1173 matches found
heartwood
❤️🪵 Radicle Heartwood Protocol & Stack Heartwood — это третья версия протокола Radicle, мощного однорангового стека для совместной работы над кодом и публикации. Репозиторий содержит полную реализацию Heartwood с удобным интерфейсом командной строки rad и сетевым демоном radicle-node. Radicle — эт...
appsec-forge
appsec-forge 개발자, DevOps, AppSec, DevSecOps 및 보안 엔지니어 를 위해 제작되었습니다. 안전한 개발, 애플리케이션 보안, 인프라, 소프트웨어 공급망, AI 및 DevSecOps를 다루는 저장소 기반 보안 지식 기반입니다. 숙련된 엔지니어링 팀이 문제를 해결하는 방식과 동일하게 보안 문제를 학습하세요: 기능을 이해하고, 근본 원인을 파악하고, 익스플로잇을 분석하고, 수정 사항을 비교하고, 이를 뒷받침하는 보안 엔지니어링 실무를 살펴보세요. 목차 1. 시작하기 전에 소개 현재 제공되는 사례 Pro...
certsync
certsync certsync is a new technique in order to dump NTDS remotely, but this time without DRSUAPI : it uses golden certificate and UnPAC the hash. It works in several steps: 1. Dump user list, CA informations and CRL from LDAP 2. Dump CA certificate and private key 3. Forge offline a certificate...
stumpy
|PyPI Version| |Conda Forge Version| |PyPI Downloads| |License| |Test Status| |Code Coverage| |RTD Status| |Binder| |JOSS| |NumFOCUS| .. |PyPI Version| image:: https://img.shields.io/pypi/v/stumpy.svg :target: https://pypi.org/project/stumpy/ :alt: PyPI Version .. |Conda Forge Version| image::...
OWASP-Top-10-AI-Infrastructure-Security-Risks
데이터센터 및 AI 인프라 보안 위험 Top 10 FORGE - 모델 아래의 메탈을 강화하세요. 🌐 웹사이트: https://forge-framework.io 경영진 요약 AI 데이터센터는 보안이 확보되는 속도보다 더 빠르게 구축되고 있습니다. 데이터센터, GPU 클라우드, 특수 컴퓨팅 환경의 급속한 확장은 하드웨어, 네트워킹, 스토리지, 오케스트레이션, 아이덴티티, 관리 플레인, 물리적 운영 전반에 걸쳐 보안 위험을 초래했습니다. 이러한 위험 중 상당수는 기존 데이터센터 또는 클라우드 보안 문제와 유사하지만, 현대 데이터센터...
CVE-2026-21858
CVE-2026-21858 + CVE-2025-68613 - n8n 전체 체인 인증 없는 임의 파일 읽기 → 관리자 토큰 위조 → 샌드박스 우회 → RCE...
JndiRemover
JndiRemover Небольшой мод направленный на устранение уязвимости CVE-2021-44228 по средствам удаления/отключения Jndi в Log4j и перехват сообщений содержащих текст "$jndi:ldap://domainname.com/script", которые будут удалены. Поддерживаемые версии MC: Forge 1.7.10, 1.12.2...
Linux Distros Unpatched Vulnerability : CVE-2026-85393
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - node-forge through 1.4.0 fails to validate element count in nested DigestAlgorithm sequences during RSA PKCS1 v1.5 signature verification. Attackers can embed...
UBUNTU-CVE-2026-85393
node-forge through 1.4.0 fails to validate element count in nested DigestAlgorithm sequences during RSA PKCS1 v1.5 signature verification. Attackers can embed garbage bytes inside the DigestAlgorithm sequence to forge valid signatures for arbitrary messages using low-exponent RSA keys. This is an...
CVE-2026-85393
A flaw was found in node-forge. This vulnerability allows a remote attacker to forge valid RSA PKCS1 v1.5 signatures for arbitrary messages. The flaw occurs because the software fails to properly validate the element count in nested DigestAlgorithm sequences during signature verification. By...
CVE-2026-85393
node-forge through 1.4.0 fails to validate element count in nested DigestAlgorithm sequences during RSA PKCS1 v1.5 signature verification. Attackers can embed garbage bytes inside the DigestAlgorithm sequence to forge valid signatures for arbitrary messages using low-exponent RSA keys. This is an...
AZL-99750 CVE-2026-85393 affecting package python-tensorboard 2.16.2-6
node-forge through 1.4.0 fails to validate element count in nested DigestAlgorithm sequences during RSA PKCS1 v1.5 signature verification. Attackers can embed garbage bytes inside the DigestAlgorithm sequence to forge valid signatures for arbitrary messages using low-exponent RSA keys. This is an...
CVE-2026-85393 node-forge through 1.4.0 RSA PKCS#1 v1.5 Signature Forgery via Nested DigestAlgorithm Padding
node-forge through 1.4.0 fails to validate element count in nested DigestAlgorithm sequences during RSA PKCS1 v1.5 signature verification. Attackers can embed garbage bytes inside the DigestAlgorithm sequence to forge valid signatures for arbitrary messages using low-exponent RSA keys. This is an...
CVE-2026-85393
node-forge through 1.4.0 has a cryptographic vulnerability in its RSA PKCS#1 v1.5 signature verification . The library fails to validate the element count in nested DigestAlgorithm sequences, allowing an attacker to embed garbage bytes inside that sequence to forge valid signatures for arbitrary ...
EUVD-2026-70670
node-forge through 1.4.0 fails to validate element count in nested DigestAlgorithm sequences during RSA PKCS1 v1.5 signature verification. Attackers can embed garbage bytes inside the DigestAlgorithm sequence to forge valid signatures for arbitrary messages using low-exponent RSA keys. This is an...
CVE-2026-85393 node-forge through 1.4.0 RSA PKCS#1 v1.5 Signature Forgery via Nested DigestAlgorithm Padding
node-forge through 1.4.0 fails to validate element count in nested DigestAlgorithm sequences during RSA PKCS1 v1.5 signature verification. Attackers can embed garbage bytes inside the DigestAlgorithm sequence to forge valid signatures for arbitrary messages using low-exponent RSA keys. This is an...
CVE-2026-53710
creationtimestamp| type| source ---|---|--- 2026-09-02 16:35:09+00:00| published-proof-of-concept| https://github.com/IBM/mcp-context-forge/security/advisories/GHSA-xm98-3vcf-fph7 2026-09-10 12:30:07+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mv62kfu7xv2r...
ROOT-APP-NPM-CVE-2025-66031 CVE-2025-66031 in node-forge - Patched by Root
Root has patched CVE-2025-66031 in the node-forge package for Root:npm. Multiple fixed versions available...