Security update for amazon-ssm-agent

This update for amazon-ssm-agent fixes the following issue: CVE-2026-56854: golang.org/x/crypto/ssh: source-address restriction bypassed in 5 callback families bsc1278681 CVE-2026-56855: golang.org/x/crypto/ssh: prevent DoS on deadlocked established channel bsc1278681 CVE-2026-78662:...

SUSE-SU-2026:4372-1 Security update for amazon-ssm-agent

This update for amazon-ssm-agent fixes the following issue: - CVE-2026-56854: golang.org/x/crypto/ssh: source-address restriction bypassed in 5 callback families bsc1278681 - CVE-2026-56855: golang.org/x/crypto/ssh: prevent DoS on deadlocked established channel bsc1278681 - CVE-2026-78662:...

CVE-2026-31431

CVE-2026-31431 复制失败 - CVE-2026-31431 详情 https://nvd.nist.gov/vuln/detail/CVE-2026-31431 https://copy.fail/exploit https://xint.io/blog/copy-fail-linux-distributions 测试发行版 / 版本 发行版| 版本 ---|--- Ubuntu 24.04 LTS| 6.17.0-1007-aws Amazon Linux 2023| 6.18.8-9.213.amzn2023 RHEL 10.1| 6.12.0-124.45.1.el1...

CVE-2022-21449-TLS-PoC

CVE-2022-21449-TLS-PoC CVE-2022-21449（在 Neil Madden 的漏洞分析文章中也被称为“Psychic Signatures”）的概念验证，演示了如何将其用于易受攻击的客户端和恶意 TLS 服务器。 恶意服务器展示了一个截至 2022-04-20 对 www.google.com 有效的证书链，该证书链带有 ECDSA 公钥（secp256r1）。但是，crypto/ecdsa 包已被修改为提供 r = s = 0 的无效签名。易受攻击的客户端接受此无效签名，从而使 TLS 握手能够继续进行。 除了在构建和探索过程中移除的 test.go...

Python Security Project

🔐 デスクトップ暗号化ファイル暗号化・復号化ツール ローカルファイルシステムの資産を認証付き対称暗号化を通じて保護するために設計された、本番グレードのPythonデスクトップセキュリティユーティリティです。このアプリケーションは、Tkinterで構築されたレスポンシブなグラフィカルユーザーインターフェース（GUI）、独立した暗号化エンジン、構造化された診断ロギングを備えています。 暗号化ロジック 暗号化 : 平文 + 秘密鍵 ── 暗号文 復号化 : 暗号文 + 同じ秘密鍵 ── 平文 🚀 主な機能 Tkinterデスクトップインターフェース :...

Xworm RAT

XWorm-RAT V2.1 ⚠️注意: このツールはセキュリティ研究専用に作成・配布されています。違法行為に使用しないでください。 無料で入手できる有名なXWorm RATです。一般的なRAT機能をすべて備えています。気に入ったら、このリポジトリにスター⭐️をお願いします。 アーカイブは保護されています。パスワード: 431423128 機能: ⭐️ファイル実行: 🔹ディスクから 🔹リンクから 🔹メモリから 🔹RunPE ⭐Webカメラ ⭐️マイク ⭐️システムサウンド ⭐️URLを開く 🔹表示 🔹非表示 ⭐️オプション 🔹Windows Defender無効化 🔹WD削除 🔹WD除外...

Important: Red Hat Security Advisory: git-lfs security update

An update for git-lfs is now available for Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

crypto/x509: crypto/tls: golang: Go: Denial of Service vulnerability in certificate chain building

A flaw was found in the Go standard library packages crypto/x509 and crypto/tls. During the process of building a certificate chain, an attacker can provide a large number of intermediate certificates. This excessive input is not properly limited, leading to an uncontrolled amount of work being...

crypto/tls: golang: Go crypto/tls: Denial of Service via multiple TLS 1.3 key update messages

A flaw was found in the crypto/tls package within the Go golang standard library, specifically affecting TLS 1.3 connections. A remote attacker can exploit this vulnerability by sending multiple key update messages in a single record after the handshake. This can cause the connection to deadlock,...

crypto/tls: golang: Golang crypto/tls: Denial of Service via indefinite KeyUpdate messages

