Lucene search
+L

85 matches found

Kitploit
Kitploit
•added 2026/10/19 7:07 a.m.•111 views

assless-chaps

assless-chaps Crack MSCHAPv2/NTLMv1 challenge/responses quickly using a database of NT hashes Introduction Assless CHAPs is an efficient way to recover the NT hash used in a MSCHAPv2/NTLMv1 exchange if you have the challenge and response e.g. from a WiFi EAP WPE attack. It requires a database of ...

6.1AI score
SaveExploits0References3
Kitploit
Kitploit
•added 2026/10/16 6:43 p.m.•22 views

ShuckNT

🔐 ShuckNT : Shuck hash before trying to crack it | Shuck.sh's script ShuckNT is the script of Shuck.sh online service for on-premise use try it online!. It is design to dowgrade, convert, dissect and shuck authentication token based on Data Encryption Standard DES. Algorithms / formats supported ...

6.2AI score
SaveExploits0References3
Kitploit
Kitploit
•added 2026/10/11 8:32 p.m.•23 views

assless-chaps

assless-chaps Rompe desafíos/respuestas de MSCHAPv2/NTLMv1 rápidamente usando una base de datos de hashes NT Introducción Assless CHAPs es una forma eficiente de recuperar el hash NT utilizado en un intercambio MSCHAPv2/NTLMv1 si tienes el desafío y la respuesta por ejemplo, de un ataque WiFi EAP...

6.2AI score
SaveExploits0References3
osv_oesa
osv_oesa
•added 2026/09/25 1:28 a.m.•20 views

OESA-2026-4070 strongswan security update

The strongSwan IPsec implementation supports both the IKEv1 and IKEv2 key exchange protocols in conjunction with the native NETKEY IPsec stack of the Linux kernel. Security Fixes: In the eap-mschapv2 plugin client-side in strongSwan before 6.0.3, a malicious EAP-MSCHAPv2 server can send a crafted...

8.1CVSS6.2AI score0.00983EPSS
SaveExploits0References2
osv_oesa
osv_oesa
•added 2026/09/25 1:28 a.m.•16 views

OESA-2026-4071 strongswan security update

The strongSwan IPsec implementation supports both the IKEv1 and IKEv2 key exchange protocols in conjunction with the native NETKEY IPsec stack of the Linux kernel. Security Fixes: In the eap-mschapv2 plugin client-side in strongSwan before 6.0.3, a malicious EAP-MSCHAPv2 server can send a crafted...

8.1CVSS6.2AI score0.00983EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2026/09/08 12:00 a.m.•12 views

NewStart CGSL MAIN 7.02 : strongswan Vulnerability (NS-SA-2026-0099)

The remote NewStart CGSL host, running version MAIN 7.02, has strongswan packages installed that are affected by a vulnerability: - In the eap-mschapv2 plugin client-side in strongSwan before 6.0.3, a malicious EAP-MSCHAPv2 server can send a crafted message of size 6 through 8, and cause an integ...

8.1CVSS6.5AI score0.00983EPSS
SaveExploits0References3
osv_alpine
osv_alpine
•added 2026/01/16 7:16 p.m.•25 views

ALPINE-CVE-2025-62291

In the eap-mschapv2 plugin client-side in strongSwan before 6.0.3, a malicious EAP-MSCHAPv2 server can send a crafted message of size 6 through 8, and cause an integer underflow that potentially results in a heap-based buffer overflow...

8.1CVSS6.6AI score0.00983EPSS
SaveExploits0References1
osv_azl
osv_azl
•added 2026/01/16 7:16 p.m.•18 views

AZL-74766 CVE-2025-62291 affecting package strongswan for versions less than 5.9.10-4

In the eap-mschapv2 plugin client-side in strongSwan before 6.0.3, a malicious EAP-MSCHAPv2 server can send a crafted message of size 6 through 8, and cause an integer underflow that potentially results in a heap-based buffer overflow...

8.1CVSS6.6AI score0.00983EPSS
SaveExploits0References1
CVE
CVE
•added 2026/01/16 12:00 a.m.•63 views

CVE-2025-62291

CVE-2025-62291 affects the eap-mschapv2 plugin in strongSwan (client-side). Vulnerable when using strongSwan before 6.0.3; a crafted EAP-MSCHAPv2 Failure message can trigger an integer underflow, potentially causing a heap-based buffer overflow. Connected advisories note patched packages: strongS...

