14805 matches found
OpenSSL-1_0_1g_CVE-2016-0702
OpenSSL 1.0.1g 7 Apr 2014 Copyright c 1998-2011 The OpenSSL Project Copyright c 1995-1998 Eric A. Young, Tim J. Hudson All rights reserved. DESCRIPTION The OpenSSL Project is a collaborative effort to develop a robust, commercial-grade, fully featured, and Open Source toolkit implementing the...
CVE-2026-3161
IBM Cloud Pak System versions 2.3.6.0 and 2.3.6.1 are vulnerable to the use of weaker than expected cryptographic algorithms (CWE-327). This flaw could enable an attacker to decrypt highly sensitive information. Impact is rated as High for confidentiality. To remediate this vulnerability, IBM str...
CVE-2026-3161 IBM Cloud Pak System Risky Cryptographic Algorithm
IBM Cloud Pak System 2.3.6.0, and 2.3.6.1 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information...
CVE-2026-6719
IBM Concert versions 1.0 through 3.0.0 are vulnerable to the use of insufficiently random values (CWE-330). The software utilizes weaker than expected cryptographic algorithms, which could enable an attacker to decrypt highly sensitive information . No specific exploit details or remediation step...
CVE-2026-6719 IBM Concert Software Use of Insufficiently Random Values
IBM Concert 1.0 through 3.0.0 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information...
CVE-2026-6930 IBM Concert Software Risky Cryptographic Algorithm
IBM Concert 1.0 through 3.0.0 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information...
CVE-2026-6930
IBM Concert versions 1.0 through 3.0.0 are vulnerable to the use of weaker than expected cryptographic algorithms (CWE-327). This flaw could allow an attacker to decrypt highly sensitive information . No specific exploit details or remediation instructions are provided in the documents.
parsec-cloud
.. raw:: html Simple, secure, end-to-end encrypted file sharing in the cloud Parsec Parsec is a cloud-based application for simple and cryptographically secure file sharing. 🔐 Client-side E2EE to ensure your data is only accessed by you and the people you share it with. ✒️ Cryptographic signature...
sandfly-entropyscan
What is sandfly-entropyscan? sandfly-entropyscan is a utility to quickly scan files or running processes and report on their entropy measure of randomness and if they are a Linux/Unix ELF type executable. Some malware for Linux is packed or encrypted and shows very high entropy. This tool can...
CVE-2020-0688
CVE-2020-0688 Microsoft Exchange Server Fixed Cryptographic Key Remote Code Execution RCE Instead of having randomly-generated keys on a per-installation basis, all installations of Microsoft Exchange Server have the same validationKey and decryptionKey values in web.config. Thus, an authenticate...
radioguard
RadioGuard: Zero-Trust Cellular Defense Sub-Service for Android RadioGuard is an open-source, production-ready Android security application and background sub-service. It actively detects rogue cell towers IMSI-catchers / Cell-Site Simulators / SMS Blasters, identifies hostile 2G/4G cellular...
Cloak
Cloak is a pluggable transport that enhances traditional proxy tools like OpenVPN to evade sophisticated censorship and data discrimination. Cloak is not a standalone proxy program. Rather, it works by masquerading proxied traffic as normal web browsing activities. In contrast to traditional tool...
BIT-DOTNET-2026-96957 .NET Security Feature Bypass Vulnerability
Improper verification of cryptographic signature in .NET allows an unauthorized attacker to bypass a security feature over a network...
BIT-DOTNET-SDK-2026-96957 .NET Security Feature Bypass Vulnerability
Improper verification of cryptographic signature in .NET allows an unauthorized attacker to bypass a security feature over a network...
perl-CryptX
NAME CryptX - Cryptographic toolkit SYNOPSIS CryptX is the distribution entry point. In normal code, load one of the concrete modules listed below. one-shot hashing use Crypt::Digest qwdigestdatahex; my $sha256 = digestdatahex'SHA256', 'hello world'; classic AES-CBC encryption with padding use...
private-membership
Private Set Membership PSM Problem Statement Private Set Membership PSM is a cryptographic protocol that allows clients to privately query whether the client's identifier is a member of a set of identifiers held by a server in a privacy-preserving manner. At a high level, PSM provides the followi...
boringssl
BoringSSL BoringSSL is a fork of OpenSSL that is designed to meet Google's needs. Although BoringSSL is an open source project, it is not intended for general use, as OpenSSL is. We don't recommend that third parties depend upon it. Doing so is likely to be frustrating because there are no...
SymCrypt-OpenSSL
SCOSSL - The SymCrypt engine and provider for OpenSSL The SymCrypt engine and provider for OpenSSL SCOSSL allow the use of OpenSSL with SymCrypt as the provider for core cryptographic operations. The primary motivation for this is to support FIPS certification, as vanilla OpenSSL 1.1.1 does not...
edwards25519
filippo.io/edwards25519 import "filippo.io/edwards25519" This library implements the edwards25519 elliptic curve, exposing the necessary APIs to build a wide array of higher-level primitives. Read the docs at pkg.go.dev/filippo.io/edwards25519. The package tracks the upstream standard library...
badkeys
badkeys Tool and library to check cryptographic public keys for known vulnerabilities what? badkeys checks public keys in various formats for known vulnerabilities. A web version can be found at badkeys.info. install badkeys can be installed via pip: pip3 install badkeys You may want to use a...