131 matches found
Real Estate
Open Arsenal: Specifiche Immobiliari L'ecosistema immobiliare è costruito attorno all'idea di spostare l'intelligence immobiliare dalle piattaforme centralizzate di annunci verso ambienti dati auto-sovrani ospitati localmente. Invece di fare affidamento su piattaforme di terze parti per definire,...
password_generator
PassForge - CLI Generatore di Password All-in-One Un CLI generatore di password crittograficamente sicuro, pronto per la produzione, con 17 modalità di generazione, trasparenza dell'entropia e opzioni di personalizzazione complete. Caratteristiche 17 Modalità di Generazione...
cyph
Cyph Cyph è un servizio di messaggistica e social network crittograficamente sicuro, che offre un livello estremo di privacy combinato con la massima facilità d'uso. La tecnologia brevettata di Cyph — costruita da ex ingegneri SpaceX, verificata da Cure53 e alla base di presentazioni di ricerca a...
rustls
Rustls è una moderna libreria TLS scritta in Rust. Stato Rustls è usato in produzione in molte organizzazioni e progetti. Miriamo a mantenere una ragionevole stabilità della superficie API, ma l'API potrebbe evolversi man mano che apportiamo modifiche per introdurre nuove funzionalità o...
CVE-2026-74889 openssl_encrypt before 1.4.0 Weak Key Derivation via HKDF
opensslencrypt versions before 1.4.0 use HKDF with no salt and static info parameter in key normalization functions, reducing entropy extraction and determinism. Attackers can exploit predictable key derivation with identical inputs to weaken cryptographic security against multi-target attacks...
CVE-2026-74889 openssl_encrypt before 1.4.0 Weak Key Derivation via HKDF
opensslencrypt versions before 1.4.0 use HKDF with no salt and static info parameter in key normalization functions, reducing entropy extraction and determinism. Attackers can exploit predictable key derivation with identical inputs to weaken cryptographic security against multi-target attacks...
SUSE-SU-2026:3460-1 Security update for python-urwid
This update for python-urwid fixes the following issue: - CVE-2026-9323: web session IDs generated by Screen.start are not cryptographically secure bsc1271868...
SUSE SLED15 / SLES15 Security Update : python-urwid (SUSE-SU-2026:3425-1)
The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2026:3425-1 advisory. This update for python-urwid fixes the following issue CVE-2026-9323: web session IDs generated by Screen.start are not...
Security update for python-urwid
This update for python-urwid fixes the following issue CVE-2026-9323: web session IDs generated by Screen.start are not cryptographically secure bsc1271868. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch"...
UBUNTU-CVE-2026-9638
Crypt::PBKDF2 versions before 0.261630 for Perl generate insecure random values for salts. These versions use the built-in rand function, which is predictable and unsuitable for cryptography...
AI-Driven Adaptive Adversaries and the Erosion of Cryptographic Trust in Public Key Systems
This paper examines the erosion of Public Key Cryptography PKC security under adaptive adversarial optimisation driven by artificial intelligence. The problem addressed is the growing mismatch between algorithm-centric cryptographic security models and operational attack realities, where...
CVE-2026-8700
A flaw was found in perl-Crypt-DSA. This vulnerability occurs because the software generates cryptographic seeds using Perl's built-in rand function, which is predictable and unsuitable for security-sensitive operations. An attacker could potentially leverage this predictability to weaken the...
PT-2026-23125
Name of the Vulnerable Software and Affected Versions Net::NSCA::Client versions through 0.009002 Description Net::NSCA::Client for Perl utilizes an inadequate random number generator. Version 0.003 transitioned to using Data::Rand::Obscure instead of Crypt::Random for generating initialization...
CVE-2025-68704 Jervis has a Weak Random for Timing Attack Mitigation
Jervis is a library for Job DSL plugin scripts and shared Jenkins pipeline libraries. Prior to 2.2, Jervis uses java.util.Random which is not cryptographically secure for timing attack mitigation. This vulnerability is fixed in 2.2...
PT-2026-2497
Jervis is a library for Job DSL plugin scripts and shared Jenkins pipeline libraries. Prior to 2.2, Jervis uses java.util.Random which is not cryptographically secure for timing attack mitigation. This vulnerability is fixed in 2.2...
The Jasmin Compiler Preserves Cryptographic Security
Jasmin is a programming and verification framework for developing efficient, formally verified, cryptographic implementations. A main component of the framework is the Jasmin compiler, which empowers programmers to write efficient implementations of state-of-the-art cryptographic primitives,...
EUVD-2021-16268
Malware in sbrugna...
EUVD-2021-11910
Malware in sbrugna...