sn0int

sn0int sn0int pronounced /snoɪnt/ is a semi-automatic OSINT framework and package manager. It's used by IT security professionals, bug bounty hunters, law enforcement agencies and in security awareness trainings to gather intelligence about a given target or about yourself. sn0int is enumerating...

sops

SOPS: Secrets OPerationS SOPS is an editor of encrypted files that supports YAML, JSON, ENV, INI and BINARY formats and encrypts with AWS KMS, GCP KMS, Azure Key Vault, HuaweiCloud KMS, age, and PGP. demo .. image:: https://i.imgur.com/X0TM5NI.gif .. image::...

roca

ROCA detection tool This tool is related to ACM CCS 2017 conference paper 124 Return of the Coppersmith’s Attack: Practical Factorization of Widely Used RSA Moduli. It enables you to test public RSA keys for a presence of the described vulnerability. Update 4.11.2017 : Python 2.7, 3.4+ supported...

gasmask

gasmask All in one Information gathering tool - OSINT For a full list of our tools, please visit our websitehttps://www.twelvesec.com/ Written by: maldevel twitter mikismaos xvass ndamoulianos sbrb Dependencies Python 3.x validators python-whois dnspython requests shodan censys mmap pprint...

OTRS-4.0.1-6.0.1-Remote-Command-Execution

OTRS-4.0.1-6.0.1 Remote Command Execution This exploit is developed based on https://www.exploit-db.com/exploits/43853 It will perform the authentication against OTRS panel and provide a reverse shell. Usage: python3 CVE-2017-16921.py CVE-2017-16921: In OTRS 6.0.x up to and including 6.0.1, OTRS...

CVE-2026-2005

CVE-2026-2005 - PostgreSQL pgcrypto Heap Overflow Exploit PoC exploit for a heap-based buffer overflow in the PostgreSQL pgcrypto extension's PGP session key parsing, leading to arbitrary memory read/write and privilege escalation to superuser. For full technical details, see the Zeroday Cloud...

qubes-secpack

Qubes security pack qubes-secpack The Qubes security pack qubes-secpack is a git repository containing security-related information about the Qubes OS Project. It includes the following: Qubes PGP keys keys/ Qubes security bulletins QSBs/ Qubes canaries canaries/ Qubes fund information fund/ Qube...

CVE-2020-10759-poc

Summary Exploits CVE-2020-10759 - fwupd PGP signature verification bypass. See https://github.com/justinsteven/advisories/blob/master/2020fwupddanglings3bucketandCVE-2020-10759signatureverificationbypass.md for more details. Requirements Note: You need to install python3-gpg from your OS vendor...

pgpdump

pgpdump: a PGP packet visualizer Kazu Yamamoto [email protected] August 16, 2010 Overview pgpdump is a PGP packet visualizer which displays the packet format of OpenPGP RFC 4880 and PGP version 2 RFC 1991. Here is an example: % pgpdump test/sig1 Old: Marker Packettag 103 bytes String -...

PGP-Tools

PGP Tools Open-source browser extension for PGP & AGE encryption and decryption. Built with Rust/WebAssembly. Private keys never touch the JS heap unless they have to. !PGP Tools side panel: encrypting a message to a recipient, with signing switched...

disclosures

Cylance Vulnerability Research - Disclosure Repository This is a repository to hold all of Cylance's Vulnerability Research team's public vulnerability disclosures. The public key for our Vulnerability Research Team e-mail is below: -----BEGIN PGP PUBLIC KEY BLOCK-----...

CVE-2026-2005

CVE-2026-2005 — PostgreSQL pgcrypto Heap Buffer Overflow Target commit: 4b324845ba5d24682b9b3708a769f00d160afbd7 PostgreSQL 18.1 — vulnerable Summary Field| Detail ---|--- CVE| CVE-2026-2005 Type| Heap buffer overflow Component| contrib/pgcrypto/pgp-pubdec.c — pgpparsepubencsesskey Impact| RCE as...

CVE-2026-85243

CVE-2026-85243 — camel-crypto-pgp: integrity-verification downgrade legacy packet skips the check Runnable proof-of-concept reproducer for the Apache Camel vulnerability where the PGP data format's unmarshal verified the modification detection code only when the message used the OpenPGP...

Dark_Ledger

Dark Ledger This repository serves as an archive of darknet market information, including: Vendor lists Vendor PGP keys Listings and descriptions Market structure and other relevant data CDN If you're looking to download "The Darknet Market Archives" from Gwern.net but find the available options...

CVE-2026-85243

A flaw was found in the Apache Camel Crypto PGP Pretty Good Privacy component. A remote attacker capable of intercepting or altering network traffic can tamper with encrypted messages without detection by sending legacy data packets that omit integrity protection. This issue occurs because the...

CLEANSTART-2024-TQ32856 When user downloads PGP or S/MIME keys/certificates, exported file has same name for private and public keys

Security vulnerability affects the otrs package. When user downloads PGP or S/MIME keys/certificates, exported file has same name for private and public keys...

Updated libsolv package fixes security vulnerabilities

Stack-based buffer overflow in libsolv eddsa pgp signature verification allows denial of service. CVE-2026-48863 Heap buffer overflow in libsolv repoaddsolv via negative maxsize from crafted .solv file. CVE-2026-9149 Stack-based buffer overflow in libsolv's debian metadata parser when handling...

MGASA-2026-0569 Updated libsolv package fixes security vulnerabilities

Stack-based buffer overflow in libsolv eddsa pgp signature verification allows denial of service. CVE-2026-48863 Heap buffer overflow in libsolv repoaddsolv via negative maxsize from crafted .solv file. CVE-2026-9149 Stack-based buffer overflow in libsolv's debian metadata parser when handling...

[SECURITY] [DSA 6585-2] thunderbird regression update

------------------------------------------------------------------------- Debian Security Advisory DSA-6585-2 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff October 27, 2026 https://www.debian.org/security/faq -...

Rclone encryption issue vulnerability

Versions of Rclone from 1.55.0 through 1.75.2 contain an encryption vulnerability. This vulnerability arises because the selfupdate trust PGP signature SHA256SUMS block in stable releases fails to sign the checksum entries preceding it; attackers can exploit this by controlling the distribution...