102 matches found
proxmark3-amiimicyou
Amiibo simulator instructions A copy of the amiitool Lua wrapper is included at client/libluamiibo.so, but if you want to build it yourself, follow these instructions: 1. Get the lua-lib branch of amiitool at https://github.com/jamchamb/amiitool/tree/lua-lib. 2. In CMakeLists.txt set PROXMARKLIBL...
CentOS Linux 6 [TuxCare] Security Update: glib2 / glib2-devel / glib2-doc / glib2-static Multiple Vulnerabilities (CENTOS6:CLSA-2026:1776346717)
The CentOS Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS6:CLSA-2026:1776346717 advisory. - filecopyfallback in gio/gfile.c in GNOME GLib 2.15.0 through 2.61.1 does not properly restrict file permissions while a copy operation...
CVE-2026-81718
opensslencrypt versions before 1.4.9 use under-parameterized PBKDF2-HMAC-SHA256 with only 100,000 iterations to protect PQC keyfile private keys and 10,000 iterations for dual-encryption file-password verification. Attackers who obtain keyfiles or encrypted files can brute-force wrapping password...
EUVD-2026-67068
opensslencrypt versions before 1.4.9 use under-parameterized PBKDF2-HMAC-SHA256 with only 100,000 iterations to protect PQC keyfile private keys and 10,000 iterations for dual-encryption file-password verification. Attackers who obtain keyfiles or encrypted files can brute-force wrapping password...
CVE-2026-81718 openssl_encrypt before 1.4.9 Weak Cryptographic Parameters
opensslencrypt versions before 1.4.9 use under-parameterized PBKDF2-HMAC-SHA256 with only 100,000 iterations to protect PQC keyfile private keys and 10,000 iterations for dual-encryption file-password verification. Attackers who obtain keyfiles or encrypted files can brute-force wrapping password...
CVE-2026-81718 openssl_encrypt before 1.4.9 Weak Cryptographic Parameters
opensslencrypt versions before 1.4.9 use under-parameterized PBKDF2-HMAC-SHA256 with only 100,000 iterations to protect PQC keyfile private keys and 10,000 iterations for dual-encryption file-password verification. Attackers who obtain keyfiles or encrypted files can brute-force wrapping password...
CVE-2026-81718
openssl_encrypt versions before 1.4.9 use under-parameterized PBKDF2-HMAC-SHA256 key derivation, employing only 100,000 iterations to protect PQC keyfile private keys and 10,000 iterations for dual-encryption file-password verification. Attackers who obtain keyfiles or encrypted files can brute-f...
CVE-2026-81718: Inadequate Encryption Strength
opensslencrypt versions before 1.4.9 use under-parameterized PBKDF2-HMAC-SHA256 with only 100,000 iterations to protect PQC keyfile private keys and 10,000 iterations for dual-encryption file-password verification. Attackers who obtain keyfiles or encrypted files can brute-force wrapping password...
PT-2026-82613
Name of the Vulnerable Software and Affected Versions openssl encrypt versions prior to 1.4.9 Description The software uses under-parameterized PBKDF2-HMAC-SHA256, a key derivation function, with insufficient iteration counts: 100,000 iterations for protecting PQC keyfile private keys and 10,000...
glib: off-by-one error in glib/gkeyfile.c via "g_key_file_get_locale_string_list"
A flaw was found in GLib. An off-by-one error can occur in the gkeyfilegetlocalestringlist function in the gkeyfile.c file when loading a key file with an empty value. This flaw can cause an out-of-bounds access of 1 byte or a denial of service when the out-of-bounds access crosses a page boundar...
RHEL 8 : mingw-glib2 (RHSA-2026:49512)
The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:49512 advisory. GLib provides the core application building blocks for libraries and applications written in C. It provides the core object system used in...
Information Exposure
Overview sglang is a SGLang is a fast serving framework for large language models and vision language models. Affected versions of this package are vulnerable to Information Exposure via the /serverinfo endpoint when only the --admin-api-key is configured. An attacker can obtain sensitive API key...
CVE-2026-15977
SGLang contains a credential leakage vulnerability in the /serverinfo endpoint, which will return API keys and SSL keyfile information when only the --admin-api-key is configured...
CVE-2026-15977 CVE-2026-15977
SGLang contains a credential leakage vulnerability in the /serverinfo endpoint, which will return API keys and SSL keyfile information when only the --admin-api-key is configured...
EUVD-2026-51265
SGLang contains a credential leakage vulnerability in the /serverinfo endpoint, which will return API keys and SSL keyfile information when only the --admin-api-key is configured...
CVE-2026-15977 CVE-2026-15977
SGLang contains a credential leakage vulnerability in the /serverinfo endpoint, which will return API keys and SSL keyfile information when only the --admin-api-key is configured...
CVE-2026-15977: Insufficiently Protected Credentials
SGLang contains a credential leakage vulnerability in the /serverinfo endpoint, which will return API keys and SSL keyfile information when only the --admin-api-key is configured...
The vulnerability of the keyfile() function in the ansible.posix.authorized_key module allows a perpetrator to escalate their privileges.
The vulnerability of the keyfile function in the ansible.posix.authorizedkey module is related to the incorrect definition of symbolic links when managing SSH keys. Exploiting this vulnerability could allow an attacker to enhance their privileges...
BIT-MONGODB-2026-9735 Keyfile contents are in MongoDB Server logs
MongoDB server may log authentication parameters, including credentials, to the server log during SASL authentication. When connection health metric logging is enabled, the full authentication parameters are written to the log without redaction...