Stompy

Stompy 一个PowerShell函数，用于对指定文件和目录执行时间戳篡改。该函数可以递归地修改目录中所有文件的时间戳。 更改单个文件或目录的时间戳。 递归地将时间戳应用于目录中的所有文件。 可选使用特定凭据访问远程路径或特权文件。 我已将Stompy移植到C、Python和Go，相关版本已链接在本仓库中，并附有自己的README。 C版本 Python版本 Go版本 用法 -Path：要修改时间戳的文件或目录的路径。 -NewTimestamp：要为文件或目录设置的新DateTime值。 -Credentials：（可选）如果需要指定其他用户的凭据。...

CVE-2026-101126

The Joomla Extension - balbooa.com is vulnerable to file metadata tampering in Balbooa Forms versions prior to 2.4.3.4 . The root cause is that the final form submission processes JSON arrays for upload fields while only verifying that IDs are numeric. Because the application trusts client-suppli...

[SECURITY] Fedora 45 Update: kf6-kfilemetadata-6.30.0-2.fc45

A Tier 2 KDE Framework for extracting file metadata...

CVE-2026-82985

The Photos app's filter-based "smart albums" build their file listing using the search configuration photosSourceFolders of the user viewing the album, rather than the album owner's configuration. When an album owner shares a smart album with another user, that user's own folder configuration is...

EUVD-2026-82622

The Photos app's filter-based "smart albums" build their file listing using the search configuration photosSourceFolders of the user viewing the album, rather than the album owner's configuration. When an album owner shares a smart album with another user, that user's own folder configuration is...

PYSEC-2026-3779

opensslencrypt versions before 1.4.9 fail to validate encryption status of embedded post-quantum private keys in file metadata. Attackers can craft files with unencrypted embedded PQC keys that decrypt under any password, bypassing authentication and producing attacker-chosen plaintext with false...

CVE-2026-81687

opensslencrypt versions before 1.4.9 fail to enforce a time ceiling on key derivation function iteration counts specified in file metadata. Attackers can craft files with extremely high KDF iteration counts to consume CPU resources for unbounded periods before password verification occurs...

EUVD-2026-67071

opensslencrypt before 1.4.9 fails to validate KDF cost parameters in encrypted file metadata and keystore headers, allowing attackers to trigger unbounded memory allocation. Attackers can craft malicious encrypted files declaring arbitrarily large Argon2, scrypt, or balloon KDF parameters to...

CVE-2026-81721 openssl_encrypt before 1.4.9 Denial of Service via KDF

opensslencrypt before 1.4.9 fails to validate KDF cost parameters in encrypted file metadata and keystore headers, allowing attackers to trigger unbounded memory allocation. Attackers can craft malicious encrypted files declaring arbitrarily large Argon2, scrypt, or balloon KDF parameters to...

CVE-2026-81721

openssl_encrypt before 1.4.9 fails to validate KDF cost parameters (Argon2, scrypt, or balloon) in encrypted file metadata and keystore headers. An unauthenticated attacker over the network can craft a malicious encrypted file declaring arbitrarily large KDF parameters, triggering unbounded memor...

CVE-2026-81703

openssl_encrypt versions before 1.4.9 fail to validate the encryption status of embedded post-quantum private keys in file metadata. An attacker can craft files with unencrypted embedded PQC keys that decrypt under any password, bypassing authentication and producing attacker-chosen plaintext wit...

EUVD-2026-67059

opensslencrypt versions before 1.4.9 fail to validate encryption status of embedded post-quantum private keys in file metadata. Attackers can craft files with unencrypted embedded PQC keys that decrypt under any password, bypassing authentication and producing attacker-chosen plaintext with false...

CVE-2026-81703 openssl_encrypt before 1.4.9 Authentication Bypass via Unencrypted PQC Key

opensslencrypt versions before 1.4.9 fail to validate encryption status of embedded post-quantum private keys in file metadata. Attackers can craft files with unencrypted embedded PQC keys that decrypt under any password, bypassing authentication and producing attacker-chosen plaintext with false...

CVE-2026-81703 openssl_encrypt before 1.4.9 Authentication Bypass via Unencrypted PQC Key

opensslencrypt versions before 1.4.9 fail to validate encryption status of embedded post-quantum private keys in file metadata. Attackers can craft files with unencrypted embedded PQC keys that decrypt under any password, bypassing authentication and producing attacker-chosen plaintext with false...

CVE-2026-81703 openssl_encrypt before 1.4.9 Authentication Bypass via Unencrypted PQC Key

opensslencrypt versions before 1.4.9 fail to validate encryption status of embedded post-quantum private keys in file metadata. Attackers can craft files with unencrypted embedded PQC keys that decrypt under any password, bypassing authentication and producing attacker-chosen plaintext with false...

CVE-2026-81687

openssl_encrypt versions before 1.4.9 are vulnerable to a denial-of-service condition caused by the absence of a time ceiling on key derivation function (KDF) iteration counts embedded in file metadata. An attacker can craft a file with an extremely high iteration count, forcing the application t...

CVE-2026-81687 openssl_encrypt before 1.4.9 Denial of Service via KDF

opensslencrypt versions before 1.4.9 fail to enforce a time ceiling on key derivation function iteration counts specified in file metadata. Attackers can craft files with extremely high KDF iteration counts to consume CPU resources for unbounded periods before password verification occurs...

EUVD-2026-67043

opensslencrypt versions before 1.4.9 fail to enforce a time ceiling on key derivation function iteration counts specified in file metadata. Attackers can craft files with extremely high KDF iteration counts to consume CPU resources for unbounded periods before password verification occurs...

CVE-2026-81687 openssl_encrypt before 1.4.9 Denial of Service via KDF

opensslencrypt versions before 1.4.9 fail to enforce a time ceiling on key derivation function iteration counts specified in file metadata. Attackers can craft files with extremely high KDF iteration counts to consume CPU resources for unbounded periods before password verification occurs...

CVE-2026-81687: Uncontrolled Resource Consumption

opensslencrypt versions before 1.4.9 fail to enforce a time ceiling on key derivation function iteration counts specified in file metadata. Attackers can craft files with extremely high KDF iteration counts to consume CPU resources for unbounded periods before password verification occurs...