1199 matches found
git-crypt
git-crypt - transparent file encryption in git git-crypt enables transparent encryption and decryption of files in a git repository. Files which you choose to protect are encrypted when committed, and decrypted when checked out. git-crypt lets you freely share a repository containing a mix of...
terrapod-PoC
Terrapod: security advisory CVE status: requested, pending assignment. This finding is published as GHSA-6qrc-597p-mrp9. On CVE assignment this repository is renamed CVE-YYYY-NNNNN-terrapod-PoC and this banner is replaced with the CVE link. | ---|--- Researcher| Dostxodjayev Abdullox @squeeze440...
scallion
2020 Project Update Scallion was a hobby project to learn OpenCL and RSA. We are not currently maintaining scallion. It has bitrotted in two important ways: 1. Tor has moved on to v3 Onion addresses, which scallion does not support. Old v2 addresses will stop working in October of 2021. The new...
pub
❤ Be a Hero, tip a 🍺 🙂 ⟶ Ƀ : 1AZMeGVfCBbYwVYyG9s79pJDyocTZgiApa | Ξth : 0x438B38E30eF117C15fBfF833f9C2c70182925815 Exploit PoCs and tools for vulnerabilities disclosed by tintinweb. pub police line - do not cross ==== police line - do not cross ==== police line - do not cross ==== ==== police lin...
CVE-2025-49113
CVE-2025-49113 Roundcube Exploit A Python exploit for CVE-2025-49113, targeting a vulnerability in Roundcube webmail that allows remote code execution through PHP object deserialization. Overview This exploit leverages a deserialization vulnerability in Roundcube's file upload functionality. It...
CVE-2026-114467
Out-of-bounds write possible in Git when git-merge1 used on tag with more than two GPG signatures...
EUVD-2026-124400
Out-of-bounds write possible in Git when git-merge1 used on tag with more than two GPG signatures...
CVE-2026-114467
Out-of-bounds write possible in Git when git-merge1 used on tag with more than two GPG signatures...
CVE-2026-114467 Out-of-bounds Write in Git
Out-of-bounds write possible in Git when git-merge1 used on tag with more than two GPG signatures...
CVE-2026-114467
A flaw in Git allows an authenticated remote attacker to cause a Denial of Service (DoS) by corrupting stack memory. The vulnerability occurs during merge operations when git-merge(1) attempts to remove more than two GPG (GNU Privacy Guard) signatures from commit messages. An attacker can trigger...
gpg_reaper
GPG Reaper TL;DR: Obtain/Steal/Restore GPG Private Keys from gpg-agent cache/memory This POC demonstrates method for obtaining GPG private keys from gpg-agent memory under Windows. Normally this should be possible only within 10 minutes time frame --default-cache-ttl value. Unfortunately...
codecrypt
Codecrypt The post-quantum cryptography tool. Codecrypt is currently unmaintained, although I still successfully use it. If you are interested in developing/maintaining it, ping me. About This is a GnuPG-like unix program for encryption and signing that uses only quantum-computer-resistant...
CVE-2026-114467
A flaw was found in git. An authenticated remote attacker can cause a Denial of Service DoS by corrupting stack memory during merge operations. This issue occurs when git attempts to remove more than two GPG GNU Privacy Guard signatures from commit messages. By submitting a specially crafted comm...
CVE-2026-97859-CYB-Analysis
REDEEMER’S UNIVERSITY, EDE FACULTY OF COMPUTING AND DIGITAL TECHNOLOGIES DEPARTMENT OF CYBER SECURITY ANALYSIS OF CVE-2026-97859 Authorization Bypass Vulnerability Submitted by: Ahiamadu Uchechukwu Matriculation Number: RUN/MEE/22/12168 Department: Cyber Security 1. Introduction Cybersecurity is...
envsec
envsec Secure environment secrets management using native OS credential stores. Demo Features Store secrets in your OS native credential store not plain text files Cross-platform: macOS, Linux, Windows Organize secrets by context e.g. myapp.dev, stripe-api.prod, work.staging Track secret metadata...
CVE-2026-114467
When Git strips GPG signatures from a commit message, removesignature stores the start and end positions of signatures in a fixed-size stack array of two entries. A message carrying more than two signatures makes it write past the end of that array and corrupt stack memory, a denial of service th...
CVE-2026-123843
In JetBrains IntelliJ IDEA before 2026.3 untrusted projects could trigger changes to GPG agent configuration...
EUVD-2026-118346
In JetBrains IntelliJ IDEA before 2026.3 untrusted projects could trigger changes to GPG agent configuration...
CVE-2026-123843
JetBrains IntelliJ IDEA versions prior to 2026.3 are vulnerable to a security flaw where untrusted projects can trigger unauthorized changes to the GPG agent configuration . This issue is categorized as CWE-829 (Inclusion of Functionality from Untrusted Control Sphere). The vulnerability requires...