CVE-2026-102273: Improper Verification of Cryptographic Signature

PyJWT is a Python implementation of JSON Web Token standards. From 2.13.0 until 2.14.0, PyJWT HMACAlgorithm.preparekey is affected because HMAC key guard only recognizes top-level public JWK forms and misses container representations. This occurs when an application allows HMAC and asymmetric...

CVE-2026-102266: Improper Verification of Cryptographic Signature

PyJWT is a Python implementation of JSON Web Token standards. From 2.13.0 until 2.14.0, HMACAlgorithm.fromjwk is affected because PyJWK verification path used the decoded key without applying preparekey validation. This occurs when a trusted JWK Set contains an oct entry with an empty k value. As...

telerik-scanner-cve-2017-9248

Scanner de vulnérabilité Telerik CVE-2017-9248 V2.0 Un scanner Python complet qui découvre les points de terminaison Telerik et teste la vulnérabilité cryptographique CVE-2017-9248 avec des capacités de scan en masse de niveau entreprise. Fonctionnalités Modes rapide et découverte : test d'un...

tink

Tink ПРИМЕЧАНИЕ : Tink переехал на github.com/tink-crypto, и этот репозиторий больше не активен! Как и планировалось, мы разделили Tink на несколько репозиториев GitHub, размещённых на github.com/tink-crypto. В связи с этим мы сделали этот репозиторий доступным только для чтения, и в дальнейшем о...

CVE-2020-0688

CVE-2020-0688 CVE-2020-0688: Удаленное выполнение кода на Microsoft Exchange Server через фиксированные криптографические ключи Как запустить ysonet.exe: скачайте отсюда Запустите HTTP-сервер: python3 -m http.server 8000 Измените targeturl и ваш IP-адрес в команде pwsh. Установите все зависимости...

CVE-2024-29050

CVE-2024-29050 CVE-2024-29050 — это уязвимость безопасности в криптографических службах Windows, особенно в том, как обрабатываются сертификаты во время криптографических операций. Проблема вызвана целочисленным переполнением, которое происходит, когда вычисления над данными, такими как размеры...

CACredDecoder

Décodeur de crédentiel C-Ark Outil d'exploitation pour CVE-2021-31796 Un outil pour décoder les fichiers de crédentiel C-Ark Par : Aaron Mizrachi - https://twitter.com/unmanarc/ Enrique Vaamonde - https://twitter.com/ejvm Première version : 2/Sep/2019 Divulgation : 11/Oct/2021 Références...

CVE-2020-0601

Chaîne des Fools alias CurveBall alias CVE-2020-0601 Collection de ressources sur CVE-2020-0601 ChainOfFools | CurveBall Général Un résumé de l'avis de la NSA indique. La NSA a découvert une vulnérabilité critique CVE-2020-0601 affectant les fonctionnalités cryptographiques de Microsoft Windows®1...

DEBIAN-CVE-2026-89133

wolfSSL versions 5.9.2 and earlier contain a flaw in the X.509 certificate validation logic where it fails to properly enforce NameConstraints extensions when there is an unconstrained CA tier between a name-constrained intermediate CA and the leaf certificate. wolfSSL incorrectly accepted...

CVE-2026-89133

wolfSSL versions 5.9.2 and earlier contain a flaw in the X.509 certificate validation logic where it fails to properly enforce NameConstraints extensions when there is an unconstrained CA tier between a name-constrained intermediate CA and the leaf certificate. wolfSSL incorrectly accepted...

AZL-105176 CVE-2026-89133 affecting package mariadb 10.11.19-1

wolfSSL versions 5.9.2 and earlier contain a flaw in the X.509 certificate validation logic where it fails to properly enforce NameConstraints extensions when there is an unconstrained CA tier between a name-constrained intermediate CA and the leaf certificate. wolfSSL incorrectly accepted...

UBUNTU-CVE-2026-89133

wolfSSL versions 5.9.2 and earlier contain a flaw in the X.509 certificate validation logic where it fails to properly enforce NameConstraints extensions when there is an unconstrained CA tier between a name-constrained intermediate CA and the leaf certificate. wolfSSL incorrectly accepted...

EUVD-2026-87922

wolfSSL versions 5.9.2 and earlier contain a flaw in the X.509 certificate validation logic where it fails to properly enforce NameConstraints extensions when there is an unconstrained CA tier between a name-constrained intermediate CA and the leaf certificate. wolfSSL incorrectly accepted...

CVE-2026-89133 NameConstraints not enforced across unconstrained intermediate CA

wolfSSL versions 5.9.2 and earlier contain a flaw in the X.509 certificate validation logic where it fails to properly enforce NameConstraints extensions when there is an unconstrained CA tier between a name-constrained intermediate CA and the leaf certificate. wolfSSL incorrectly accepted...

CVE-2026-89133

wolfSSL versions 5.9.2 and earlier are vulnerable to a flaw in the X.509 certificate validation logic . A chain-walking state-machine bug causes the library to fail to enforce NameConstraints extensions when an unconstrained CA tier exists between a name-constrained intermediate CA and the leaf c...

CVE-2026-89133

wolfSSL versions 5.9.2 and earlier contain a flaw in the X.509 certificate validation logic where it fails to properly enforce NameConstraints extensions when there is an unconstrained CA tier between a name-constrained intermediate CA and the leaf certificate. wolfSSL incorrectly accepted...

CVE-2026-89133 NameConstraints not enforced across unconstrained intermediate CA

wolfSSL versions 5.9.2 and earlier contain a flaw in the X.509 certificate validation logic where it fails to properly enforce NameConstraints extensions when there is an unconstrained CA tier between a name-constrained intermediate CA and the leaf certificate. wolfSSL incorrectly accepted...

CVE-2026-89133 NameConstraints not enforced across unconstrained intermediate CA

wolfSSL versions 5.9.2 and earlier contain a flaw in the X.509 certificate validation logic where it fails to properly enforce NameConstraints extensions when there is an unconstrained CA tier between a name-constrained intermediate CA and the leaf certificate. wolfSSL incorrectly accepted...

OpenSSL-2022

Vulnérabilité OpenSSL 2022 - CVE-2022-3602/CVE-2022-3786 Ce dépôt contient des informations opérationnelles concernant CVE-2022-3602 et CVE-2022-3786, deux vulnérabilités dans OpenSSL 3.0.0-3.0.6. Pour plus d'informations, voir : Avis de sécurité OpenSSL FAQ du blog OpenSSL Avis CERT-Bund DE Avis...

paranoid_crypto

Проект Paranoid Обзор Проект Paranoid проверяет криптографические артефакты, такие как открытые ключи, цифровые подписи и псевдослучайные числа общего назначения, на наличие известных слабостей. Эта библиотека содержит реализации и оптимизации существующих работ из литературы. Эти работы показали...