114 matches found
CVE-2018-10933
CVE-2018-10933 - PoC für SSH-Authentifizierungs-Bypass Beschreibung CVE-2018-10933 ist eine Authentifizierungs-Bypass-Schwachstelle in der serverseitigen Implementierung von libssh. Der Fehler erlaubt es einem Angreifer, eine SSH2MSGUSERAUTHSUCCESS-Nachricht ohne vorherige Authentifizierung zu...
Exploit for Improper Isolation or Compartmentalization in Mozilla Firefox
CVE-2026-4692 — content processes can declare themselves in RD...
CVE-2026-11110-AES-GCM-Nonce-Reuse-Leading-to-Key-Recovery
CVE-2026-11110 – Reutilização de Nonce em AES-GCM Levando à Recuperação de Chave Código do Programa Python root@kitploit: aesgcmnoncereusesim.py - Simulated encryption oracle with fixed nonce from Crypto.Cipher import AES import os key = os.urandom16 nonce = b'\x00' 12 ALWAYS SAME NONCE def...
EUVD-2026-63700
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to intercept messages and forge replies due to the exposure of sensitive information...
PT-2026-79164
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to intercept messages and forge replies due to the exposure of sensitive information...
CVE-2026-50577
In ePA 3.x Integration (fbeta-GmbH), request_counter is left unchanged in app/vau/VAUProtokoll.py, causing the server to reuse AES-GCM nonce/key pairs across responses. This enables a network attacker to recover plaintext XORs, exploit the Joux forbidden attack to recover the GHASH key, forge mes...
CVE-2026-53788 rsync < 3.5.0 Newline Injection via name-converter uid/gid mapping
rsync before 3.5.0 contains a newline injection vulnerability in the name-converter uid/gid mapping interface that allows local attackers to forge protocol messages by creating user or group names containing newline characters. Attackers can inject malicious newline characters into names...
CVE-2026-53788
CVE-2026-53788 affects rsync prior to 3.5.0. A newline injection in the name-converter uid/gid mapping interface lets local attackers forge protocol messages by embedding newline characters in user/group names, causing the rsync daemon to treat attacker-controlled data as legitimate protocol inpu...
EUVD-2026-58096
rsync before 3.5.0 contains a newline injection vulnerability in the name-converter uid/gid mapping interface that allows local attackers to forge protocol messages by creating user or group names containing newline characters. Attackers can inject malicious newline characters into names...
F5 BIG-IP 安全漏洞
F5 BIG-IP is an application delivery platform developed by the American company F5. It integrates functions such as network traffic management, application security management, and load balancing. F5 BIG-IP has a security vulnerability that may allow attackers to forge error messages...
CVE-2022-23441
A use of hard-coded cryptographic key vulnerability CWE-321 in FortiEDR versions 5.0.2, 5.0.1, 5.0.0, 4.0.0 may allow an unauthenticated attacker on the network to disguise as and forge messages from other collectors...
AZL-73192 CVE-2025-68972 affecting package gnupg2 for versions less than 2.4.9-1
In GnuPG through 2.4.8, if a signed message has \f at the end of a plaintext line, an adversary can construct a modified message that places additional text after the signed material, such that signature verification of the modified message succeeds although an "invalid armor" message is printed...
Mozilla Firefox 安全漏洞
Mozilla Firefox and Mozilla Firefox ESR are both products of the Mozilla Foundation, U.S.A. Mozilla Firefox is an open source web browser.Mozilla Firefox ESR is an extended support version of Firefox web browser. A security vulnerability exists in versions prior to Mozilla Firefox 146 that stems...
EUVD-2018-5985
Malware in sbrugna...
EUVD-2007-1264
Malware in sbrugna...
EUVD-2007-1261
Malware in sbrugna...
EUVD-2007-1262
Malware in sbrugna...
EUVD-2017-8861
Malware in sbrugna...