KeePass-TriggerLess

KeePass-TriggerLess KeePass 2.53.1 con el sistema de activación ECAS eliminado que soluciona CVE-2023-24055...

keepass_CVE-2023-24055_yara_rule

keepassCVE-2023-24055yararule Contiene una regla yara simple para buscar posibles archivos de configuración de KeePass comprometidos Cómo usar Use un escáner de reglas yara, como yara, loki o thor-lite para escanear sistemas con esta regla. La ubicación predeterminada del archivo de configuración...

Updated keepass packages fix security vulnerability

Allows an attacker, who has write access to the XML configuration file, to obtain the cleartext passwords by adding an export trigger. Disputed by vendor due to level of access required. CVE-2023-24055 Possible to recover the cleartext master password from a memory dump, even when a workspace is...

CVE-2023-24055

creationtimestamp| type| source ---|---|--- 2023-01-24 22:52:22+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/3705 2023-01-25 00:08:13+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/3708 2023-01-26 05:22:21+00:00| published-proof-of-concept|...

Exploit for Cleartext Storage of Sensitive Information in Keepass

CVE-2023-24055 POC and Scanner for CVE-2023-24055 Use at your...

CVE-2023-24055

CVE-2023-24055 affects KeePass up to version 2.53 where an attacker with write access to KeePass.config.xml can trigger an export and exfiltrate cleartext passwords. Evidence and discussion appear in NVD/NVD-derived entries, OSS advisories, Mageia MGASA-2023-0221 (fix/update discussions), OSV- MG...