WhatsDump

전체 프로젝트 재작성 중. WIP WhatsDump 모든 Android 기기에서 WhatsApp 개인 키를 추출합니다 Android 7+ 지원. 이 도구는 깨끗한 Android 6 에뮬레이터를 실행하고 귀하의 번호로 등록을 시도하여 msgstore 개인 키를 추출합니다. 참고: 이 도구는 베타 단계이며 안정적이지 않을 수 있습니다. PR 또는 이슈를 제출하여 이 소프트웨어를 개선하는 데 환영합니다! 지원 운영 체제 Mac OSX Windows Linux 릴리즈 Python 및 종속성을 설치하지 않고 WhatsDump를 사용하려...

Phoenix-Rowhammer-Attack-CVE-2025-6202

本稿では、Phoenix Rowhammer攻撃（CVE-2025-6202）がもたらすシステムレベルの暗号セキュリティ上の脅威について考察する。この攻撃は、ハードウェアレベルのビット操作を通じてDDR5...

walletool

walletool wallet.datファイルを読み取るためのツール wallet.datファイルから暗号通貨ウォレットデータを抽出するためのユーティリティです。 WindowsまたはmacOSでソフトウェアをセットアップするには、 WindowsまたはLinuxですか？以下のマニュアルを参照してください。macOSですか？DMGファイルを使用してください。 WindowsではGitとPythonが利用可能であることを確認してください。 Git for Windows: https://git-scm.com/install/windows Python for Windows:...

walletool

walletool uno strumento per leggere i file wallet.dat Un'utilità per estrarre dati di portafogli di criptovalute dai file wallet.dat. Installazione Installare Python 3.x. Installare il modulo bsddb3 se sei su Windows, usa il sito di Gohlke. Estrazione delle chiavi private dai portafogli...

Cocos AI 访问控制错误漏洞

Cocos AI is an AI security computing platform based on a trusted execution environment, open-sourced by Ultraviolet. Cocos AI versions 0.8.2 and earlier contain an access control vulnerability. This vulnerability stems from a proven TLS design that has weaknesses in relay attacks, allowing...

GHSA-W8Q8-93CX-6H7R jsrsasign: Missing cryptographic validation during DSA signing enables private key extraction

Versions of the package jsrsasign before 11.1.1 are vulnerable to Missing Cryptographic Step via the KJUR.crypto.DSA.signWithMessageHash process in the DSA signing implementation. An attacker can recover the private key by forcing r or s to be zero, so the library emits an invalid signature witho...

MiracleLinux 7 : golang-1.8.3-1.el7 (AXSA:2017-2315:02)

The remote MiracleLinux 7 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2017-2315:02 advisory. A carry propagation flaw was found in the implementation of the P-256 elliptic curve in golang. An attacker could possibly use this flaw to extract private...

CVE-2025-41722

The wsc server uses a hard-coded certificate to check the authenticity of SOAP messages. An unauthenticated remote attacker can extract private keys from the Software of the affected devices...

EUVD-2021-27058

Malware in sbrugna...

EUVD-2025-4967

Malicious code in bioql PyPI...

Linux Distros Unpatched Vulnerability : CVE-2022-50237

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The ed25519-dalek crate before 2 for Rust allows a double public key signing function oracle attack. The Keypair implementation leads to a simple computation fo...

CVE-2022-50237

A flaw was found in ed25519-dalek. The Keypair implementation allows an attacker to compute a private key by observing signatures generated with corresponding public keys. This public key signing function oracle attack does not require authentication. An unauthenticated attacker can extract the...

GHSA-G693-V3JR-8HCR Duplicate Advisory: `ed25519-dalek` Double Public Key Signing Function Oracle Attack

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-w5vr-6qhr-36cc. This link is maintained to preserve external references. Original Description The ed25519-dalek crate before 2 for Rust allows a double public key signing function oracle attack. The Keypair...

CVE-2022-50237

The ed25519-dalek crate before 2 for Rust allows a double public key signing function oracle attack. The Keypair implementation leads to a simple computation for extracting a private key...

CVE-2022-50237

The ed25519-dalek crate before 2 for Rust allows a double public key signing function oracle attack. The Keypair implementation leads to a simple computation for extracting a private key...

ed25519-dalek crate 安全漏洞

ed25519-dalek crate is a Rust library from dalek cryptography open source. A security vulnerability exists in versions prior to ed25519-dalek crate 2, which stems from a dual public key signing function leading to private key extraction...

CVE-2022-50237

The ed25519-dalek crate before 2 for Rust allows a double public key signing function oracle attack. The Keypair implementation leads to a simple computation for extracting a private key...

Sensitive Data Exposure

github.com/juju/utils is vulnerable to Sensitive Data Exposure. The vulnerability is due to the cert.NewLeaf function generating certificates that may contain private key information, which allows an attacker to extract the private key if the certificate is transmitted over the network in plainte...

CVE-2024-49364

tiny-secp256k1 is a tiny secp256k1 native/JS wrapper. Prior to version 1.1.7, a private key can be extracted on signing a malicious JSON-stringifiable object, when global Buffer is the buffer package. This affects only environments where require'buffer' is the NPM buffer package. The...

Private Key Extraction

tiny-secp256k1 is vulnerable to private key extraction. The vulnerability is due to the ability to bypass Buffer.isBuffer checks when the global Buffer is overridden by the NPM buffer package, which allows an attacker to reuse the nonce k across different messages and extract the private key by...