GlobalUnProtect

GlobalUnProtect विंडोज़ क्लाइंट इंस्टॉलेशन से GlobalProtect कॉन्फ़िगरेशन, कुकीज़ और HIP फ़ाइलों को डिक्रिप्ट करने और एकत्र करने के लिए PoC टूल। ब्लॉग पोस्ट: https://rotarydrone.medium.com/4a1d8fc7773e उपयोग स्टैंडअलोन या execute-assembly या समकक्ष के माध्यम से इन-मेमोरी रूप में चलाएँ। सभी सामग्री...

CVE-2019-5420

CVE-2019-5420 Rails CVE-2019-5420 के लिए शोषण समस्या Rails v5.2.2 तक, जब विकास मोड में सत्रों को सुरक्षित किया जाता है, तो एप्लिकेशन कुंजी को एप्लिकेशन के नाम से प्राप्त करता है।...

curveball

curveball CVE-2020-0601 curveball - वैकल्पिक कुंजी कैलकुलेटर निर्माण विंडोज विजुअल स्टूडियो 2012 या उससे ऊपर, फिर समाधान बनाएं। लिनक्स / यूनिक्स cc altkey.c -lcrypto -o altkey उपयोग उपयोग: altkey ecpubliccertificate.pem ecnewprivatekey.pem उदाहरण root@kitploit: C:\security\curveball\Releasealtkey...

CVE-2026-11116-SNMPv3-Authentication-Bypass-via-Default-EngineID

CVE-2026-11116 – Bypass dell'autenticazione SNMPv3 tramite EngineID predefinito Codice del programma Python con pysnmp root@kitploit: snmpagentsim.py - SNMPv3 agent using well-known EngineID from pysnmp.hlapi import def snmpgetengineid=SnmpEngineIDhexValue='8000000001020304': iterator = getCmd...

cryptography

pyca/cryptography .. image:: https://img.shields.io/pypi/v/cryptography.svg :target: https://pypi.org/project/cryptography/ :alt: Neueste Version .. image:: https://readthedocs.org/projects/cryptography/badge/?version=latest :target: https://cryptography.io :alt: Neueste Dokumentation .. image::...

lazywarden

Sistema di Backup e Importazione Sicuro, Automatico e Multi-Cloud per Bitwarden Lazywarden è uno strumento di automazione Python progettato per eseguire il backup e il ripristino dei dati dal tuo vault, inclusi gli allegati di Bitwarden. Ti consente di caricare i backup su più servizi di...

CVE-2026-81720

opensslencrypt before 1.4.9 fails to validate the memorycost parameter from identity file protection blocks, allowing attackers to trigger out-of-memory conditions during key derivation. Attackers with write access to local identity stores can craft malicious identity files with excessive...

CVE-2026-81704

opensslencrypt versions before 1.4.9 contain a weak key derivation vulnerability in the D-Bus CryptoService.EncryptFile handler that uses unstretched SHA-256 instead of Argon2id. Attackers can perform offline password guessing against encrypted files roughly six to seven orders of magnitude faste...

CVE-2026-81689

opensslencrypt versions before 1.4.9 derive the remote-pepper wrap key using unsalted HKDF-SHA256 or bare SHA-256 of the password, allowing identical keys across all users and files. Attackers with access to wrapped pepper blobs can precompute a single dictionary table and perform fleet-wide...

crackle

crackle knackt BLE-Verschlüsselung auch bekannt als Bluetooth Smart. crackle nutzt eine Schwachstelle im BLE-Pairing-Prozess aus, die es einem Angreifer ermöglicht, den TK Temporary Key zu erraten oder sehr schnell zu brute-forcen. Mit dem TK und anderen während des Pairing-Prozesses gesammelten...

EUVD-2026-67070

opensslencrypt before 1.4.9 fails to validate the memorycost parameter from identity file protection blocks, allowing attackers to trigger out-of-memory conditions during key derivation. Attackers with write access to local identity stores can craft malicious identity files with excessive...

EUVD-2026-67060

opensslencrypt versions before 1.4.9 contain a weak key derivation vulnerability in the D-Bus CryptoService.EncryptFile handler that uses unstretched SHA-256 instead of Argon2id. Attackers can perform offline password guessing against encrypted files roughly six to seven orders of magnitude faste...

CVE-2026-81704

openssl_encrypt versions before 1.4.9 contain a weak key derivation vulnerability in the D-Bus CryptoService.EncryptFile handler. The affected code uses unstretched SHA-256 instead of Argon2id , omitting key stretching and hash rounds. This allows attackers to perform offline password guessing ag...

EUVD-2026-67055

opensslencrypt versions before 1.4.9 fail to properly validate key derivation function costs in crafted files, allowing attackers to trigger unbounded memory and CPU exhaustion during pre-authentication processing. Attackers can supply malicious files with excessive KDF parameters to exhaust syst...

CVE-2026-81689

openssl_encrypt versions before 1.4.9 derive the remote-pepper wrap key using unsalted HKDF-SHA256 or bare SHA-256 of the password, resulting in identical keys across all users and files. An attacker with access to wrapped pepper blobs can precompute a single dictionary table and perform fleet-wi...

EUVD-2026-67045

opensslencrypt versions before 1.4.9 derive the remote-pepper wrap key using unsalted HKDF-SHA256 or bare SHA-256 of the password, allowing identical keys across all users and files. Attackers with access to wrapped pepper blobs can precompute a single dictionary table and perform fleet-wide...

steganography

Bild-Steganographie-Tool Einfaches C++ Verschlüsselungs- und Steganographie -Tool, das passwortgeschützte Verschlüsselung verwendet, um den Inhalt einer Datei zu sichern, und diesen dann mithilfe der Least-Significant-Bit-Kodierung in die Pixeldaten eines Bildes einbettet. Für Linux-, MacOS- und...

CVE-2019-5420

CVE-2019-5420 Una vulnerabilità può consentire a un attaccante di indovinare il token segreto generato automaticamente per la modalità di sviluppo. Ruby-on-Rails quando è in esecuzione in modalità di sviluppo. In modalità di sviluppo, è possibile per un attaccante indovinare la chiave usata per...

meesho-android-improper-encryption-cve-2026-5682

🔐 Proof of Concept: App Android Meesho – Implementazione Crittografica Insicura AES-CBC senza Integrità + Derivazione Chiave Debole Autore: Soyam Arya alias honestcorrupt Data della Scoperta: Marzo 2026 App Interessata: App Android Meesho com.meesho.supply Stato: In Verifica Categoria: Crittograf...

AdvSim.Cryptography

AdvSim.Cryptography Das AdvSim.Cryptography NuGet enthält eine Reihe von kryptografischen Wrapper-Funktionen, die wiederverwendbar sind, mit sinnvollen Standardeinstellungen konfiguriert werden und einfach zu verwenden sind. Weitere Details finden Sie unter den verschiedenen Unterüberschriften...