DotNetNuke 9.2 - 9.2.2 - Weak Encryption & Cookie Deserialization

DNN DotNetNuke versions 9.2 through 9.2.2 use a weak encryption algorithm to protect input parameters because of an incomplete fix for CVE-2018-15811. This cryptographic weakness enables attackers to craft malicious DNNPersonalization cookies that can be deserialized, leading to remote code...

CVE-2024-25277

CVE-2024-25277 discovered on MW45APT02.0002 Resources and PoCs This repo serves as collection of scripts and PoCs gathered during analysis and discovery of CVE-2024-25277. You can read more about the finding on:...

Hikvision-CVE-2017-7921-decryptor

hikvisionCVE-2017-7921authbypassconfigdecryptor This python file will decrypt the configurationFile used by hikvision cameras vulnerable to CVE-2017-7921. https://www.checkpoint.com/defense/advisories/public/2017/cpai-2017-0876.html/ Description Hikvision IP Cameras Authentication Bypass...

EUVD-2026-86346

PyMongo: PYTHON-5990 Forced Unix domain socket connection via a .sock KMS endpoint in client-side field level encryption...

Rocket.Chat

The ultimate secure open-source solution for team communications Rocket.Chat is an open-source, secure, fully customizable communications platform developed in TypeScript for organizations with high standards of data protection. We are the ultimate solution for team communications, enabling...

DBconfigReader

Database Configuration Information Disclosure Vulnerability in the Weaver ecology OA System Interface /mobile/DBconfigReader.jsp http://x.x.x.x:8090/mobile/DBconfigReader.jsp Fortify Code Audit Detected - Weak Encryption Algorithm SecretKey key =...

bitlocker-bypass-research

BitLocker Bypass Research Personal security research project — bypassing BitLocker full disk encryption using CVE-2023-21563 BitPixie. What This Is In October 2025, I did a physical laptop recovery assessment on a corporate laptop with BitLocker enabled. The employee forgot their password and the...

CVE-2026-29000-PoC-Exploit

🚀 CVE-2026-29000 - pac4j-jwt Authentication Bypass Exploit CVE-2026-29000 - One-Click Admin Forge via JWT alg:none + JWE Encryption 📌 Overview This exploit weaponizes CVE-2026-29000 , a critical CVSS 10.0 vulnerability in the pac4j-jwt library. By extracting the server's public JWKS key and...

secure-vault-for-commercial

Secure Vault 📄 Technical paper: SecureVaultTechnicalPaperv3.5.0.pdf · Cite on Zenodo Local-first file encryption for Windows, secured by a physical USB key instead of a password. ⚠️ v3.5.0 includes a breaking security fix — see CHANGELOG.md before updating from an earlier version. Table of Content...

CVE-2023-30367-mRemoteNG-password-dumper

mRemoteNG = v1.77.3.1784-NB Password Dumper CVE-2023-30367 Multi-Remote Next Generation Connection Manager mRemoteNG is free software that enables users to store and manage multi-protocol connection configurations to remotely connect to systems. mRemoteNG configuration files can be stored in an...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: arm64/fpsimd: Signal: Fix for restoring SVE context When SME is supported, restoring the SVE signal context can fail in several ways. This can result in the task being placed in an invalid state, where the kernel might read from...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: net/tipc: fixed the slab-use-after-free issue in tipcaeadencryptdone+0x4bd/0x510 net/tipc/crypto.c:840. Syzbot reported a slab-use-after-free with the following call trace:...

Astra Linux – Vulnerability in python-jwcrypto

JWCrypto implements the JWK, JWS, and JWE specifications using python-cryptography. Prior to version 1.5.6, an attacker could cause a denial-of-service attack by passing in a malicious JWE Token with a high compression ratio. When the server processed this token, it would consume a lot of memory...

Python Security Project

🔐 Desktop Cryptographic File Encryption & Decryption Tool A production-grade Python desktop security utility designed to protect local filesystem assets through authenticated symmetric encryption. This application features a responsive graphical user interface GUI built with Tkinter, an independe...

python-paddingoracle

python-paddingoracle: A portable, padding oracle exploit API UPDATED FOR PYTHON 3 python-paddingoracle is an API that provides pentesters a customizable alternative to PadBuster and other padding oracle exploit tools that can't easily without a heavy rewrite be used in unique, per-app scenarios...

codecrypt

Codecrypt The post-quantum cryptography tool. Codecrypt is currently unmaintained, although I still successfully use it. If you are interested in developing/maintaining it, ping me. About This is a GnuPG-like unix program for encryption and signing that uses only quantum-computer-resistant...

HElib

HElib HElib is an open-source Apache License v2.0 software library that implements homomorphic encryption HE. Currently available schemes are the implementations of the Brakerski-Gentry-Vaikuntanathan BGV scheme with bootstrapping and the Approximate Number scheme of Cheon-Kim-Kim-Song CKKS, alon...

CVE-2026-75604

A flaw was found in Next.js. When running on Windows systems, the application fails to properly sanitize backslashes in request paths before building file cache locations. An unauthenticated remote attacker can exploit this directory traversal weakness by submitting crafted requests to access...

CVE-2026-105179

A weakness has been identified in SourceCodester Drug Recommendation System 1.0. This affects an unknown function of the file Admin/adduser.php of the component Password Handler. Executing a manipulation of the argument Password can lead to missing encryption of sensitive data. It is possible to...

8cryptdo

8CryptDo Документация и инструменты, полученные путём обратной разработки, для шифрования прошивок, используемого 8BitDo в нескольких продуктах на базе GD32. См. 8cryptdo.py — инструмент для расшифровки и повторного шифрования, реализующий алгоритм, описанный в этом документе. Инструмент...