CVE-2026-16001

Exposure of the message authentication key through the encryption keystream in the stream mode of IesEngine an IesEngine constructed without a block cipher in Legion of the Bouncy Castle Inc. bc-csharp before 2.7.0 allows a remote attacker who has observed one encrypted message with known plainte...

CVE-2026-16001 IesEngine stream-mode MAC forgery via length-dependent KDF split

Exposure of the message authentication key through the encryption keystream in the stream mode of IesEngine an IesEngine constructed without a block cipher in Legion of the Bouncy Castle Inc. bc-csharp before 2.7.0 allows a remote attacker who has observed one encrypted message with known plainte...

EUVD-2026-91206

Exposure of the message authentication key through the encryption keystream in the stream mode of IesEngine an IesEngine constructed without a block cipher in Legion of the Bouncy Castle Inc. bc-csharp before 2.7.0 allows a remote attacker who has observed one encrypted message with known plainte...

CVE-2026-16001

The Bouncy Castle Inc. bc-csharp library (versions before 2.7.0 ) is vulnerable to a message authentication key exposure in the IesEngine stream mode. Specifically, when an IesEngine is constructed without a block cipher, the MAC key is taken from the key derivation output immediately following a...

CVE-2026-23002-5G-NAS-Message-Buffer-Overflow-in-gNodeB

CVE-2026-23002 – Переполнение буфера 5G NAS-сообщения в gNodeB Код программы симуляция на C // gnbnassim.c - Simulated 5G gNodeB parsing NAS Registration Request include include include define MAXIESIZE 128 void processregistrationrequestuint8t nasmsg, uint16t length uint8t iebufferMAXIESIZE; //...

CVE-2026-11117-WPA2-4-Way-Handshake-Reinstallation-KRACK-Sim-

CVE-2026-11117 – Повторная установка 4-стороннего рукопожатия WPA2 KRACK Sim Программный код Python kracksim.py - Simulates reinstallation of an already-used PTK import hashlib, os class AccessPoint: def initself: self.anonce = os.urandom32 self.ptk = None def sendmsg3self, snonce: Normally would...

CVE-2026-11110-AES-GCM-Nonce-Reuse-Leading-to-Key-Recovery

CVE-2026-11110 – Повторное использование nonce в AES-GCM, приводящее к восстановлению ключа Код программы Python aesgcmnoncereusesim.py - Simulated encryption oracle with fixed nonce from Crypto.Cipher import AES import os key = os.urandom16 nonce = b'\x00' 12 ALWAYS SAME NONCE def...

meshtastic-cve-2025-52464-poc

Meshtastic CVE-2025-52464: доказательство концепции Обзор Этот проект представляет собой чисто программное доказательство концепции, демонстрирующее CVE-2025-52464 — уязвимость, затрагивающую версии прошивки Meshtastic с 2.5.0 по 2.6.10. Реализация воспроизводит криптографическое поведение уязвим...

scadapack-secure-lock-poc

Верификатор защищённой блокировки SCADAPack Этот репозиторий представляет собой намеренно ограниченное доказательство концепции для CVE-2026-81861. Он проверяет, что два контролируемых образца, созданных с помощью поставляемого производителем Windows DTM, могут быть аутентифицированы и декодирова...

CVE-2026-104480

Discord libdave before 1.2.0 did not reject an MLS Welcome message when the resulting group roster contained an unrecognized participant. An attacker in control of the DAVE signaling path the voice gateway, or an equivalent position able to add, alter, or withhold signaling messages to a client...

CVE-2026-104480

Discord libdave before 1.2.0 did not reject an MLS Welcome message when the resulting group roster contained an unrecognized participant. An attacker in control of the DAVE signaling path the voice gateway, or an equivalent position able to add, alter, or withhold signaling messages to a client...

EUVD-2026-91159

Discord libdave before 1.2.0 did not reject an MLS Welcome message when the resulting group roster contained an unrecognized participant. An attacker in control of the DAVE signaling path the voice gateway, or an equivalent position able to add, alter, or withhold signaling messages to a client...

CVE-2026-104480

Discord libdave versions before 1.2.0 are vulnerable to a flaw where the system fails to reject an MLS Welcome message if the resulting group roster contains an unrecognized participant. An attacker capable of controlling the DAVE signaling path (such as a voice gateway) can manipulate signaling ...

DEBIAN-CVE-2026-86345

A flaw was found in 389-ds-base. The server does not discard plaintext bytes already buffered from a client connection when negotiating StartTLS, allowing an on-path attacker to inject a crafted LDAP message that is processed after the TLS upgrade and whose response is delivered to the client in...

CVE-2019-11708

Полная цепочка эксплойтов для CVE-2019-11708 и CVE-2019-9810 Это полная цепочка эксплойтов для компрометации браузера CVE-2019-11708 и CVE-2019-9810, нацеленная на Firefox в Windows 64-бит. Она использует CVE-2019-9810 для получения выполнения кода как в дочернем процессе, так и в родительском...

PT-2026-104066

Discord libdave before 1.2.0 did not reject an MLS Welcome message when the resulting group roster contained an unrecognized participant. An attacker in control of the DAVE signaling path the voice gateway, or an equivalent position able to add, alter, or withhold signaling messages to a client...

CVE-2026-95616

An integer overflow in WSS4J's DER bounds check lets an oversized allocation pass validation. An unauthenticated attacker can send a SOAP message carrying an X.509 certificate whose SubjectKeyIdentifier extension declares a length of 0x7FFFFFFF; WSS4J decodes this while resolving the signature's...

PT-2026-104138

The Smash Balloon Social Post Feed – Simple Social Feeds for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Facebook Comment Message via v-html in Admin Builder Preview in all versions up to, and including, 4.13.0 due to insufficient input sanitization and output...

PT-2026-104102

Exposure of the message authentication key through the encryption keystream in the stream mode of IesEngine an IesEngine constructed without a block cipher in Legion of the Bouncy Castle Inc. bc-csharp before 2.7.0 allows a remote attacker who has observed one encrypted message with known plainte...

HTTPSignatures

Расширение HTTPSignatures для Burp Suite HTTPSignatures — это расширение Burp Suite, реализующее черновой документ спецификации Signing HTTP Messages draft-ietf-httpbis-message-signatures-01. Это позволяет пользователям Burp Suite беспрепятственно тестировать приложения, требующие HTTP-подписей...