CVE-2026-65198

Huawei's openUBMC software ships with a hard-coded default SNMPv3 USM key used for both authentication and privacy. Because these keys are shipped as constants and are not rotated by the Administrator password reset, an attacker who recovers the key from the open-source build can authenticate to ...

EUVD-2026-98750

Huawei's openUBMC ships a default SNMPv3 USM key that uses one value for both authentication and privacy. An attacker who holds the key recoverable from the open-source build can authenticate SNMPv3 to, and decrypt SNMPv3 traffic from, any unit that still carries the shipped key. The build...

CVE-2026-65198 Huawei Default SNMPv3 USM key

Huawei's openUBMC ships a default SNMPv3 USM key that uses one value for both authentication and privacy. An attacker who holds the key recoverable from the open-source build can authenticate SNMPv3 to, and decrypt SNMPv3 traffic from, any unit that still carries the shipped key. The build...

DEBIAN-CVE-2026-109976

A flaw was found in the clevis PKCS11 pin. The clevis-pkcs11-afunix-socket-unlock daemon crashes when an AFUNIX client connects to the data socket without a bound address, due to an integer underflow in the getpeername result handling. This causes a denial of service, preventing LUKS disk...

CVE-2026-109976

A flaw was found in the clevis PKCS11 pin. The clevis-pkcs11-afunix-socket-unlock daemon crashes when an AFUNIX client connects to the data socket without a bound address, due to an integer underflow in the getpeername result handling. This causes a denial of service, preventing LUKS disk...

CVE-2026-109976

A flaw was found in the clevis PKCS11 pin. The clevis-pkcs11-afunix-socket-unlock daemon crashes when an AFUNIX client connects to the data socket without a bound address, due to an integer underflow in the getpeername result handling. This causes a denial of service, preventing LUKS disk...

UBUNTU-CVE-2026-109976

A flaw was found in the clevis PKCS11 pin. The clevis-pkcs11-afunix-socket-unlock daemon crashes when an AFUNIX client connects to the data socket without a bound address, due to an integer underflow in the getpeername result handling. This causes a denial of service, preventing LUKS disk...

PT-2026-111596

Huawei's openUBMC ships a default SNMPv3 USM key that uses one value for both authentication and privacy. An attacker who holds the key recoverable from the open-source build can authenticate SNMPv3 to, and decrypt SNMPv3 traffic from, any unit that still carries the shipped key. The build...

CVE-2026-109976: Out-of-bounds Write

A flaw was found in the clevis PKCS11 pin. The clevis-pkcs11-afunix-socket-unlock daemon crashes when an AFUNIX client connects to the data socket without a bound address, due to an integer underflow in the getpeername result handling. This causes a denial of service, preventing LUKS disk...

CVE-2026-65198: Use of Hard-coded Cryptographic Key

Huawei's openUBMC ships a default SNMPv3 USM key that uses one value for both authentication and privacy. An attacker who holds the key recoverable from the open-source build can authenticate SNMPv3 to, and decrypt SNMPv3 traffic from, any unit that still carries the shipped key. The build...

Red Hat Enterprise Linux buffer error vulnerability

Red Hat Enterprise Linux versions 10 and 9 have a buffer error vulnerability. This vulnerability stems from integer underflow in the processing of the getpeername result from the clevis PKCS11 pin library. When an AFUNIX client connects to a data socket without binding an address, it can cause th...

poppler: poppler: Denial of Service via stack-based buffer overflow in PDF decryption

A flaw was found in Poppler. A stack-based buffer overflow vulnerability exists in the decryption routine when processing encrypted PDF documents. By providing an overly long password during document decryption, an attacker can overwrite memory buffers. This issue primarily leads to a Denial of...

EulerOS 2.0 SP11 : openssl (EulerOS-SA-2026-4264)

According to the versions of the openssl packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Issue summary: When CMS password-based decryption RFC 3211 / PWRI key unwrap processes attacker-supplied CMS data, an attacker-chosen stream-mode...

Rocky Linux 10.2 [CIQ] Security Update: cjose / cjose-debuginfo / cjose-debugsource / cjose-devel (crlsa-2026_79122)

The Rocky Linux 10.2 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202679122 advisory. cjose: cjose: Heap buffer overflow in AES Key Wrap decryption leads to denial of service CVE-2026-53938 Tenable has extracted the preceding description block...

andriller

Andriller CE Edición Comunitaria Andriller es una utilidad de software con una colección de herramientas forenses para teléfonos inteligentes. Realiza adquisición de solo lectura, forensicamente sólida y no destructiva desde dispositivos Android. Tiene características como potente descifrado de...

demiguise

Demiguise - Herramienta de cifrado HTA Publicado como código abierto por NCC Group Plc - http://www.nccgroup.trust/ Desarrollado por Richard Warren, richard punto warren arroba nccgroup punto trust http://www.github.com/nccgroup/demiguise Publicado bajo AGPL, consulte LICENSE para más información...

cryptr

cryptr Una sencilla utilidad de shell para cifrar y descifrar archivos usando OpenSSL. Instalación git clone https://github.com/nodesocket/cryptr.git ln -s "$PWD"/cryptr/cryptr.bash /usr/local/bin/cryptr Requisitos shred si se desea eliminar opcionalmente el archivo original. Finalización de...

solarflare

solarflare Herramienta de volcado de credenciales para SolarWinds Orion Publicación en blog: https://malicious.link/post/2020/solarflare-release-password-dumper-for-solarwinds-orion/ Créditos a @asolino, @gentilkiwi y @skelsec por ayudarme a descifrar DPAPI...

padre

padre padre es un explotador avanzado para ataques de Padding Oracle contra el modo de cifrado CBC Características: implementación ultrarrápida y concurrente descifrado de tokens cifrado de datos arbitrarios huella digital automática de oráculos de relleno detección automática de la longitud del...

cve-2019-6693

Script de descifrado de contraseñas FortiGate - CVE-2019-6693 🔐 Un usuario remoto autorizado con acceso o conocimiento de la clave de cifrado estándar podría obtener acceso y descifrar los archivos de respaldo de FortiOS y todas las contraseñas de no administradores, claves privadas y contraseñas...