Ghostfuscator

Ghostfuscator AES暗号化を使用してパスワード保護されたPythonスクリプトを難読化します 使用方法 スクリプトを実行し、メニューに従ってください。 詳細 スクリプトが難読化されると、実行時にパスワード入力を求めるプロンプトが表示され、正しいパスワードを入力すると、メモリ内で復号化されたコンテンツを実行します。...

cve-2024-21978-poc

SEVファームウェアの脆弱性 このリポジトリには、SEVファームウェアの脆弱性を利用したエクスプロイトが含まれています。このエクスプロイトにより、実行中のSEV-SNPゲストの任意のメモリを復号化できます。 執筆時点の最新バージョン1.55.16でテスト済み。 根本原因...

cve-2023-31355-poc

SEV 固件漏洞 此仓库包含针对 SEV 固件中一个漏洞的利用程序。该利用程序允许在 SEV-SNP 客户机关闭后解密其任意内存。 已在 1.55.16 版本上测试（目前最新版）。 根因 snpreclaimbuffer 无条件地尝试写回 RMP 更改，即使地址不在 RMP 覆盖范围内。如果 address 不在 RMP 覆盖范围内，RMP 条目 pagermppaddr 的地址永远不会被正确初始化，并保持其初始值 0。因此固件尝试将 RMP 条目的更改写回地址 0。这很糟糕，因为地址 0 在 RMP 覆盖范围内，不应该在没有更多检查的情况下被写入。如果 address 在 RMP...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: uiohvgeneric: Do not free decrypted memory. In CoCo VMs, it is possible for the untrusted host to cause setmemoryencrypted or setmemorydecrypted to fail, resulting in an error and the shared memory being retained. Callers must ta...

CVE-2026-4932

IBM PowerVM Hypervisor FW1110.00 through FW1110.20, and FW1060.00 through FW1060.71 could allow an attacker with physical access to the Transparent Memory Encryption TME hardware to decrypt encrypted memory due to insufficient cryptographic entropy...

CVE-2026-4932

IBM PowerVM Hypervisor vulnerability CVE-2026-4932 affects FW1110.00–FW1110.20 and FW1060.00–FW1060.71. Affects PowerVM Hypervisor and TME hardware; attacker with physical access to Transparent Memory Encryption could decrypt memory due to insufficient cryptographic entropy. Impact is high confid...

CVE-2026-4932 This Power System update is being released to address Insufficient Entropy

IBM PowerVM Hypervisor FW1110.00 through FW1110.20, and FW1060.00 through FW1060.71 could allow an attacker with physical access to the Transparent Memory Encryption TME hardware to decrypt encrypted memory due to insufficient cryptographic entropy...

EUVD-2026-49954

IBM PowerVM Hypervisor FW1110.00 through FW1110.20, and FW1060.00 through FW1060.71 could allow an attacker with physical access to the Transparent Memory Encryption TME hardware to decrypt encrypted memory due to insufficient cryptographic entropy...

PT-2026-61421

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the sev-guest component of the virt subsystem. When the set memory encrypted or set memory decrypted functions fail, the caller cannot determine the exact point of...

CVE-2026-46085 rxrpc: Fix rxkad crypto unalignment handling

In the Linux kernel, the following vulnerability has been resolved: rxrpc: Fix rxkad crypto unalignment handling Fix handling of a packet with a misaligned crypto length. Also handle non-ENOMEM errors from decryption by aborting. Further, remove the WARNONONCE so that it can't be remotely trigger...

Moxa Industrial Linux 安全漏洞

Moxa Industrial Linux is an industrial-grade Linux system developed by Moxa Corporation in Taiwan, China. Moxa Industrial Linux has a security vulnerability, which stems from the physical attack vulnerability present in LUKS full-disk encryption supported by TPM. This vulnerability could lead to...

Azure Linux 3.0 Security Update: kernel (CVE-2024-36910)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-36910 advisory. - In the Linux kernel, the following vulnerability has been resolved: uiohvgeneric: Don't free decrypted memor...

CVE-2024-39846

NewPass before 1.2.0 stores passwords rather than password hashes directly, which makes it easier to obtain unauthorized access to sensitive information. NOTE: in each case, data at rest is encrypted, but is decrypted within process memory during use...

EUVD-2017-1386

Malware in sbrugna...

PT-2024-28698 · Newpass · Newpass

Name of the Vulnerable Software and Affected Versions: NewPass versions prior to 1.2.0 Description: The issue allows unauthorized access to sensitive information because passwords are stored directly rather than as password hashes. Although data at rest is encrypted, it is decrypted within proces...

SUSE CVE-2024-36910

In the Linux kernel, the following vulnerability has been resolved: uiohvgeneric: Don't free decrypted memory In CoCo VMs it is possible for the untrusted host to cause setmemoryencrypted or setmemorydecrypted to fail such that an error is returned and the resulting memory is shared. Callers need...

SUSE CVE-2024-36912

In the Linux kernel, the following vulnerability has been resolved: Drivers: hv: vmbus: Track decrypted status in vmbusgpadl In CoCo VMs it is possible for the untrusted host to cause setmemoryencrypted or setmemorydecrypted to fail such that an error is returned and the resulting memory is share...

SUSE CVE-2024-36913

In the Linux kernel, the following vulnerability has been resolved: Drivers: hv: vmbus: Leak pages if setmemoryencrypted fails In CoCo VMs it is possible for the untrusted host to cause setmemoryencrypted or setmemorydecrypted to fail such that an error is returned and the resulting memory is...

DEBIAN-CVE-2024-36913

In the Linux kernel, the following vulnerability has been resolved: Drivers: hv: vmbus: Leak pages if setmemoryencrypted fails In CoCo VMs it is possible for the untrusted host to cause setmemoryencrypted or setmemorydecrypted to fail such that an error is returned and the resulting memory is...

AZL-43248 CVE-2024-36910 affecting package kernel for versions less than 6.6.64.2-9

In the Linux kernel, the following vulnerability has been resolved: uiohvgeneric: Don't free decrypted memory In CoCo VMs it is possible for the untrusted host to cause setmemoryencrypted or setmemorydecrypted to fail such that an error is returned and the resulting memory is shared. Callers need...