roca

ROCA detection tool This tool is related to ACM CCS 2017 conference paper 124 Return of the Coppersmith’s Attack: Practical Factorization of Widely Used RSA Moduli. It enables you to test public RSA keys for a presence of the described vulnerability. Update 4.11.2017 : Python 2.7, 3.4+ supported...

badkeys

badkeys Tool and library to check cryptographic public keys for known vulnerabilities what? badkeys checks public keys in various formats for known vulnerabilities. A web version can be found at badkeys.info. install badkeys can be installed via pip: pip3 install badkeys You may want to use a...

keypair

keypair Generate a RSA PEM key pair from pure JS Usage var keypair = require'keypair'; var pair = keypair; console.logpair; outputs $ node example.js public: '-----BEGIN RSA PUBLIC...

Meterpreter_Paranoid_Mode-SSL

MeterpreterParanoidMode v1.4 - SSL/TLS connections Version release: v1.4 Stable Author: pedro ubuntu r00t-3xp10it Distros Supported : Linux Kali, Mint, Ubuntu Suspicious-Shell-Activity SSA RedTeam develop @2017 Description: MeterpreterParanoidMode.sh allows users to secure your staged/stageless...

CVE-2022-0778

CVE-2022-0778 Description We refer to the concept of drago-96 and then rewrite a PoC based on the P12 and PEM format. You can use it to verify the CVE-2022-0778 vulns, i.e., a dangerous SSL certificate without any private password, leave it empty. If the device is affected, it may cause the CPU o...

CVE-2026-118779

A flaw was found in node-forge. The pem.decode function uses inefficient regular expressions when parsing Privacy-Enhanced Mail PEM data with missing end boundaries or long encapsulated headers. A remote, unauthenticated attacker can exploit this vulnerability by submitting specially crafted PEM...

npm: Forge: Regular expression denial of service in PEM decoding (pem.decode)

npm: Forge: Regular expression denial of service in PEM decoding pem.decode vulnerability discovered by ? in WordPress npm node-forge versions = 1.4.0...

CLEANSTART-2024-SO65177 encoding/pem in Go before 1

Security vulnerability affects the go package. encoding/pem in Go before 1...

org.webjars.npm:google-auth-library (>=1.6.1, <=6.1.6), org.webjars.npm:google-p12-pem (>=1.0.2, <=3.0.3) +5 more potentially affected by CVE-2026-118774 via org.webjars.npm:node-forge (>=0.7.1, <=0.10.0)

org.webjars.npm:node-forge MAVEN version =0.7.1, =1.6.1, =1.0.2, =2.3.2, =1.10.2, =1.10.8 Source cves: CVE-2026-118774 Source advisory: SNYK:JAVA-ORGWEBJARSNPM-22114207...

org.webjars.npm:google-auth-library (>=1.6.1, <=6.1.6), org.webjars.npm:google-p12-pem (>=1.0.2, <=3.0.3) +5 more potentially affected by CVE-2026-118776 via org.webjars.npm:node-forge (>=0.7.1, <=0.10.0)

org.webjars.npm:node-forge MAVEN version =0.7.1, =1.6.1, =1.0.2, =2.3.2, =1.10.2, =1.10.8 Source cves: CVE-2026-118776 Source advisory: SNYK:JAVA-ORGWEBJARSNPM-22114205...

org.webjars.npm:google-auth-library (>=1.6.1, <=6.1.6), org.webjars.npm:google-p12-pem (>=1.0.2, <=3.0.3) +5 more potentially affected by CVE-2026-119189 via org.webjars.npm:node-forge (>=0.7.1, <=0.10.0)

org.webjars.npm:node-forge MAVEN version =0.7.1, =1.6.1, =1.0.2, =2.3.2, =1.10.2, =1.10.8 Source cves: CVE-2026-119189 Source advisory: SNYK:JAVA-ORGWEBJARSNPM-22114203...

org.webjars.npm:google-auth-library (>=1.6.1, <=6.1.6), org.webjars.npm:google-p12-pem (>=1.0.2, <=3.0.3) +5 more potentially affected by CVE-2025-66031 +1 more via org.webjars.npm:node-forge (>=0.7.1, <=0.10.0)

org.webjars.npm:node-forge MAVEN version =0.7.1, =1.6.1, =1.0.2, =2.3.2, =1.10.2, =1.10.8 Source cves: CVE-2025-66031, CVE-2026-119191 Source advisory: SNYK:JAVA-ORGWEBJARSNPM-22114201...

Oracle Java SE 27.0.1 eMudhra Certificate Detector

A Python tool that audits Java JKS and PKCS12 trust stores and PEM bundles for eMudhra-related certificate indicators associated with CVE-2026-91403...

Malicious Package

Overview p12-pem is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship...

MAL-2026-18265 Malicious code in p12-pem (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4c50c1679b0617ad231d0e8aaf2c111ab57f909dff3af9e1b628169aba167381 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in p12-pem

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malicious code in p12-pem (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4c50c1679b0617ad231d0e8aaf2c111ab57f909dff3af9e1b628169aba167381 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2026-111044 Disabled Sunshine clients can bypass revocation with a derived client certificate

Sunshine is a self-hosted game stream host for Moonlight. From 2026.329.165800 until 2026.906.222525, Sunshine accepted any client certificate that chained to a stored paired-client certificate, but it did not require the presented certificate to be the exact enabled paired identity. Certificate...

CVE-2026-111044 Disabled Sunshine clients can bypass revocation with a derived client certificate

Sunshine is a self-hosted game stream host for Moonlight. From 2026.329.165800 until 2026.906.222525, Sunshine accepted any client certificate that chained to a stored paired-client certificate, but it did not require the presented certificate to be the exact enabled paired identity. Certificate...

CVE-2026-111044

Sunshine , a self-hosted game stream host for Moonlight, is vulnerable to an incorrect authorization issue in versions 2026.329.165800 through 2026.906.222525 . The software accepts any client certificate chained to a stored paired-client certificate without verifying that the presented certifica...