targeting cryptographic applications. Supports const fn where appropriate. Built on the cmov crate which provides architecture- specific predication intrinsics. Heavily inspired by the subtle crate...

CVE-2017-3000

CVE-2017-3000 A full exploit of CVE-2017-3000 on Flash Player Constant Blinding PRNG Insert WANG and wang into dynamically generated code heap in the end...

e-is-for-exploit-cve-2026-17543-php-pgsql-sql-injection-backslash-breakout

CVE-2026-17543 — SQL Injection in PHP ext/pgsql via E'...' Backslash Breakout Proof of concept for CVE-2026-17543 CVSS 9.8 Critical, CWE-89, a SQL injection vulnerability in PHP's procedural PostgreSQL extension. Vulnerability Summary pginsert, pgselect, pgupdate, pgdelete, and pgconvert all rout...

mlkem-native

mlkem-native mlkem-native is a secure, fast, and portable C90^C90 implementation of ML-KEM^FIPS203. It is a fork of the ML-KEM reference implementation^REF. All C code in mlkem/src/ and mlkem/src/fips202/, except for the backends for platforms other than AArch64 and x8664 and the debug code, is...

[SECURITY] Fedora 45 Update: rust-constant_time_eq-0.6.1-1.fc45

Compares two equal-sized byte strings in constant time...

fips203

NCC Group: FIPS 203 Module-Lattice-Based Key-Encapsulation Mechanism Standard FIPS 203 Initial Public Draft Module-Lattice-Based Key-Encapsulation Mechanism Standard written in pure Rust for server, desktop, browser and embedded applications. The source repository includes examples demonstrating...

CVE-2017-11499

Node.js-specific security flaws Constant Hashtable Seeds CVE-2017-11499 Node.js was susceptible to hash flooding remote DoS attacks as the HashTable seed was constant across a given released version of Node.js. This was a result of building with V8 snapshots enabled by default which caused the...

CVE-2023-4863

all credit goes to DARKNAVY's script. This is just a modified version with the OFFSET and VALUE constants added to the top of the file to make it easier to adjust...

GHSA-JC66-7Q78-782G Forge: PKCS#12 MAC forgery and constant-key PBE via zero iteration count

Summary forge.pkcs12.pkcs12FromAsn1 accepts a PKCS12 MAC iteration count of zero or less from the input, and the PKCS12 key derivation function then returns a constant key that does not depend on the password or salt. An attacker who does not know the password can modify a PKCS12/PFX file and...

Forge: PKCS#12 MAC forgery and constant-key PBE via zero iteration count

Summary forge.pkcs12.pkcs12FromAsn1 accepts a PKCS12 MAC iteration count of zero or less from the input, and the PKCS12 key derivation function then returns a constant key that does not depend on the password or salt. An attacker who does not know the password can modify a PKCS12/PFX file and...