Lucene search
+L

136 matches found

Kitploit
Kitploit
added 2026/09/14 6:36 a.m.6 views

CVE-2020-0601

CVE-2020-0601 PoC for CVE-2020-0601- Windows CryptoAPI Crypt32.dll POC: https://github.com/ollypwn/CurveBall On kali: 1.Make PKCS12 file root@kitploit: openssl req -new -x509 -key spoofedca.key -out spoofedca.crt openssl ecparam -name secp384r1 -genkey -noout -out Microsoft.key openssl req -new...

8.1CVSS7.4AI score0.89436EPSS
SaveExploits15References1
Kitploit
Kitploit
added 2026/09/13 8:43 p.m.7 views

Curveball

Curveball A PoC for CVE-2020-0601. A detailed blog post can be found here. This exploit allows you to create a fake trusted certificate by abusing how CryptoAPI handles certain parameters on ECC based certificates. Setup Clone the repository and open it in Visual Studio 2019. Switch to Release an...

8.1CVSS7.4AI score0.89436EPSS
SaveExploits15References1
Kitploit
Kitploit
added 2026/09/13 4:40 p.m.4 views

CurveBall

CurveBall CVE-2020-0601 - PoC CVE-2020-0601: Also known as CurveBall or ChainOffFools, is a vulnerability in the Microsoft CryptoApi specificly in Crypt32.dll where elliptic curve signatures ECDSA of certificates is not correctly verified. There is a very nice blog post here which explains the...

8.1CVSS7.3AI score0.89436EPSS
SaveExploits15
Kitploit
Kitploit
added 2026/09/13 7:06 a.m.7 views

chainoffools

CryptoAPI CVE-2020-0601: Explotación de la vulnerabilidad de suplantación de CryptoAPI de Windows. Más información en nuestro artículo de blog. Requisitos de instalación root@kitploit: pip install -U -r requirements.txt La generación de certificados funciona con OpenSSL versión hasta 1.0.2u...

8.1CVSS7.4AI score0.89436EPSS
SaveExploits15References1
NVD
NVD
added 2026/07/14 5:17 p.m.12 views

CVE-2026-55144

Missing cryptographic step in Windows CryptoAPI allows an authorized attacker to perform tampering locally...

7.1CVSS0.00225EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2026/07/14 5:05 p.m.8 views

CVE-2026-55144

Missing cryptographic step in Windows CryptoAPI allows an authorized attacker to perform tampering locally...

7.1CVSS6AI score0.00225EPSS
SaveExploits0References2Affected Software6
Microsoft CVE
Microsoft CVE
added 2026/07/14 2:00 p.m.25 views

Windows Cryptography API: Next Generation (CNG) Tampering Vulnerability

Missing cryptographic step in Windows CryptoAPI allows an authorized attacker to perform tampering locally...

7.1CVSS6.1AI score0.00225EPSS
SaveExploits0
Packet Storm News
Packet Storm News
added 2026/03/11 12:00 a.m.13 views

FP-Predictor - False Positive Prediction for Static Analysis Reports

Static Application Security Testing SAST tools play a vital role in modern software development by automatically detecting potential vulnerabilities in source code. However, their effectiveness is often limited by a high rate of false positives, which wastes developer's effort and undermines trus...

5.8AI score
SaveExploits0
EUVD
EUVD
added 2025/10/03 8:07 p.m.15 views

EUVD-2023-28924

Malicious code in bioql PyPI...

6.5CVSS7.1AI score0.02082EPSS
SaveExploits0References1
EUVD
EUVD
added 2025/10/03 8:07 p.m.13 views

EUVD-2023-39342

Malicious code in bioql PyPI...

7.5CVSS8AI score0.01886EPSS
SaveExploits0References1
EUVD
EUVD
added 2025/10/03 8:07 p.m.10 views

EUVD-2021-7146

Malicious code in bioql PyPI...

6.5CVSS6.8AI score0.03467EPSS
SaveExploits0References2
EUVD
EUVD
added 2025/10/03 8:07 p.m.10 views

EUVD-2023-28925

Malicious code in bioql PyPI...

6.5CVSS7.1AI score0.01985EPSS
SaveExploits0References1
OSV
OSV
added 2024/03/06 11:08 a.m.33 views

BIT-GOLANG-2020-0601

A spoofing vulnerability exists in the way Windows CryptoAPI Crypt32.dll validates Elliptic Curve Cryptography ECC certificates.An attacker could exploit the vulnerability by using a spoofed code-signing certificate to sign a malicious executable, making it appear the file was from a trusted,...

8.1CVSS7.8AI score0.89436EPSS
SaveExploits15References5
NVD
NVD
added 2023/07/11 6:15 p.m.24 views

CVE-2023-35339

Windows CryptoAPI Denial of Service Vulnerability...

7.5CVSS8.4AI score0.01886EPSS
SaveExploits0References1
Prion
Prion
added 2023/07/11 6:15 p.m.33 views

Denial of service

Windows CryptoAPI Denial of Service Vulnerability...

5CVSS7.4AI score0.01886EPSS
SaveExploits0References1Affected Software7
CVE
CVE
added 2023/07/11 5:02 p.m.118 views

CVE-2023-35339

CVE-2023-35339 is a Windows CryptoAPI Denial of Service vulnerability with a CVSS v3.1 base score of 7.5 (NETWORK, LOW attack complexity, NONE privileges, NONE user interaction, HIGH availability impact). The provided records do not specify affected versions, root cause details, exploitation stat...

7.5CVSS8.4AI score0.01886EPSS
SaveExploits0References1Affected Software10
Cvelist
Cvelist
added 2023/07/11 5:02 p.m.39 views

CVE-2023-35339 Windows CryptoAPI Denial of Service Vulnerability

...

7.5CVSS8.8AI score0.01886EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2023/07/11 5:02 p.m.33 views

CVE-2023-35339 Windows CryptoAPI Denial of Service Vulnerability

...

7.5CVSS7.5AI score0.01886EPSS
SaveExploits0References1
Microsoft CVE
Microsoft CVE
added 2023/07/11 7:00 a.m.37 views

Windows CryptoAPI Denial of Service Vulnerability

...

7.5CVSS8.2AI score0.01886EPSS
SaveExploits0
CNNVD
CNNVD
added 2023/07/11 12:00 a.m.18 views

Microsoft Windows CryptoAPI 安全漏洞

Microsoft Windows CryptoAPI is a cryptographic compiler added to the Windows operating system by Microsoft. CryptoAPI supports synchronous and asynchronous key encryption and the management of digital certificates in the operating system as the basis for data encryption and decryption functions. ...

7.5CVSS7.7AI score0.01886EPSS
SaveExploits0References3
Rows per page
Query Builder