Dark_Ledger

Dark Ledger このリポジトリは、ダークネットマーケット情報のアーカイブとして機能します。以下を含みます： ベンダーリスト ベンダーのPGP鍵 出品情報と説明 マーケットの構造およびその他の関連データ CDN Gwern.netから 「The Darknet Market Archives」 をダウンロードしたいが、利用可能なオプション（rsyncとtorrent）が遅すぎる場合、私のCDNから直接ダウンロードできます： 🔗 DarkWebInformer CDN これはGwernのオプションよりも高速で信頼性の高い代替手段を提供します。 目的...

CVE-2026-86723

AVideo through c3edcc274c389816d434acadac07ee78eaf330c1 contains an authentication bypass vulnerability in LoginControl::verifyChallenge that uses loose comparison == instead of strict comparison === against unset session values. Attackers with only a password can submit an empty request to...

CVE-2026-86723

AVideo (through commit c3edcc274c389816d434acadac07ee78eaf330c1) contains an authentication bypass in LoginControl::verifyChallenge() . The root cause is the use of loose comparison (==) instead of strict comparison (===) against unset session values, allowing an attacker who already possesses a ...

CVE-2026-86723 AVideo LoginControl PGP Authentication Bypass via verifyChallenge

AVideo through c3edcc274c389816d434acadac07ee78eaf330c1 contains an authentication bypass vulnerability in LoginControl::verifyChallenge that uses loose comparison == instead of strict comparison === against unset session values. Attackers with only a password can submit an empty request to...

EUVD-2026-72859

AVideo through c3edcc274c389816d434acadac07ee78eaf330c1 contains an authentication bypass vulnerability in LoginControl::verifyChallenge that uses loose comparison == instead of strict comparison === against unset session values. Attackers with only a password can submit an empty request to...

qubes-secpack

Qubes security pack qubes-secpack The Qubes security pack qubes-secpack is a git repository containing security-related information about the Qubes OS Project. It includes the following: Qubes PGP keys keys/ Qubes security bulletins QSBs/ Qubes canaries canaries/ Qubes fund information fund/ Qube...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: fwupd (UTSA-2026-054034)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-054034 advisory. A PGP signature bypass flaw was found in fwupd all versions, which could lead to the installation of unsigned firmware. As per upstream, a signature bypass is...

Astra Linux – Vulnerability in Thunderbird

Thunderbird unprotects a secret OpenPGP key before using it for decryption, signing, or key import tasks. If the task fails, the secret key may remain in memory in an unprotected state. This vulnerability affects Thunderbird versions earlier than 78.8.1...

Astra Linux – Vulnerability in Thunderbird

When receiving an email message signed with OpenPGP/MIME and containing an additional outer MIME message layer, such as a message footer added by a mailing list gateway, Thunderbird only considers the signed inner message for signature validity. This creates the false impression that the addition...

Astra Linux – Vulnerability in libgcrypt20

The ElGamal implementation in Libgcrypt before version 1.9.4 allows plaintext recovery. This occurs because, during interaction between two cryptographic libraries, a dangerous combination of elements arises—specifically, the prime number defined by the receiver’s public key, the generator define...

Astra Linux – Vulnerability in Thunderbird

If a Thunderbird user has previously imported Alice’s OpenPGP key, and Alice has extended the validity period of her key, but Alice’s updated key has not yet been imported, an attacker may send an email containing a crafted version of Alice’s key with an invalid subkey. In this case, Thunderbird...

Astra Linux – Vulnerability in Thunderbird

If a MIME-encoded email contains an OpenPGP inline signed or encrypted message part, but also contains an additional unprotected part, Thunderbird did not indicate that only certain parts of the message are protected. This vulnerability affects Thunderbird versions earlier than 78.10.2...

CVE-2026-53804

OTRS Community Edition contains an authenticated OS command injection vulnerability in the PGP encryption module that allows administrators to execute arbitrary operating-system commands by supplying crafted values for the PGP binary path and command options. Administrator-supplied configuration...

CVE-2026-53804

OTRS Community Edition is affected by an authenticated OS command injection in the PGP encryption module . The root cause is that administrator-supplied configuration values (PGP binary path and command options) are concatenated into a shell command without sanitization , enabling arbitrary comma...

CVE-2026-53804 OTRS Community Edition OS Command Injection via PGP Configuration

OTRS Community Edition contains an authenticated OS command injection vulnerability in the PGP encryption module that allows administrators to execute arbitrary operating-system commands by supplying crafted values for the PGP binary path and command options. Administrator-supplied configuration...

CVE-2026-53804 OTRS Community Edition OS Command Injection via PGP Configuration

OTRS Community Edition contains an authenticated OS command injection vulnerability in the PGP encryption module that allows administrators to execute arbitrary operating-system commands by supplying crafted values for the PGP binary path and command options. Administrator-supplied configuration...

EUVD-2026-63662

OTRS Community Edition contains an authenticated OS command injection vulnerability in the PGP encryption module that allows administrators to execute arbitrary operating-system commands by supplying crafted values for the PGP binary path and command options. Administrator-supplied configuration...

PT-2026-79136

Name of the Vulnerable Software and Affected Versions OTRS Community Edition affected versions not specified Description An authenticated OS command injection exists in the PGP encryption module. This issue occurs because configuration values provided by administrators are concatenated into a she...

MINI-PGP2-85MF-4WM8

Bulletin has no description...

AZL-95723 CVE-2026-14663 affecting package postgresql for versions less than 16.15-1

Cleartext storage in PostgreSQL pgcrypto disabled ciphers allows a user to recover cleartext, via direct observation of the faulty ciphertext. The OpenSSL version and OpenSSL configuration determine the disabled ciphers. If the application accepts encrypted data as input, decryption will succeed...