1383 matches found
sops
SOPS: Secrets OPerationS SOPS is an editor of encrypted files that supports YAML, JSON, ENV, INI and BINARY formats and encrypts with AWS KMS, GCP KMS, Azure Key Vault, HuaweiCloud KMS, age, and PGP. demo .. image:: https://i.imgur.com/X0TM5NI.gif .. image::...
sn0int
sn0int sn0int pronounced /snoɪnt/ is a semi-automatic OSINT framework and package manager. It's used by IT security professionals, bug bounty hunters, law enforcement agencies and in security awareness trainings to gather intelligence about a given target or about yourself. sn0int is enumerating...
roca
ROCA detection tool This tool is related to ACM CCS 2017 conference paper 124 Return of the Coppersmith’s Attack: Practical Factorization of Widely Used RSA Moduli. It enables you to test public RSA keys for a presence of the described vulnerability. Update 4.11.2017 : Python 2.7, 3.4+ supported...
gasmask
gasmask All in one Information gathering tool - OSINT For a full list of our tools, please visit our websitehttps://www.twelvesec.com/ Written by: maldevel twitter mikismaos xvass ndamoulianos sbrb Dependencies Python 3.x validators python-whois dnspython requests shodan censys mmap pprint...
CVE-2026-2005
CVE-2026-2005 — Heap Buffer Overflow in pgcrypto di PostgreSQL Commit target: 4b324845ba5d24682b9b3708a769f00d160afbd7 PostgreSQL 18.1 — vulnerabile Riepilogo Campo| Dettaglio ---|--- CVE| CVE-2026-2005 Tipo| Heap buffer overflow Componente| contrib/pgcrypto/pgp-pubdec.c — pgpparsepubencsesskey...
disclosures
Cylance Vulnerability Research - Repository di Divulgazioni Questo è un repository che contiene tutte le divulgazioni pubbliche di vulnerabilità del team di Vulnerability Research di Cylance. La chiave pubblica per l'e-mail del nostro team di Vulnerability Research è riportata di seguito:...
CVE-2026-2005
CVE-2026-2005 - Exploit Heap Overflow in pgcrypto di PostgreSQL Exploit PoC per un buffer overflow basato su heap nel parsing delle chiavi di sessione PGP dell'estensione pgcrypto di PostgreSQL, che porta a lettura/scrittura arbitraria della memoria e escalation dei privilegi a superuser. Per tut...
OTRS-4.0.1-6.0.1-Remote-Command-Execution
OTRS-4.0.1-6.0.1 远程命令执行 该漏洞利用工具基于 https://www.exploit-db.com/exploits/43853 开发 它将针对OTRS面板进行认证并提供反向shell。 用法: python3 CVE-2017-16921.py CVE-2017-16921: 在OTRS 6.0.x至6.0.1版本、OTRS 5.0.x至5.0.24版本以及OTRS 4.0.x至4.0.26版本中，以代理身份登录OTRS的攻击者可以操纵表单参数（与PGP相关）并以OTRS或Web服务器用户的权限执行任意Shell命令。...
PGP-Tools
PGP Tools Extensão de navegador de código aberto para criptografia, descriptografia e assinatura PGP. Construída com Rust/WebAssembly. As chaves privadas nunca tocam o heap do JavaScript a menos que seja necessário. Obtenha aqui Por que PGP Tools? Código aberto e transparente. A maioria das...
pgpdump
pgpdump: عارض حزم PGP Kazu Yamamoto [email protected] 16 أغسطس 2010 نظرة عامة pgpdump هي أداة عرض حزم PGP تُظهر تنسيق حزم OpenPGP RFC 4880 وPGP الإصدار 2 RFC 1991. فيما يلي مثال: root@kitploit: % pgpdump test/sig1 Old: Marker Packettag 103 bytes String - ... New: One-Pass Signature Packettag...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: fwupd (UTSA-2026-054034)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-054034 advisory. A PGP signature bypass flaw was found in fwupd all versions, which could lead to the installation of unsigned firmware. As per upstream, a signature bypass is...
CVE-2020-10759-poc
Sommario Sfrutta CVE-2020-10759 - bypass della verifica della firma PGP di fwupd. Vedi https://github.com/justinsteven/advisories/blob/master/2020fwupddanglings3bucketandCVE-2020-10759signatureverificationbypass.md per maggiori dettagli. Requisiti Nota: è necessario installare python3-gpg dal...
Astra Linux – Vulnerability in Thunderbird
When requesting an OpenPGP key from a WKD server, an incorrect padding size was used, which could allow a network observer to determine the length of the requested email address. This vulnerability was fixed in Thunderbird 136 and Thunderbird 128.8...
CVE-2026-53804
OTRS Community Edition contains an authenticated OS command injection vulnerability in the PGP encryption module that allows administrators to execute arbitrary operating-system commands by supplying crafted values for the PGP binary path and command options. Administrator-supplied configuration...
CVE-2026-53804
OTRS Community Edition is affected by an authenticated OS command injection in the PGP encryption module . The root cause is that administrator-supplied configuration values (PGP binary path and command options) are concatenated into a shell command without sanitization , enabling arbitrary comma...
CVE-2026-53804 OTRS Community Edition OS Command Injection via PGP Configuration
OTRS Community Edition contains an authenticated OS command injection vulnerability in the PGP encryption module that allows administrators to execute arbitrary operating-system commands by supplying crafted values for the PGP binary path and command options. Administrator-supplied configuration...
EUVD-2026-63662
OTRS Community Edition contains an authenticated OS command injection vulnerability in the PGP encryption module that allows administrators to execute arbitrary operating-system commands by supplying crafted values for the PGP binary path and command options. Administrator-supplied configuration...
CVE-2026-53804 OTRS Community Edition OS Command Injection via PGP Configuration
OTRS Community Edition contains an authenticated OS command injection vulnerability in the PGP encryption module that allows administrators to execute arbitrary operating-system commands by supplying crafted values for the PGP binary path and command options. Administrator-supplied configuration...
PT-2026-79136
Name of the Vulnerable Software and Affected Versions OTRS Community Edition affected versions not specified Description An authenticated OS command injection exists in the PGP encryption module. This issue occurs because configuration values provided by administrators are concatenated into a she...