56 matches found
pybeacon
PyBeacon PyBeacon is a collection of scripts for dealing with Cobalt Strike's encrypted traffic. It can encrypt/decrypt beacon metadata, as well as parse symmetric encrypted taskings Scripts included There is a small library which includes encryption/decoding methods, however some example scripts...
CVE-2018-7211-PoC
CVE-2018-7211-PoC CVE-2018-7211의 PoC||GTFO 참조: https://membership.backbox.org/idashboards-9-6b-multiple-vulnerabilities/ 요구 사항 없음, Python만 필요 사용법 스크립트 실행 $ git clone https://github.com/bowline90/CVE-2018-7211-PoC.git $ cd CVE-2018-7211-PoC $ chmod +x PoCedcrypt.py $ .\PoCedcrypt.py string...
dpapi-ng
dpaping - Python DPAPI-NG 暗号化/復号化ライブラリ DPAPI NG（CNG DPAPI としても知られる）の暗号化・復号化を Python で行うためのライブラリです。 NCryptUnprotectSecret および NCryptProtectSecret の動作を再現することを目的としています。 これを使用すると、Windows 以外のホストでも、PFX ユーザー保護パスワードや LAPS 暗号化パスワードなどの DPAPI NG で保護されたシークレットを暗号化・復号化できます。 ドメインのルートキーのオフラインコピーを使用して任意の DPAPI NG...
Astra Linux – Vulnerability in Qemu
A flaw was discovered in the QEMU virtual crypto device during handling of data encryption/decryption requests in virtiocryptohandlesymreq. There is no check for the values of srclen and dstlen in virtiocryptosymophelper, which may lead to a heap buffer overflow if these values differ...
CVE-2026-80831: Undefined Security Weakness
In the Linux kernel, the following vulnerability has been resolved: crypto: mxs-dcp - fix source scatterlist length access mxsdcpaesblockcrypt uses sgdmalen without mapping the source scatterlist with dmamapsg first. Therefore, sgdmalen is invalid and could return zero or a stale DMA length,...
CVE-2026-63831
In the Linux kernel, the following vulnerability has been resolved: mac802154: llsec: add skbcowdata before in-place crypto llsecdoencryptunauth, llsecdoencryptauth, llsecdodecryptunauth, and llsecdodecryptauth all perform in-place cryptographic transformations on skb data. They build a scatterli...
Malicious code in express-router-engine (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 49091d8e8923e3e709cebd14f01ee1617267bf3f9b6be99052603715b7cf9f70 The sole shipped file index.js is a heavily obfuscated RC4 + base64 string-array, 337-entry rotated array, control-flow flattening IIFE that executes...
CVE-2026-55967
AES-GCM encryption/decryption with extremely large cumulative single message sizes 64 GiB were not properly rejected by the streaming APIs, allowing counter wrap, keystream reuse, and consequent plaintext recovery...
MAL-2026-6121 Malicious code in @gbrlxvi/ts-project-lint (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 09e070ea98f9c48e77b964b3dacd4d3e7cbd82cf896fc6140ec4c390438debc8 The package's main module index.js also loaded indirectly by bin/cli.js reads a hidden binary file lib/.perf.dat, AES-256-CBC-decrypts it with a...
Malicious code in alya-baileys (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 473103f2220a0215abf49be7e46ec1748052935ce188e0eee6ded08af7b47cf1 alya-baileys is a fork of the Baileys WhatsApp library that adds a hidden, remotely-controlled action channel against the installer's authenticated...
CVE-2025-65409
A flaw was found in Recutils. Attackers can exploit a divide-by-zero vulnerability in the encryption and decryption routines by providing an empty password. This can lead to a Denial of Service DoS, making the application unavailable to legitimate users...
CVE-2025-65409
A divide-by-zero in the encryption/decryption routines of GNU Recutils v1.9 allows attackers to cause a Denial of Service DoS via inputting an empty value as a password...
CVE-2025-65409
A divide-by-zero in the encryption/decryption routines of GNU Recutils v1.9 allows attackers to cause a Denial of Service DoS via inputting an empty value as a password...
CVE-2025-65409: Divide By Zero
A divide-by-zero in the encryption/decryption routines of GNU Recutils v1.9 allows attackers to cause a Denial of Service DoS via inputting an empty value as a password...
CVE-2025-65409
A divide-by-zero in the encryption/decryption routines of GNU Recutils v1.9 allows attackers to cause a Denial of Service DoS via inputting an empty value as a password...
CVE-2025-65409
A divide-by-zero in the encryption/decryption routines of GNU Recutils v1.9 allows attackers to cause a Denial of Service DoS via inputting an empty value as a password...
GNU Recutils 安全漏洞
GNU Recutils is a tool and library for accessing the recfiles plain text database from the US GNU community. A security vulnerability exists in GNU Recutils that stems from a divide-by-zero error in the encryption/decryption routines, which could lead to a denial-of-service attack...
Linux kernel 安全漏洞
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from the fact that encdechypercall accepts page counts instead of sizes, which could result in page mislabeling...
CVE-2025-27070
CVE-2025-27070 is listed under Qualcomm closed-source components as a High-severity issue involving memory corruption during encryption and decryption commands. The available documents identify the vulnerability and its association with Qualcomm closed-source components, but do not provide a spec...
PT-2025-44922
Name of the Vulnerable Software and Affected Versions Windows Compute affected versions not specified Description A memory corruption issue exists when performing encryption and decryption commands. This can lead to an out-of-bounds write condition. Recommendations At the moment, there is no...