Lucene search
+L

131 matches found

Kitploit
Kitploit
added 2026/09/13 5:58 a.m.10 views

cyph

Cyph Cyph es un servicio de mensajería y redes sociales criptográficamente seguro, que proporciona un nivel extremo de privacidad combinado con la facilidad de uso de primer nivel. La tecnología patentada de Cyph construida por ex ingenieros de SpaceX, auditada por Cure53 y base de presentaciones...

5.9AI score
SaveExploits0References2
Kitploit
Kitploit
added 2026/09/12 9:16 p.m.8 views

password_generator

PassForge - All-in-One Password Generator CLI A production-ready, cryptographically secure password generator CLI with 17 generation modes, entropy transparency, and comprehensive customization options. Features 17 Generation Modes...

5.9AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/12 10:39 a.m.14 views

rustls

Rustls는 Rust로 작성된 현대적인 TLS 라이브러리입니다. 상태 Rustls는 많은 조직과 프로젝트에서 프로덕션 환경으로 사용되고 있습니다. 합리적인 API 표면 안정성을 유지하는 것을 목표로 하지만, 새로운 기능이나 성능 개선을 수용하기 위해 변경을 가하면서 API는 발전할 수 있습니다. 향후 계획에 대한 로드맵이 있습니다. 또한 성능 회귀를 방지하고 대상 하드웨어에서 rustls를 평가할 수 있도록 벤치마크도 제공합니다. 기여하고 싶다면 CONTRIBUTING.md를 참조하세요. 관리자들은 "rustls"를...

5.9AI score
SaveExploits0References19
Kitploit
Kitploit
added 2026/09/11 11:35 a.m.6 views

Real Estate

Open Arsenal Real Estate Specifications The real estate ecosystem is built around the idea of shifting property intelligence away from centralized listing platforms and into locally hosted, self-sovereign data environments. Instead of relying on third-party platforms to define, store, or interpre...

5.9AI score
SaveExploits0References1
Cvelist
Cvelist
added 2026/08/17 11:04 a.m.49 views

CVE-2026-74889 openssl_encrypt before 1.4.0 Weak Key Derivation via HKDF

opensslencrypt versions before 1.4.0 use HKDF with no salt and static info parameter in key normalization functions, reducing entropy extraction and determinism. Attackers can exploit predictable key derivation with identical inputs to weaken cryptographic security against multi-target attacks...

9.8CVSS0.00201EPSS
SaveExploits0References2
OSV
OSV
added 2026/08/17 11:04 a.m.15 views

CVE-2026-74889 openssl_encrypt before 1.4.0 Weak Key Derivation via HKDF

opensslencrypt versions before 1.4.0 use HKDF with no salt and static info parameter in key normalization functions, reducing entropy extraction and determinism. Attackers can exploit predictable key derivation with identical inputs to weaken cryptographic security against multi-target attacks...

9.3CVSS5.4AI score
SaveExploits0References4
OSV
OSV
added 2026/08/03 12:11 p.m.7 views

SUSE-SU-2026:3460-1 Security update for python-urwid

This update for python-urwid fixes the following issue: - CVE-2026-9323: web session IDs generated by Screen.start are not cryptographically secure bsc1271868...

9.2CVSS5.5AI score0.00421EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2026/07/31 12:00 a.m.10 views

SUSE SLED15 / SLES15 Security Update : python-urwid (SUSE-SU-2026:3425-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2026:3425-1 advisory. This update for python-urwid fixes the following issue CVE-2026-9323: web session IDs generated by Screen.start are not...

9.2CVSS6AI score0.00421EPSS
SaveExploits0References4
SUSE Linux
SUSE Linux
added 2026/07/30 11:11 a.m.16 views

Security update for python-urwid

This update for python-urwid fixes the following issue CVE-2026-9323: web session IDs generated by Screen.start are not cryptographically secure bsc1271868. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch"...

8.1CVSS5.9AI score0.00421EPSS
SaveExploits0References4
OSV
OSV
added 2026/06/12 4:16 p.m.17 views

UBUNTU-CVE-2026-9638

Crypt::PBKDF2 versions before 0.261630 for Perl generate insecure random values for salts. These versions use the built-in rand function, which is predictable and unsuitable for cryptography...

7.5CVSS5.2AI score0.00305EPSS
SaveExploits0References6
Packet Storm News
Packet Storm News
added 2026/05/23 12:00 a.m.24 views

AI-Driven Adaptive Adversaries and the Erosion of Cryptographic Trust in Public Key Systems

This paper examines the erosion of Public Key Cryptography PKC security under adaptive adversarial optimisation driven by artificial intelligence. The problem addressed is the growing mismatch between algorithm-centric cryptographic security models and operational attack realities, where...

5.8AI score
SaveExploits0
RedhatCVE
RedhatCVE
added 2026/05/18 5:31 p.m.17 views

CVE-2026-8700

A flaw was found in perl-Crypt-DSA. This vulnerability occurs because the software generates cryptographic seeds using Perl's built-in rand function, which is predictable and unsuitable for security-sensitive operations. An attacker could potentially leverage this predictability to weaken the...

7.3CVSS5.7AI score0.00355EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2026/03/05 12:00 a.m.14 views

PT-2026-23125

Name of the Vulnerable Software and Affected Versions Net::NSCA::Client versions through 0.009002 Description Net::NSCA::Client for Perl utilizes an inadequate random number generator. Version 0.003 transitioned to using Data::Rand::Obscure instead of Crypt::Random for generating initialization...

9.1CVSS5.8AI score0.00409EPSS
SaveExploits0References9
OSV
OSV
added 2026/01/13 7:29 p.m.13 views

CVE-2025-68704 Jervis has a Weak Random for Timing Attack Mitigation

Jervis is a library for Job DSL plugin scripts and shared Jenkins pipeline libraries. Prior to 2.2, Jervis uses java.util.Random which is not cryptographically secure for timing attack mitigation. This vulnerability is fixed in 2.2...

8.2CVSS6.7AI score
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2026/01/13 12:00 a.m.18 views

PT-2026-2497

Jervis is a library for Job DSL plugin scripts and shared Jenkins pipeline libraries. Prior to 2.2, Jervis uses java.util.Random which is not cryptographically secure for timing attack mitigation. This vulnerability is fixed in 2.2...

8.2CVSS6.8AI score0.00268EPSS
SaveExploits0References4
Packet Storm News
Packet Storm News
added 2025/11/14 12:00 a.m.15 views

The Jasmin Compiler Preserves Cryptographic Security

Jasmin is a programming and verification framework for developing efficient, formally verified, cryptographic implementations. A main component of the framework is the Jasmin compiler, which empowers programmers to write efficient implementations of state-of-the-art cryptographic primitives,...

6.8AI score
SaveExploits0
EUVD
EUVD
added 2025/10/07 12:30 a.m.12 views

EUVD-2021-11910

Malware in sbrugna...

7.5CVSS7.5AI score0.01186EPSS
SaveExploits0References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.12 views

EUVD-2019-11480

Malware in sbrugna...

5.5CVSS5.5AI score0.00216EPSS
SaveExploits0References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.11 views

EUVD-2021-16268

Malware in sbrugna...

7.5CVSS6.1AI score0.0071EPSS
SaveExploits0References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.13 views

EUVD-2017-16653

Malware in sbrugna...

8.1CVSS8.2AI score0.01682EPSS
SaveExploits0References2
Rows per page
Query Builder