PT-2026-103621

Name of the Vulnerable Software and Affected Versions iperf3 versions 3.20 through 3.21 Description A pre-authentication heap buffer overflow exists in the decrypt rsa message function. This occurs because a 256-byte RSA buffer is read using a ciphertext length controlled by the attacker, allowin...

PT-2018-18613

Name of the Vulnerable Software and Affected Versions Clavister cOS Core versions prior to 11.00.11 Clavister cOS Core versions 11.20.xx prior to 11.20.06 Clavister cOS Core versions 12.00.xx prior to 12.00.09 Description The issue allows remote attackers to decrypt RSA-encrypted nonces by...

SSL/TLS: Cross-protocol attack on TLS using SSLv2 (DROWN)

A padding oracle flaw was found in the Secure Sockets Layer version 2.0 SSLv2 protocol. An attacker could potentially use this flaw to decrypt RSA-encrypted cipher text from a connection using a newer SSL/TLS protocol version, allowing them to decrypt such connections. This cross-protocol attack ...