CVE-2023-50387

CVE-2023-50387 DNS中的KeyTrap（CVE-2023-50387） 本仓库仅供教育目的使用。 密钥和签名的数量已被故意保持较低，以防止用于实际攻击，且不包含用于生成碰撞密钥的脚本。 测试 搭建PoC环境 $ docker compose up --build 确认DNSSEC正常工作 $ docker compose exec -it attacker dig @10.10.0.3 a.a.test ; DiG 9.18.24 @10.10.0.3 a.a.test ; 1 server found ;; global options: +cmd ;; Got...

interrogate

Interrogate Interrogate 是一款概念验证工具，用于识别二进制材料中的加密密钥（无论目标操作系统如何），主要用于内存转储分析和取证用途。截至 0.0.4 版本，能够识别 AES、Serpent、Twofish 和 DER 编码的 RSA 密钥。 该工具是我在 NTNU 的硕士论文的一部分。 关键信息 版本：0.0.4 许可证：GPL 作者： Carsten Maartmann-Moe [email protected] Twitter：@MaartmannMoe 源代码： https://github.com/carmaa/interrogate 系统要求...

CVE-2026-82329-JFrog-Artifactory-Auth-Bypass

artifactory.py ╔══════════════════════════════════════════════════════════╗ ║ artifactory · CVE-2026-82329 unauth admin takeover ║ ║ mitsec · https://x.com/ynsmroztas ║ ╚══════════════════════════════════════════════════════════╝ CVE-2026-82329 — JFrog Artifactory self-hosted unauthenticated...

SDK

SDK Público de Intelligence X El kit de desarrollo de software SDK permite a cualquier persona utilizar el motor de búsqueda de Intelligence X. Es de uso gratuito e Intelligence X agradece cualquier integración en herramientas y servicios de terceros. Intelligence X es un motor de búsqueda y...

cve-2026-82329-jfrog-artifactory

CVE-2026-82329 — Bypass de autenticación no autenticado en JFrog Artifactory → toma de control de administrador CVSS 9.8 AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H · CWE-287 · divulgado el 2026-08-28 · explotado activamente. Un atacante no autenticado y adyacente a la red genera un token de acceso de...

CVE-2026-63072

🔐 CVE-2026-63072 — Desbordamiento de búfer en el montón de OpenSSL CMS Un análisis técnico deCVE-2026-63072 , una escritura fuera de límites basada en el montón que afecta la funcionalidad de desenvuelto de claves CMS de OpenSSL. 📌 Resumen CVE-2026-63072 es una vulnerabilidad de desbordamiento de...

HTB-Snapped-Writeup

HTB-Snapped-Writeup Writeup de la máquina HTB Snapped — Linux de dificultad Hard. CVE-2026-27944 divulgación de copia de seguridad no autenticada en Nginx UI encadenada con CVE-2026-3888 condición de carrera en snapd para escalada de privilegios local para lograr el compromiso total del sistema...

CVE-2026-27944

CVE-2026-27944 Un script de prueba de concepto para CVE-2026-27944, un exploit crítico que permite descifrar las copias de seguridad de nginx-ui AVISO LEGAL Esta prueba de concepto tiene fines exclusivamente educativos y de pruebas de seguridad éticas. Fue desarrollada para demostrar la causa raí...

sorry-ransomware-analysis

Análisis del Ransomware Sorry Campaña CVE-2026-41940 cPanel Paquete público de IOCs, reglas YARA, scripts forenses y metodología de análisis para la familia del ransomware "Sorry" extensión .sorry que surgió a finales de abril de 2026, propagado mediante la omisión de autenticación cPanel/WHM...

telegram-nearby-map

Telegram Nearby Map Telegram Nearby Map uses OpenStreetMap and the official Telegram library to find the position of nearby users. Please note: Telegram's API was updated a while ago to make nearby user distances less precise, preventing exact location calculations. Therefore, Telegram Nearby Map...

CVE-2026-29000

CVE-2026-29000 CVE-2026-29000: Omisión crítica de autenticación en pac4j-jwt - Usando solo una clave pública CVSS 10 Exploit de omisión de autenticación en pac4j-jwt CVE-2026-29000 Resumen de la vulnerabilidad CVE-2026-29000 es una omisión crítica de autenticación en la librería pac4j-jwt version...

DEBIAN-CVE-2026-67693

An issue in gnutls v.3.8.13 allows an attacker to obtain sensitive information via failing to reject end-entity X.509 certificates that contain a contradictory combination of Key Usage KU and Extended Key Usage EKU...

CVE-2026-67693

An issue in gnutls v.3.8.13 allows an attacker to obtain sensitive information via failing to reject end-entity X.509 certificates that contain a contradictory combination of Key Usage KU and Extended Key Usage EKU...

CVE-2026-101998

Docker Sandboxes could fail open while masking credentials in protected proxy responses. When a response-body read returned data together with an error, affected handlers could forward unmasked bytes. Code inside an authorized sandbox could use this to recover host-managed OAuth access and refres...

EUVD-2026-95241

IBM Guardium Data Protection 12.2 is vulnerable due to weak cryptographic protection and a hard-coded recovery key in the pkcrypto passkey component. A local attacker could exploit this vulnerability to recover the root password and gain root privileges...

EUVD-2026-95162

Improper state management in MongoDB libmongocrypt can cause provider-specific data to be treated as an incompatible type when cleaning up a key document containing duplicate masterKey fields. An authenticated actor who can modify key vault documents, or a server that returns such a key document,...

CVE-2026-106433 Heap corruption via duplicate masterKey fields in MongoDB libmongocrypt

Improper state management in MongoDB libmongocrypt can cause provider-specific data to be treated as an incompatible type when cleaning up a key document containing duplicate masterKey fields. An authenticated actor who can modify key vault documents, or a server that returns such a key document,...

CVE-2026-106429 Application denial of service via malformed KMS endpoint in MongoDB libmongocrypt

An integer underflow in the KMS endpoint-parsing logic of MongoDB libmongocrypt can cause an allocation failure that terminates the application process. This can occur when an authenticated user modifies a key document in the key vault collection, or when an application accepts a KMS endpoint...

jwt-key-id-injector

JWT Key ID Injector 简单的 Python 脚本，用于检查假设的 JWT 漏洞。 假设存在一个使用 HS256 算法签名的 JWT 令牌的应用程序。示例如下： eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJzdWIiOiIxMjM0NTY3ODkwIiwibmFtZSI6IkpvaG4gRG9lIiwiaWF0IjoxNTE2MjM5MDIyfQ.zbgd5BNF1cqQprCEqIvBTjSxMS8bDLnJAEwE-0Cxg 上述令牌可解码为以下数据： "alg": "HS256", "typ": "JWT" "sub":...

ForgeCert

ForgeCert ForgeCert 使用 BouncyCastle C API 和窃取的证书颁发机构 CA 证书 + 私钥，为能够向 Active Directory 进行身份验证的任意用户伪造证书。 此攻击在我们发布的 “Certified Pre-Owned”白皮书 中被编码为 DPERSIST1。该代码库在白皮书发布约 45 天后发布。 @tifkin 是 ForgeCert 的主要作者。 @tifkin 和 @harmj0y 是相关 Active Directory 证书服务研究（博客 和 白皮书）的主要作者。 背景 如我们的 白皮书 的 Background 和 Forgi...