SDK-SMS-Stack

SMS Stack Sms Stack is a Framework to provide TPC/IP based characteristics to the GSM Short Message Service. This framework works in multiple environments to provide a full stack integration in a service. The main layer features techniques to control the order and the number of sms for a given...

stegcloak

StegCloak The Cloak of Invisibility for your texts StegCloak is a pure JavaScript steganography module designed in functional programming style, to hide secrets inside text by compressing and encrypting the secret before cloaking it with special unicode invisible characters. It can be used to...

stegcloak

StegCloak Il mantello dell'invisibilità per i tuoi testi StegCloak è un modulo puro di steganografia in JavaScript, progettato in stile di programmazione funzionale, per nascondere segreti all'interno del testo comprimendo e crittografando il segreto prima di camuffarlo con speciali caratteri...

tiny-AES-c

Tiny AES in C Questa è un'implementazione piccola e portabile degli algoritmi di cifratura AES ECB, CTR e CBC scritta in C. Puoi sostituire la dimensione predefinita della chiave di 128 bit con 192 o 256 bit definendo i simboli AES192 o AES256 in aes.h. L'API è molto semplice e si presenta così s...

can-ctr-escape-cve-2022-0492

Uma imagem de contêiner que testa se um ambiente de contêiner é vulnerável a escapes via CVE-2022-0492. Melhor executar sob um novo contêiner executando uma imagem criada com: root@kitploit: $ cd can-ctr-escape-cve-2022-0492 $ docker build -t can-ctr-escape-cve-2022-0492:latest . Uma imagem...

LiberationPlay-CVE-2025-24132-AirBourne-POC

LiberationPlay! CVE-2025-24132 AirBourne POC POC para CVE-2025-24132 AirBourne. Atualmente apenas desencadeia o estouro e causa uma falha. Em uma tentativa de obter acesso root à unidade principal do meu carro, pesquisei e compilei tudo o que aprendi sobre o exploit Airplay CVE-2025-24132 chamado...

NOW

NØW — Codificatore di Shellcode basato su Parole Codifica shellcode come prosa inglese dall'aspetto naturale. Decodificalo con la frase giusta + password. Cos'è NØW? NØW Natural Output Words è uno strumento in C che converte byte grezzi di shellcode in testo inglese leggibile dall'uomo — sia un...

psobf

PowerShell Obfuscator Il suo obiettivo è trasformare il codice per ostacolare l'analisi e le firme statiche, utile in laboratori e impegni autorizzati di Red Team/Pentesting. Supporta 6 livelli di offuscamento più un'architettura di trasformazioni/pipeline che consente di combinare tecniche come...

kernel: crypto: ccp - copy IV using skcipher ivsize

A flaw was found in the Linux kernel's cryptographic coprocessor CCP driver. When processing AFALG rfc3686-ctr-aes-ccp requests, the ccpaescomplete function attempts to restore more data than the allocated buffer for the Initialization Vector IV can hold. This leads to a buffer overrun, which can...

Astra Linux – Vulnerability in Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: crypto: qat – fix out-of-bounds read When preparing an AER-CTR request, the driver copies the key provided by the user into a data structure that is accessible by the firmware. If the target device is QAT GEN4, the key size is...

libkcapi: IV reuse in libkcapi one-shot symmetric cipher chunking causes cipher state reset across chunk boundaries

A flaw was found in libkcapi. When performing one-shot symmetric cipher operations on large inputs over 64 KiB in stateful modes such as Counter CTR or Cipher Block Chaining CBC, the library improperly reuses the Initialization Vector IV for each internal data chunk. A remote attacker could...

kernel: crypto: ccp - copy IV using skcipher ivsize

A flaw was found in the Linux kernel's cryptographic coprocessor CCP driver. When processing AFALG rfc3686-ctr-aes-ccp requests, the ccpaescomplete function attempts to restore more data than the allocated buffer for the Initialization Vector IV can hold. This leads to a buffer overrun, which can...

kernel: crypto: ccp - copy IV using skcipher ivsize

A flaw was found in the Linux kernel's cryptographic coprocessor CCP driver. When processing AFALG rfc3686-ctr-aes-ccp requests, the ccpaescomplete function attempts to restore more data than the allocated buffer for the Initialization Vector IV can hold. This leads to a buffer overrun, which can...

CVE-2026-74901

opensslencrypt versions before 1.4.0 contain an authentication bypass vulnerability in pqc.py where AES-GCM decryption failures trigger fallback to unauthenticated AES-CTR mode. Attackers can modify ciphertext in transit to bypass integrity verification and perform bit-flipping attacks without...

CVE-2026-74901 openssl_encrypt before 1.4.0 Authentication Bypass via AES-CTR Fallback

opensslencrypt versions before 1.4.0 contain an authentication bypass vulnerability in pqc.py where AES-GCM decryption failures trigger fallback to unauthenticated AES-CTR mode. Attackers can modify ciphertext in transit to bypass integrity verification and perform bit-flipping attacks without...

CVE-2026-74901 openssl_encrypt before 1.4.0 Authentication Bypass via AES-CTR Fallback

opensslencrypt versions before 1.4.0 contain an authentication bypass vulnerability in pqc.py where AES-GCM decryption failures trigger fallback to unauthenticated AES-CTR mode. Attackers can modify ciphertext in transit to bypass integrity verification and perform bit-flipping attacks without...

EUVD-2026-60118

opensslencrypt versions before 1.4.0 contain an authentication bypass vulnerability in pqc.py where AES-GCM decryption failures trigger fallback to unauthenticated AES-CTR mode. Attackers can modify ciphertext in transit to bypass integrity verification and perform bit-flipping attacks without...

CVE-2026-74901

The Python package openssl_encrypt (versions before 1.4.0) has a flaw in pqc.py : when AES-GCM decryption fails, the code silently falls back to unauthenticated AES-CTR mode. This removes integrity verification, allowing an attacker with network access to modify ciphertext in transit via bit-flip...

PT-2026-76635

openssl encrypt versions before 1.4.0 contain an authentication bypass vulnerability in pqc.py where AES-GCM decryption failures trigger fallback to unauthenticated AES-CTR mode. Attackers can modify ciphertext in transit to bypass integrity verification and perform bit-flipping attacks without...

EUVD-2026-59939

In the Linux kernel, the following vulnerability has been resolved: crypto: algifskcipher - force synchronous processing on trees without ctx-state The AIO/async path in skcipherrecvmsg passes the socket-wide ctx-iv directly into the skcipher request. After iosubmit the socket lock is dropped and...