keeper

keeper Keeper is a cryptographic secret store for Go. It encrypts arbitrary byte payloads at rest using Argon2id key derivation and XChaCha20-Poly1305 default authenticated encryption, and stores them in an embedded bbolt database. It ships as three things you can use independently: A Go library ...

Steganography-Online-Codec-JavaScript

Steganography Online Codec SDK for JavaScript & NPM Steganographic Online Codec allows you to hide a password encrypted message within the images & photos using AES encryption algorithm with a 256-bit PBKDF2 derived key. You can use it for free at:...

CVE-2019-5420

CVE-2019-5420 Exploit for Rails CVE-2019-5420 The issue Until Rails v5.2.2, when secure the sessions in development mode, the application derives the key from the name of the application...

AdvSim.Cryptography

AdvSim.Cryptography The AdvSim.Cryptography NuGet contains a set of cryptographic wrapper functions which are reusable, configured with sane defaults and are easy to use. Further details are available under the different subheadings below. Symmetric Key Material Generation AES Triple DES RC4 RC2...

CVE-2020-12712

CVE-2020-12712: SOS JobScheduler decryption of stored password The script in this repository allows you to decrypt the passwords stored in the SFTP configuration file for a JobScheduler instance. Description SOS JobScheduler is a tool for remote system administration that allows users to call...

CVE-2026-11116-SNMPv3-Authentication-Bypass-via-Default-EngineID

CVE-2026-11116 – SNMPv3 Authentication Bypass via Default EngineID Program Code Python with pysnmp snmpagentsim.py - SNMPv3 agent using well-known EngineID from pysnmp.hlapi import def snmpgetengineid=SnmpEngineIDhexValue='8000000001020304': iterator = getCmd SnmpEngineengineID=engineid,...

CVE-2023-6329

CVE-2023-6329 — Control iD iDSecure Authentication Bypass A Python proof-of-concept exploit for CVE-2023-6329 , an improper access control vulnerability in Control iD iDSecure versions 4.7.43.0 and below. The flaw allows an unauthenticated remote attacker to reconstruct valid login credentials by...

GlobalUnProtect

GlobalUnProtect PoC tool for decrypting and collecting GlobalProtect configuration, cookies, and HIP files from windows client installations. Blog post: https://rotarydrone.medium.com/4a1d8fc7773e Usage Run as standalone or in-memory via execute-assembly or equivalent. Collects all contents to an...

bitcoin-security

bitcoin-security An educational study of where Bitcoin key security actually comes from — and where it doesn't. Built around real BIP39/BIP32 derivation, with two experiments that sit on opposite ends of the same idea: Experiment| Search space| Feasible?| What it teaches ---|---|---|--- weakentro...

Unity Linux 20.1070a Security Update: grafana-pcp (UTSA-2026-130112)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-130112 advisory. Handshake messages, such as KeyUpdate, are always considered as state-advancing, regardless of whether a handshake has been completed or not. As a result, a maliciou...

Unity Linux 20.1070a Security Update: grafana (UTSA-2026-130135)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-130135 advisory. Handshake messages, such as KeyUpdate, are always considered as state-advancing, regardless of whether a handshake has been completed or not. As a result, a maliciou...

crackle

crackle descifra el cifrado BLE también conocido como Bluetooth Smart. crackle explota una falla en el proceso de emparejamiento BLE que permite a un atacante adivinar o forzar bruscamente muy rápidamente la TK Clave Temporal. Con la TK y otros datos recopilados del proceso de emparejamiento, se...

TencentOS Server 3: git-lfs (TSSA-2026:1134)

The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2026:1134 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities...

cryptography

pyca/cryptography .. image:: https://img.shields.io/pypi/v/cryptography.svg :target: https://pypi.org/project/cryptography/ :alt: Latest Version .. image:: https://readthedocs.org/projects/cryptography/badge/?version=latest :target: https://cryptography.io :alt: Latest Docs .. image::...

lazywarden

Sistema de Copia de Seguridad e Importación Seguro, Automatizado y Multi-Nube para Bitwarden Lazywarden es una herramienta de automatización en Python diseñada para hacer copias de seguridad y restaurar datos de tu bóveda, incluidos los archivos adjuntos de Bitwarden. Te permite subir las copias ...

pmanager

Pmanager Demo Descrizione Archivia e recupera le tue password da un database offline sicuro. Verifica se le tue password sono state precedentemente esposte per prevenire attacchi mirati di riutilizzo delle password. Perché sviluppare un altro gestore di password? Questo progetto è nato inizialmen...

CVE-2026-14507

IBM DataPower Gateway 11.0.0.0 through 11.0.0.2 could allow a remote authenticated attacker to cause a denial of service due to improper memory allocation during key derivation...

EUVD-2026-94995

IBM DataPower Gateway 11.0.0.0 through 11.0.0.2 could allow a remote authenticated attacker to cause a denial of service due to improper memory allocation during key derivation...

CVE-2026-14507 IBM DataPower Gateway Out-of-bounds Write

IBM DataPower Gateway 11.0.0.0 through 11.0.0.2 could allow a remote authenticated attacker to cause a denial of service due to improper memory allocation during key derivation...

CVE-2026-14507

IBM DataPower Gateway versions 11.0.0.0 through 11.0.0.2 are vulnerable to an out-of-bounds write (CWE-787) caused by improper memory allocation during key derivation. A remote authenticated attacker can exploit this flaw to cause a denial of service (DoS). IBM addresses this vulnerability in ver...