cosign

cosign توقيع حاويات OCI والتحف الأخرى باستخدام Sigstore! تهدف Cosign إلى جعل التوقيعات بنية تحتية غير مرئية. يدعم Cosign ما يلي: التوقيع بدون مفاتيح "Keyless signing" مع هيئة شهادات Fulcio للصالح العام من Sigstore وسجل الشفافية Rekor الافتراضي التوقيع عبر الأجهزة و KMS التوقيع باستخدام زوج مفاتيح...

cloudlist

विशेषताएँ • स्थापना • उपयोग • कॉन्फ़िगरेशन • Cloudlist चलाना • समर्थित प्रदाता • लाइब्रेरी • Discord से जुड़ें Cloudlist क्लाउड प्रदाताओं से एसेट प्राप्त करने के लिए एक मल्टी-क्लाउड टूल है। इसका उद्देश्य ब्लू टीम द्वारा अटैक सरफेस मैनेजमेंट प्रयासों को बढ़ाने के लिए उपयोग करना है, ताकि बहुत कम...

CVE-2022-38766

CVE-2022-38766 Renault ZOE Keyless System में कमजोरी के लिए PoC CVE-2022-38766 परिचय Companylogo AUTOCRYPT MalHyuk अवलोकन इस कमजोरी ने यह सवाल उठाया कि क्या ZOE इलेक्ट्रिक वाहन RF हैकिंग से सुरक्षित हैं। इस कारण, इस वर्ष जारी वास्तविक ZOE वाहन को लक्षित कर हमला किया गया। यह भी अध्ययन किया गया कि ...

CVE-2022-27254

CVE-2022-27254 PoC pour la vulnérabilité dans le système de clé sans fil à distance de Honda CVE-2022-27254 Avertissement : À des fins éducatives uniquement. Veuillez noter que les découvreurs de cette vulnérabilité sont Ayyappan Rajesh, un étudiant à l'UMass Dartmouth et HackingIntoYourHeart. Le...

SecureML

सिक्योरएआईएमएल 🔐 एंटरप्राइज़-रेडी AI मॉडल सुरक्षा, OpenSSF मॉडल साइनिंग पर निर्मित SecureAIML "मॉडल सुरक्षा के लिए स्ट्राइप" है - एंटरप्राइज़-ग्रेड AI मॉडल सुरक्षा को हर संगठन के लिए सुलभ, उपयोगकर्ता-अनुकूल और प्रोडक्शन-रेडी बनाता है। SecureAIML क्यों? AI/ML के युग में, मॉडल सुरक्षा महत्वपूर्ण है...

CVE-2026-0073-Android-adbd-authentication-bypass-POC

Исследование CVE-2026-0073. Обход аутентификации, позволяющий любому атакующему с доступом к локальной сети подключиться к Android-устройству с включёнными инструментами разработчика и беспроводной отладкой или ADB через TCP. Устройство должно быть предварительно сопряжено. Протестировано и...

CVE-2025-70994

CVE-2025-70994: ضعف في المصادقة في الدراجة الكهربائية Yadea T5 !WARNING يُنشر هذا المستودع لأغراض البحث الأمني الأكاديمي والتعليمي حصرًا. تهدف المعلومات ورمز إثبات المفهوم الواردان هنا إلى توضيح خلل تشفيري معروف CWE-1390 لمساعدة مالكي المركبات والمصنّعين على فهم الأمن المادي وتحسينه. لا يقرّ المؤ...

CVE-2026-49319

Remote Keyless Entry System RKES, using the 433 MHz key fob bearing FCC ID CWTR53R0 manufactured by ALPS ALPINE CO., LTD., is vulnerable to a roll-back attack against its rolling-code authentication. An attacker within RF range who records two consecutive lock or unlock transmissions from a...

CVE-2026-49319 Alps Electric Co., Ltd. R53R0 Remote Keyless Entry System (RKES) Replay Attack

Remote Keyless Entry System RKES, using the 433 MHz key fob bearing FCC ID CWTR53R0 manufactured by ALPS ALPINE CO., LTD., is vulnerable to a roll-back attack against its rolling-code authentication. An attacker within RF range who records two consecutive lock or unlock transmissions from a...

EUVD-2026-39417

Remote Keyless Entry System RKES, using the 433 MHz key fob bearing FCC ID CWTR53R0 manufactured by ALPS ALPINE CO., LTD., is vulnerable to a roll-back attack against its rolling-code authentication. An attacker within RF range who records two consecutive lock or unlock transmissions from a...

CVE-2026-49319 Alps Electric Co., Ltd. R53R0 Remote Keyless Entry System (RKES) Replay Attack

Remote Keyless Entry System RKES, using the 433 MHz key fob bearing FCC ID CWTR53R0 manufactured by ALPS ALPINE CO., LTD., is vulnerable to a roll-back attack against its rolling-code authentication. An attacker within RF range who records two consecutive lock or unlock transmissions from a...

CVE-2026-49319

CVE-2026-49319 concerns a roll-back attack on a Remote Keyless Entry System (RKES) using the 433 MHz key fob with FCC ID CWTR53R0 from ALPS ALPINE CO., LTD. The described vulnerability allows an attacker within RF range to record two consecutive lock/unlock transmissions and replay them to cause ...

PT-2026-52445

Name of the Vulnerable Software and Affected Versions Remote Keyless Entry System RKES using 433 MHz key fob FCC ID CWTR53R0 affected versions not specified Description The system is susceptible to a roll-back attack targeting its rolling-code authentication. An attacker within radio frequency...

CVE-2025-70994

Yadea T5 Electric Bicycles models manufactured in/after 2024 have a weak authentication mechanism in their keyless entry system. The system utilizes the EV1527 fixed-code RF protocol without implementing rolling codes or cryptographic challenge-response mechanisms. This is vulnerable to signal...

CVE-2026-44309

Gitsign is a keyless Sigstore to signing tool for Git commits with your a GitHub / OIDC identity. Prior to 0.16.0, gitsign verify and gitsign verify-tag re-encode commit/tag objects through go-git's EncodeWithoutSignature before checking the signature, instead of verifying against the raw git...

CVE-2026-44310

Gitsign is a keyless Sigstore to signing tool for Git commits with your a GitHub / OIDC identity. From 0.4.0 to before 0.15.0, CertVerifier.Verify in pkg/git/verifier.go unconditionally dereferences certs0 after sd.GetCertificates without checking the slice length. A CMS/PKCS7 signed message with...

EUVD-2025-209567

Yadea T5 Electric Bicycles models manufactured in/after 2024 have a weak authentication mechanism in their keyless entry system. The system utilizes the EV1527 fixed-code RF protocol without implementing rolling codes or cryptographic challenge-response mechanisms. This is vulnerable to signal...

CVE-2025-70994

Yadea T5 Electric Bicycles models manufactured in/after 2024 have a weak authentication mechanism in their keyless entry system. The system utilizes the EV1527 fixed-code RF protocol without implementing rolling codes or cryptographic challenge-response mechanisms. This is vulnerable to signal...

PT-2026-34662

Yadea T5 Electric Bicycles models manufactured in/after 2024 have a weak authentication mechanism in their keyless entry system. The system utilizes the EV1527 fixed-code RF protocol without implementing rolling codes or cryptographic challenge-response mechanisms. This is vulnerable to signal...

CVE-2025-70994

CVE-2025-70994 affects Yadea T5 Electric Bicycles (models manufactured in/after 2024). The keyless-entry system uses the EV1527 fixed-code RF protocol without rolling codes or cryptographic challenge-response, enabling a local attacker who intercepts a legitimate fob transmission to perform a rep...