bouncy-castle-generative-test-poc

Bouncy Castle 漏洞 CVE-2020-28052 的生成式测试 运行测试 测试存在漏洞的版本（默认为 1.66） root@kitploit: $ clojure -M:test $ clojure -M:test:v1.65 测试漏洞引入前的版本以及补丁后的版本 1.67 root@kitploit: $ clojure -M:test:v1.64 $ clojure -M:test:patched 链接 https://www.synopsys.com/blogs/software-security/cve-2020-28052-bouncy-castle/...

CVE-2025-29775

CVE-2025-29775 : The xml-crypto library for Node.js is vulnerable in versions prior to 6.0.1, 3.2.1, and 2.1.6. An attacker can modify a valid signed XML message in transit such that signature verification still passes, bypassing authentication/authorization checks and enabling privilege escalati...