py_certificate_extractor

pycertificateextractor 有时需要从数字签名文件中提取证书信息。 当这种情况发生时，使用此工具，你可以轻松完成。 如果有任何变更或所需的新功能，请告知。 功能 从数字签名文件中提取证书信息并导出（另存为）证书文件。仅此而已。 v1.0.0 https://github.com/password123456/digitalsignedpefilecertificateextractor/blob/main/Changes 预览...

Digital-Signature-Hijack

デジタル署名ハイジャック 正規のデジタル署名をハイジャックする手法は、レッドチーム評価においてPowerShellコードやバイナリに署名するために使用できる技術です。これにより、Device Guardの制限を回避し、エンゲージメント中にステルス性を維持するのに役立ちます。DigitalSignatureHijackはMatt Graeberの研究に基づくPowerShellスクリプトで、以下の操作を実行できます： ホスト上のすべてのポータブル実行可能ファイルにMicrosoftとしてデジタル署名する ホスト上のすべてのPowerShellスクリプトにMicrosoftとしてデジタル署名...

peframe

======= peframe peframe is a open source tool to perform static analysis on Portable Executable malware and generic suspicious file. It can help malware researchers to detect packer, xor, digital signature, mutex, anti debug, anti virtual machine, suspicious sections and functions, macro and much...

Digital-Signature-Forgery-Attack

この記事では、暗号学的攻撃であるデジタル署名偽造攻撃（Digital Signature Forgery Attack）について見ていきます。デジタル署名は暗号通貨送金の所有権と承認を確認するため、その影響はビットコインネットワークにおける取引のセキュリティに脅威をもたらします。最新の研究と特定された脆弱性に基づいて、このような攻撃がビットコインに与える影響の例を検討します。 デジタル署名偽造攻撃（Digital Signature Forgery...

bypass360mimikatz_x64

方法：リソース変更、デジタル署名追加 解凍パスワード：6613kris清水川崎...

PlEXcalaison

ローカル特権 PlEXcalasion - CVE-2021-42835 Windows 版 Plex Media Server のバージョン 1.25.0.5282 より前のバージョンは、Time Of Check Time Of Use（TOCTOU）に対して脆弱であり、低特権ユーザーが SYSTEM 権限を取得できる可能性があります。 発見者 Tomer Peled、Netanel Cohen、Amir Shen（BugSec のセキュリティ研究者）によって発見されました。 詳細 Plex for Windows は新しいアップデートをインストールするために...

cve-2013-3900-remediation-report

Rapporto di Remediation: CVE-2013-3900 – Vulnerabilità WinVerifyTrust su Windows Server 2019 VM Azure Panoramica Durante una recente valutazione autenticata della vulnerabilità condotta utilizzando Tenable Nessus, CVE-2013-3900 è stata rilevata su una macchina virtuale Windows Server 2019 ospitat...

EUVD-2026-57737

Foxit PDF Editor/Reader inconsistently alerts users when signature fields are abnormally modified, including alterations to appearance, coordinates, or field duplication. This may mislead users into trusting tampered documents, since the UI cannot accurately reflect the actual integrity status of...

CVE-2026-12860 RSA PKCS#1 verification skips last two hash bytes in NULL-omitted path

In Bouncy Castle for Java before 1.85, RSA PKCS1 verification skips last two hash bytes in NULL-omitted path. This issue also affects Bouncy Castle for Java LTS before 2.73.12...

SUSE CVE-2026-11605

The issue is a resource exhaustion vulnerability associated with DNSSEC validation. BIND always validates all RRSIG records in an answer, even if they are not strictly needed. A query to an authoritative server/zone which returns many valid but superfluous RRSIG records causes the validator to...

Cache poisoning possible with label count discrepancy, RRSIG, and wildcards

...

[SECURITY] [DSA 6395-1] bind9 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-6395-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso July 22, 2026 https://www.debian.org/security/faq -...

CVE-2026-46582

In NLnet Labs Unbound 1.6.0 up to and including 1.25.1, a replay of a wildcard rrset as another piece of data, could be briefly considered DNSSEC secure based only on the RRSIG validation and stored into cache, before later validation treats it as bogus based on NSEC validation. When the resolvin...

CVE-2026-15395

The Kali Forms — Contact Form & Drag-and-Drop Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'digitalSignature' Field Value in all versions up to, and including, 2.4.18 due to insufficient input sanitization and output escaping. This makes it possible for...

EUVD-2026-45130

The Kali Forms — Contact Form & Drag-and-Drop Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'digitalSignature' Field Value in all versions up to, and including, 2.4.18 due to insufficient input sanitization and output escaping. This makes it possible for...

CVE-2026-48758

A flaw was found in the @sigstore/core component. The preAuthEncoding function incorrectly uses Node.js 'ascii' encoding when converting Pre-Authentication Encoding PAE strings to bytes. This encoding truncates Unicode characters to their low byte, allowing an attacker to substitute characters in...

kernel: ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr

In the Linux kernel, the following vulnerability has been resolved: ima: don't clear IMADIGSIG flag when setting or removing non-IMA xattr Currently when both IMA and EVM are in fix mode, the IMA signature will be reset to IMA hash if a program first stores IMA signature in security.ima and then...

[SECURITY] Fedora 44 Update: perl-Crypt-DSA-1.22-1.fc44

Crypt::DSA is an implementation of the DSA Digital Signature Algorithm signature verification system. This package provides DSA signing, signature verification, and key generation. DSA Digital Signature Algorithm signatures are no longer considered to be adequate for security. This module should...

[SECURITY] Fedora 43 Update: perl-Crypt-DSA-1.22-1.fc43

Crypt::DSA is an implementation of the DSA Digital Signature Algorithm signature verification system. This package provides DSA signing, signature verification, and key generation. DSA Digital Signature Algorithm signatures are no longer considered to be adequate for security. This module should...

golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via crafted public key with excessive parameters

A flaw was found in golang.org/x/crypto/ssh. The RSA and DSA public key parsers in the affected component did not enforce size limits on key parameters. This vulnerability allows an unauthenticated client to provide a crafted public key with an excessively large modulus or DSA parameter during...