A flaw was found in the crypto/tls package, part of golang. A malicious client can exploit this vulnerability by continuously sending KeyUpdate messages to a server. This forces the server to perform indefinite key derivation operations, leading to resource exhaustion and a Denial of Service DoS...

crypto/x509: golang: Go crypto/x509: Denial of Service via inefficient certificate chain validation

A flaw was found in Go's crypto/x509 package. A remote attacker could exploit this by presenting a specially crafted certificate chain containing a large number of policy mappings. This inefficient validation process consumes excessive resources, which can lead to a denial of service DoS for...

crypto/tls: crypto/tls: Incorrect certificate validation during TLS session resumption

A flaw was found in the crypto/tls component. This vulnerability occurs during Transport Layer Security TLS session resumption when certificate authority CA settings are modified between the initial and resumed handshakes. An attacker could exploit this to bypass certificate validation, allowing ...

ALSA-2026:72623 Important: kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: ext4: fix e4b bitmap inconsistency reports CVE-2026-45942 kernel: RDMA/rxe: Fix iova-to-va conversion for MR page sizes != PAGESIZE CVE-2026-46325 kernel: crypto: afalg - Cap AEAD AD leng...

Important: kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: ext4: fix e4b bitmap inconsistency reports CVE-2026-45942 kernel: RDMA/rxe: Fix iova-to-va conversion for MR page sizes != PAGESIZE CVE-2026-46325 kernel: crypto: afalg - Cap AEAD AD leng...

Copy-Fail-CVE-2026-31431-dirty-frag-CVE-2026-43284

远程 git clone https://github.com/6abc/Copy-Fail-CVE-2026-31431-dirty-frag-CVE-2026-43284.git && cd Copy-Fail-CVE-2026-31431-dirty-frag-CVE-2026-43284 && gcc -O0 -Wall -o exp exp.c -lutil && ./exp git clone https://github.com/6abc/Copy-Fail-CVE-2026-31431-dirty-frag-CVE-2026-43284.git && cd...

CVE-2023-29409

CVE-2023-29409 $ openssl genrsa -out ca-key.pem 2048 $ openssl req -x509 -new -nodes -key ca-key.pem -sha256 -days 100000 -out ca.pem \ -addext 'keyUsage=keyCertSign' \ -subj '/CN=Root CA' $ go run main.go server in the background $ go run main.go client causes high cpu load on client $ go run...

CVE-2025-40019-POC

CVE-2025-40019 概念验证 CVE-2025-40019 是加密盐扇区初始化向量机制（crypto/essiv.c）中的一个漏洞，该机制对关联认证数据（AAD）长度相对于初始化向量（IV）大小的验证不足，导致越界内存访问。 此仓库中的代码仅为漏洞触发程序，但该漏洞易于利用。 KernelCTF 参赛记录 我在 kernelctf 的电子表格中发现了这个漏洞 链接。由于该漏洞没有相关的博客文章或 PoC，我决定探索 Linux 内核的加密子系统，以查明问题原因。 背景：磁盘加密理论与 ESSIV 要理解 ESSIV 的必要性，我们必须先了解数据在磁盘上的存储方式。磁盘加密（如...

Astra Linux – Vulnerability found in Linux 6.1, Linux 6.12

In the Linux kernel, the following vulnerability has been resolved: net/tls: The use-after-free issue in the -EBUSY error handling path of tlsdoencryption has been fixed. The -EBUSY handling in tlsdoencryption, introduced with commit 859054147318 “net: tls: handle backlogging of crypto requests”,...

CVE-2025-40019-Essiv

CVE-2025-40019-Essiv ESSIV 模块中 CVE-2025-40019 的 PoC。（漏洞利用仍在开发中） 在利用时，请注意 scatterlist（req-src 和 req-dst）具有 pagelink 成员。据我所知，pagelink 是一种将 sg 表信息与 page 指针一起编码的方式： gdb ptype struct scatterlist type = struct scatterlist unsigned long pagelink; unsigned int offset; unsigned int length; dmaaddrt...

cryptohackfirm

Cryptohack A semi-secure, hacker-friendly hardware crypto wallet on the hip-badge ESP32-C3 platform with the onboard ATECC608B secure element. Signs transactions for BTC , ETH + 8 EVM chains, SOL , and XMR with an on-device SIGN screen the user has to approve before any private key touches the...