pub

❤ Будь героем, угости 🍺 🙂 ⟶ Ƀ : 1AZMeGVfCBbYwVYyG9s79pJDyocTZgiApa | Ξth : 0x438B38E30eF117C15fBfF833f9C2c70182925815 Эксплойты PoCs и инструменты для уязвимостей, опубликованных tintinweb. pub police line - do not cross ==== police line - do not cross ==== police line - do not cross ==== ====...

git-remote-gcrypt

git-remote-gcrypt Dépôt git chiffré avec GNU Privacy Guard :Section du manuel : 1 Description git-remote-gcrypt est un auxiliaire de dépôt git permettant d'envoyer et de recevoir depuis des dépôts chiffrés avec GnuPG, en utilisant un format personnalisé. Cet auxiliaire gère les URI préfixées par...

scallion

2020 Project Update Scallion was a hobby project to learn OpenCL and RSA. We are not currently maintaining scallion. It has bitrotted in two important ways: 1. Tor has moved on to v3 Onion addresses, which scallion does not support. Old v2 addresses will stop working in October of 2021. The new...

envsec

envsec Gestion sécurisée des secrets d'environnement à l'aide des magasins d'identifiants natifs du système d'exploitation. Démo Fonctionnalités Stockez les secrets dans le magasin d'identifiants natif de votre système d'exploitation pas dans des fichiers texte brut Multi-plateforme : macOS, Linu...

gpg_reaper

GPG Reaper TL;DR: Obtain/Steal/Restore GPG Private Keys from gpg-agent cache/memory This POC demonstrates method for obtaining GPG private keys from gpg-agent memory under Windows. Normally this should be possible only within 10 minutes time frame --default-cache-ttl value. Unfortunately...

gpg_reaper

GPG Reaper TL;DR: Obtenir/Voler/Restaurer les clés privées GPG depuis le cache/mémoire de gpg-agent Cette preuve de concept démontre une méthode pour obtenir les clés privées GPG depuis la mémoire de gpg-agent sous Windows. Normalement, cela ne devrait être possible que dans un délai de 10 minute...

git-crypt

git-crypt - chiffrement transparent des fichiers dans git git-crypt permet le chiffrement et le déchiffrement transparents des fichiers dans un dépôt git. Les fichiers que vous choisissez de protéger sont chiffrés lors du commit, et déchiffrés lors du checkout. git-crypt vous permet de partager...

terrapod-PoC

Terrapod: уведомление о безопасности Статус CVE: запрошен, ожидает присвоения. Эта находка опубликована как GHSA-6qrc-597p-mrp9. После присвоения CVE этот репозиторий будет переименован в CVE-YYYY-NNNNN-terrapod-PoC, а этот баннер заменён ссылкой на CVE. | ---|--- Исследователь| Dostxodjayev...

Rocky Linux 8 [CIQ] Security Update: osbuild / osbuild-composer / osbuild-composer-core / etc (crlsa-2024_2961)

The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20242961 advisory. osbuild-composer: race condition may disable GPG verification for package repositories CVE-2024-2307 Tenable has extracted the preceding description block directly...

Rocky Linux 9 [CIQ] Security Update: gnupg2 / gnupg2-debuginfo / gnupg2-debugsource / gnupg2-smime / etc (crlsa-2022_6602)

The Rocky Linux 9 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20226602 advisory. gpg: Signature spoofing via status line injection CVE-2022-34903 Tenable has extracted the preceding description block directly from the CIQ security advisory. Note...

codecrypt

Codecrypt Инструмент постквантовой криптографии. Codecrypt в настоящее время не поддерживается, хотя я до сих пор успешно им пользуюсь. Если вам интересно заняться его разработкой/поддержкой, напишите мне. О проекте Это unix-программа, похожая на GnuPG, для шифрования и подписи, которая используе...

CVE-2025-49113

CVE-2025-49113 Exploit Roundcube Un exploit Python pour CVE-2025-49113, ciblant une vulnérabilité dans le webmail Roundcube qui permet l'exécution de code à distance via une désérialisation d'objet PHP. Aperçu Cet exploit exploite une vulnérabilité de désérialisation dans la fonctionnalité de...

CVE-2026-56727

The open-source helpdesk system Zammad is vulnerable to PGP signature spoofing prior to version 7.0.2 . The root cause is that the system silently discards the return value of the gpg verification call during inbound PGP email processing. Consequently, the handler unconditionally writes a success...

SUSE SLED15: libzypp / libzypp-devel / zypper / zypper-log / etc (SUSE-SU-2026:4129-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2026:4129-1 advisory. Security issue fixed: - invalidating legacy libzypp unsigned-repository cache state LIBZYPP-LEGACY-CACHE-01 bsc1274625....

Astra Linux – Vulnerability in Ansible

A flaw was discovered in Ansible Engine, in ansible-engine 2.8.x before 2.8.15, and ansible-engine 2.9.x before 2.9.13, when installing packages using the dnf module. GPG signatures are ignored during installation, even when the disablegpgcheck parameter is set to False—which is the default...

Security update for libzypp, zypper

This update for libzypp, zypper fixes the following issues: Security issue fixed: invalidating legacy libzypp unsigned-repository cache state LIBZYPP-LEGACY-CACHE-01 bsc1274625. hasCredentials requires both username AND password to be non-empty bsc1273242. GPG Key hints in repoindex.xml require a...

envsec v1.0.0-rc.2

envsec Secure environment secrets management using native OS credential stores. Demo Features Store secrets in your OS native credential store not plain text files Cross-platform: macOS, Linux, Windows Organize secrets by context e.g. myapp.dev, stripe-api.prod, work.staging Track secret metadata...

PYSEC-2026-3799

opensslencrypt pip: openssl-encrypt versions = 1.4.8 use suffix-tolerant fingerprint matching in enrolltrustkey when binding a plugin-signing trust anchor. An operator who confirms a short forgeable, 32-bit GPG key id could unknowingly enroll an attacker's colliding key as a trusted anchor, which...

CVE-2026-81714

opensslencrypt pip: openssl-encrypt versions = 1.4.8 use suffix-tolerant fingerprint matching in enrolltrustkey when binding a plugin-signing trust anchor. An operator who confirms a short forgeable, 32-bit GPG key id could unknowingly enroll an attacker's colliding key as a trusted anchor, which...

PYSEC-2026-3799

opensslencrypt pip: openssl-encrypt versions = 1.4.8 use suffix-tolerant fingerprint matching in enrolltrustkey when binding a plugin-signing trust anchor. An operator who confirms a short forgeable, 32-bit GPG key id could unknowingly enroll an attacker's colliding key as a trusted anchor, which...