CVE-2025-29775

es-define-property Object.defineProperty, but not IE 8's broken one. Example const assert = require'assert'; const $defineProperty = require'es-define-property'; if $defineProperty assert.equal$defineProperty, Object.defineProperty; else if Object.defineProperty assert.equal$defineProperty, false...

mks-copy-fail-mitigation

Copy Fail Mitigation DaemonSets DaemonSets for fixing vulnerabilities of the Copy Fail family on all worker nodes of MKS clusters. Contents CVE-2026-31431 Copy Fail CVE-2026-43284, CVE-2026-43500, CopyFail2 Dirty Flag CVE-2026-31431 Copy Fail Vulnerability Description CVE ID: CVE-2026-31431 CVE...

crypto/tls: golang: Golang crypto/tls: Denial of Service via indefinite KeyUpdate messages

A flaw was found in the crypto/tls package, part of golang. A malicious client can exploit this vulnerability by continuously sending KeyUpdate messages to a server. This forces the server to perform indefinite key derivation operations, leading to resource exhaustion and a Denial of Service DoS...

crypto/tls: golang: Golang crypto/tls: Denial of Service via indefinite KeyUpdate messages

A flaw was found in the crypto/tls package, part of golang. A malicious client can exploit this vulnerability by continuously sending KeyUpdate messages to a server. This forces the server to perform indefinite key derivation operations, leading to resource exhaustion and a Denial of Service DoS...

crypto/tls: golang: Golang crypto/tls: Denial of Service via indefinite KeyUpdate messages

A flaw was found in the crypto/tls package, part of golang. A malicious client can exploit this vulnerability by continuously sending KeyUpdate messages to a server. This forces the server to perform indefinite key derivation operations, leading to resource exhaustion and a Denial of Service DoS...

ROOT-APP-GOBINARY-CVE-2025-58181 CVE-2025-58181 in golang.org/x/crypto - Patched by Root

Root has patched CVE-2025-58181 in the golang.org/x/crypto package for Root:Go. Multiple fixed versions available...

ROOT-APP-GOBINARY-CVE-2025-47914 CVE-2025-47914 in golang.org/x/crypto - Patched by Root

Root has patched CVE-2025-47914 in the golang.org/x/crypto package for Root:Go. Multiple fixed versions available...

ROOT-APP-GOBINARY-CVE-2025-47913 CVE-2025-47913 in golang.org/x/crypto - Patched by Root

Root has patched CVE-2025-47913 in the golang.org/x/crypto package for Root:Go. Multiple fixed versions available...

ROOT-APP-GOBINARY-CVE-2024-45337 CVE-2024-45337 in golang.org/x/crypto - Patched by Root

Root has patched CVE-2024-45337 in the golang.org/x/crypto package for Root:Go. Multiple fixed versions available...

ROOT-APP-GOBINARY-CVE-2025-22869 CVE-2025-22869 in golang.org/x/crypto - Patched by Root

Root has patched CVE-2025-22869 in the golang.org/x/crypto package for Root:Go. Multiple fixed versions available...

CVE-2026-97591

A flaw was found in the Linux kernel's s390 crypto subsystem. When processing Protected Key HMAC PHMAC operations, the driver improperly treats busy queue status codes from the cryptographic engine as failure conditions. A local user could exploit this flaw by submitting cryptographic requests...

bouncy-castle-generative-test-poc

Pruebas generativas de la vulnerabilidad de Bouncy Castle CVE-2020-28052 Ejecutar las pruebas Prueba las versiones vulnerables por defecto, 1.66 $ clojure -M:test $ clojure -M:test:v1.65 Prueba las versiones anteriores a la vulnerabilidad y posteriores al parche 1.67 $ clojure -M:test:v1.64 $...

ROS-20260929-73-0187

The vulnerability of the Linux operating system’s crypto kernel component is related to the use of an uninitialized resource. Exploiting this vulnerability could allow a attacker to cause a service failure...

ROS-20260929-73-0199

The vulnerability of the seqivaeadencrypt function in the crypto/seqiv.c module of the Linux kernel’s cryptography subsystem is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a system failure...

weakrng-sweep

barrido weak-rng clase CVE-2026-71851 Herramienta de investigación: enumera esquemas PRNG x semillas uint32, deriva carteras BIP39, comprueba pertenencia contra un conjunto de direcciones víctima investigación defensiva, estilo illbloom. Esquemas: 0-10 illbloom: MT19937/glibc/Java/LCG/xorshift,...

Important: Red Hat Security Advisory: kernel security, bug fix, and enhancement update

An update for kernel is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from th...

copy-fail-mcp

Copy Fail MCP 📖 Guía de instalación — inicio rápido, configuración manual y solución de problemas CVE-2026-31431 — La peor vulnerabilidad de Linux jamás descubierta. Ahora controlable mediante MCP. 732 bytes de Python. Sin compilación. Sin condición de carrera. Sin offsets por distribución. Un so...

git-remote-pqcrypt

git-remote-pqcrypt 这是一个实验性项目，尚未经过正式安全审计。请勿将其用于任何关键仓库。 git-remote-pqcrypt 是一个加密的 Git 远程助手，类似于 gcrypt。它以加密形式存储 Git packfile 和仓库元数据。访问时使用抗量子 XWing 封装。 当前 crate 版本：0.2.0。 工作原理 1. git-remote-pqcrypt init 创建仓库主密钥。 2. 每个用户的主密钥用其公钥进行封装。 3. Git packfile 和清单文件使用主密钥加密。 4. Git 通过 git-remote-pqcrypt 远程助手使用...

Important: Red Hat Security Advisory: kernel security, bug fix, and enhancement update

An update for kernel is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from t...

crypto/tls: crypto/tls: Incorrect certificate validation during TLS session resumption

A flaw was found in the crypto/tls component. This vulnerability occurs during Transport Layer Security TLS session resumption when certificate authority CA settings are modified between the initial and resumed handshakes. An attacker could exploit this to bypass certificate validation, allowing ...