8.1CVSS6.6AI score0.00983EPSS
SaveExploits0References4
osv_cve
osv_cve
•added 2026/01/16 12:00 a.m.•17 views

CVE-2025-62291

In the eap-mschapv2 plugin client-side in strongSwan before 6.0.3, a malicious EAP-MSCHAPv2 server can send a crafted message of size 6 through 8, and cause an integer underflow that potentially results in a heap-based buffer overflow...

8.1CVSS7.1AI score0.00983EPSS
SaveExploits0References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/01/16 12:00 a.m.•5 views

CVE-2025-62291: Integer Underflow (Wrap or Wraparound)

In the eap-mschapv2 plugin client-side in strongSwan before 6.0.3, a malicious EAP-MSCHAPv2 server can send a crafted message of size 6 through 8, and cause an integer underflow that potentially results in a heap-based buffer overflow...

8.1CVSS6.6AI score0.00983EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
•added 2025/12/05 12:00 a.m.•9 views

openSUSE 16 Security Update : strongswan (openSUSE-SU-2025-20132-1)

The remote openSUSE 16 host has packages installed that are affected by a vulnerability as referenced in the openSUSE- SU-2025-20132-1 advisory. - CVE-2025-62291: Fixed buffer overflow when handling EAP-MSCHAPv2 failure requests bsc1251941. Tenable has extracted the preceding description block...

8.1CVSS6.5AI score0.00983EPSS
SaveExploits0References3
osv_suse
osv_suse
•added 2025/12/02 1:13 p.m.•14 views

SUSE-SU-2025:21167-1 Security update for strongswan

This update for strongswan fixes the following issues: - CVE-2025-62291: Fixed buffer overflow when handling EAP-MSCHAPv2 failure requests bsc1251941...

8.1CVSS6.4AI score0.00983EPSS
SaveExploits0References3
osv_opensuse
osv_opensuse
•added 2025/12/02 1:11 p.m.•9 views

OPENSUSE-SU-2025:20132-1 Security update for strongswan

This update for strongswan fixes the following issues: - CVE-2025-62291: Fixed buffer overflow when handling EAP-MSCHAPv2 failure requests bsc1251941...

8.1CVSS6.4AI score0.00983EPSS
SaveExploits0References2
OpenVAS
OpenVAS
•added 2025/11/11 12:00 a.m.•5 views

Mageia: Security Advisory (MGASA-2025-0272)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.1CVSS6.3AI score0.00983EPSS
SaveExploits0References5
OpenVAS
OpenVAS
•added 2025/11/05 12:00 a.m.•9 views

SUSE: Security Advisory (SUSE-SU-2025:3904-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.1CVSS6.3AI score0.00983EPSS
SaveExploits0References4
Debian
Debian
•added 2025/11/03 11:36 a.m.•23 views

[SECURITY] [DLA 4359-1] strongswan security update

Debian LTS Advisory DLA-4359-1 [email protected] https://www.debian.org/lts/security/ Markus Koschany November 03, 2025 https://wiki.debian.org/LTS Package : strongswan Version : 5.9.1-1+deb11u5 CVE ID : CVE-2025-62291 Xu Biang discovered a buffer overflow bug in the eap-mschapv2 plugin...

8.1CVSS6.4AI score0.00983EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
•added 2025/11/03 12:00 a.m.•10 views

Debian dla-4359 : charon-cmd - security update

The remote Debian 11 host has packages installed that are affected by a vulnerability as referenced in the dla-4359 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-4359-1 [email protected] https://www.debian.org/lts/security/...

8.1CVSS6.4AI score0.00983EPSS
SaveExploits0References4
OpenVAS
OpenVAS
•added 2025/11/03 12:00 a.m.•10 views

SUSE: Security Advisory (SUSE-SU-2025:3873-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.1CVSS6.3AI score0.00983EPSS
SaveExploits0References4
osv_suse
osv_suse
•added 2025/11/01 6:27 a.m.•10 views

SUSE-SU-2025:3904-1 Security update for strongswan

This update for strongswan fixes the following issues: - CVE-2025-62291: fixed buffer overflow when handling EAP-MSCHAPv2 failure requests bsc1251941...

8.1CVSS6.4AI score0.00983EPSS
SaveExploits0References3
Rows per page
Query Builder