EUVD-2026-91132

This vulnerability enables unauthenticated remote code execution RCE on a victim's machine by exploiting a combination of cryptographic weaknesses and memory management issues in the SConnect native host component. The attack leverages an unrestricted messaging interface between an...

SecureML

SecureAIML 🔐 Seguridad de Modelos de IA de Nivel Empresarial construida sobre OpenSSF Model Signing SecureAIML es el "Stripe de la seguridad de modelos": hace que la protección de modelos de IA de grado empresarial sea accesible, fácil de usar y lista para producción para todas las organizaciones...

CVE-2022-25012

CVE-2022-25012 El DVR de vigilancia Argus v4.0 emplea un cifrado de contraseña débil. Compilación gcc pocland.c -o pocland Ejemplo de uso ./pocland B4A1ECB4F539C48C7357F641C9C49083 Referencias CVE-2022-25012 Más PoCs disponibles en: pocland...

CVE-2026-71449

: Use of Hard-coded Cryptographic Key vulnerability in Johnson Controls EasyIO FS32 allows : Retrieve Embedded Sensitive Data. This issue affects EasyIO FS32: before 3.0b63...

CVE-2026-18397

This vulnerability enables unauthenticated remote code execution RCE on a victim's machine by exploiting a combination of cryptographic weaknesses and memory management issues in the SConnect native host component. The attack leverages an unrestricted messaging interface between an...

CVE-2026-18397

The SConnect native host component is vulnerable to unauthenticated remote code execution (RCE) . The flaw stems from a combination of cryptographic weaknesses and memory management issues , where an unrestricted messaging interface between an attacker-controlled web page and the native host allo...

CVE-2026-71449

The Johnson Controls EasyIO FS32 software contains a Use of Hard-coded Cryptographic Key vulnerability (CWE-321) affecting versions prior to 3.0b63 . The flaw stems from the use of a fixed secret key for encryption or decryption processes, which enables an attacker to retrieve embedded sensitive ...

CVE-2026-71449

: Use of Hard-coded Cryptographic Key vulnerability in Johnson Controls EasyIO FS32 allows : Retrieve Embedded Sensitive Data. This issue affects EasyIO FS32: before 3.0b63...

CVE-2026-71449

: Use of Hard-coded Cryptographic Key vulnerability in Johnson Controls EasyIO FS32 allows : Retrieve Embedded Sensitive Data. This issue affects EasyIO FS32: before 3.0b63...

BLEBoy

BLEBoy Goal Create a BLE peripheral that supports all BLE pairing methods that can be used for training and testing, including out-of-band OOB pairing. The perpiheral must be configurable and easy to re-create using consumer parts. About BLEBoy is a BLE peripheral implemented using the Adafruit...

manim-cranim

cranim Kit de herramientas de Manim para escenas criptográficas. Echa un vistazo a la galería de ejemplos: https://nccgroup.github.io/manim-cranim/ Instalación local: desde el directorio raíz del repositorio, ejecuta pip install -e . o pip install . si no esperas hacer cambios locales nunca. Este...

Openssl_V.1.1.1g

OpenSSL 1.1.1g 21 Apr 2020 Copyright c 1998-2020 The OpenSSL Project Copyright c 1995-1998 Eric A. Young, Tim J. Hudson Todos los derechos reservados. DESCRIPCIÓN El Proyecto OpenSSL es un esfuerzo colaborativo para desarrollar un conjunto de herramientas robusto, de calidad comercial, con todas...

deluded-openssl-3.2.0

Welcome to the OpenSSL Project !openssl logo !github actions ci badgegithub actions ci !appveyor badgeappveyor jobs OpenSSL is a robust, commercial-grade, full-featured Open Source Toolkit for the TLS formerly SSL, DTLS and QUIC currently client side only protocols. The protocol implementations a...

CVE-2026-31431-Copy-Fail

CVE-2026-31431 — "Copy Fail": Linux Kernel algifaead Local Privilege Escalation CISA KEV | CVSS 7.8 HIGH | Affects Linux kernels 4.14 – early 2026 9 years Table of Contents 1. Executive Summary 2. Risk Assessment 3. Technical Deep Dive 4. Attack Methodology — Red Team 5. Detection & Incident...

cve-2026-20833-rc4-kerberos

CVE-2026-20833 — Kerberos RC4 Hardening This repository consolidates technical documentation , PowerShell scripts , Power BI dashboards , and official Microsoft references related to the progressive deprecation of RC4 in Kerberos for Active Directory environments , as part of Microsoft's security...

demo-cve-2026-4821

Demo: CVE-2026-4821 Vulnerability Remediation This repository demonstrates how OpenExecution's provenance system tracks AI agent CVE remediation with full cryptographic auditability. Scenario Vulnerability : SQL injection in the authentication module Agent : sentinel-x9 CyberSafe Inc. Flow :...

dual-ec-drbg

Backdoor DualECDRBG: Prueba de concepto educativa Para profesionales de la seguridad | Solo con fines educativos ⚠️ Descargo de responsabilidad Este repositorio contiene una demostración educativa de la puerta trasera criptográfica DualECDRBG CVE-2014-8610, una vulnerabilidad bien documentada...

russh: russh: Cryptographic fallback bypass via missing public key validation

A flaw was found in russh. The library fails to validate peer public keys during hybrid cryptographic key exchange, accepting an all-zero key. A remote attacker acting as a malicious Secure Shell SSH peer can exploit this flaw during connection negotiation to force the classical encryption...

nexus-os

Nexus OS El Sistema Operativo de IA Agéntica Gobernado 66 Crates | 675 Comandos | 86 Páginas | 5,229 Pruebas | 10/10 OWASP | Cero Stubs Local-first. Aislable de red. Preparado para post-cuántico. Construido en Rust. Arquitectura | Inicio Rápido | Características | Estado de la Auditoría |...

CVE-2026-94212

Improper verification of cryptographic signature vulnerability in Apache APISIX. Any unauthenticated attacker could impersonate any user on every route protected by the saml-auth plugin under default configuration. This issue affects Apache APISIX: from 3.17.0 through 3.18.0. Users are recommende...