WhatsDump

Rewriting entire project. WIP WhatsDump Extract WhatsApp private key from any Android device Android 7+ supported. This tool spawns a clean Android 6 emulator and attempts to register with your number to extract msgstore private key. NOTE: this tool is in beta stage and might not be stable. You'r...

walletool

walletool una herramienta para leer archivos wallet.dat Una utilidad para extraer datos de criptomonedas de archivos wallet.dat. Instalación Instala Python 3.x. Instala el módulo bsddb3 si estás en Windows, usa el sitio de Gohlke. Extracción de claves privadas de monederos Bitcoin-QT/Litecoin-QT...

walletool

walletool 一个用于读取 wallet.dat 文件的工具 一个用于从 wallet.dat 文件中提取加密货币钱包数据的实用工具。 在 Windows 或 macOS 上设置该软件， Windows 还是 Linux？请参阅下面的手册。macOS？请使用 DMG 文件。 确保 Windows 上已安装 Git 和 Python。 适用于 Windows 的 Git：https://git-scm.com/install/windows 适用于 Windows 的...

Phoenix-Rowhammer-Attack-CVE-2025-6202

本文探讨了 Phoenix Rowhammer 攻击（CVE-2025-6202）所带来的系统性密码学安全威胁，该攻击可通过硬件层面的位操作从 DDR5 内存中提取私钥。近年来，加密货币技术的动态发展导致数字资产生态系统对存储和处理密码学数据的硬件及微芯片组件的依赖日益加深。在此背景下，可能导致加密货币钱包私钥被直接攻破的硬件级漏洞正成为日益增长的风险因素。当今最危险的威胁之一便是针对内存的攻击，尤其是利用 DRAM 单元物理特性的高级 Rowhammer 漏洞变体。这些攻击使攻击者能够修改单个数据位，并获取机密信息，包括比特币和以太坊钱包的私钥。...

Cocos AI 访问控制错误漏洞

Cocos AI is an AI security computing platform based on a trusted execution environment, open-sourced by Ultraviolet. Cocos AI versions 0.8.2 and earlier contain an access control vulnerability. This vulnerability stems from a proven TLS design that has weaknesses in relay attacks, allowing...

GHSA-W8Q8-93CX-6H7R jsrsasign: Missing cryptographic validation during DSA signing enables private key extraction

Versions of the package jsrsasign before 11.1.1 are vulnerable to Missing Cryptographic Step via the KJUR.crypto.DSA.signWithMessageHash process in the DSA signing implementation. An attacker can recover the private key by forcing r or s to be zero, so the library emits an invalid signature witho...

MiracleLinux 7 : golang-1.8.3-1.el7 (AXSA:2017-2315:02)

The remote MiracleLinux 7 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2017-2315:02 advisory. A carry propagation flaw was found in the implementation of the P-256 elliptic curve in golang. An attacker could possibly use this flaw to extract private...

CVE-2025-41722

The wsc server uses a hard-coded certificate to check the authenticity of SOAP messages. An unauthenticated remote attacker can extract private keys from the Software of the affected devices...

EUVD-2021-27058

Malware in sbrugna...

EUVD-2025-4967

Malicious code in bioql PyPI...

Linux Distros Unpatched Vulnerability : CVE-2022-50237

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The ed25519-dalek crate before 2 for Rust allows a double public key signing function oracle attack. The Keypair implementation leads to a simple computation fo...

CVE-2022-50237

A flaw was found in ed25519-dalek. The Keypair implementation allows an attacker to compute a private key by observing signatures generated with corresponding public keys. This public key signing function oracle attack does not require authentication. An unauthenticated attacker can extract the...

GHSA-G693-V3JR-8HCR Duplicate Advisory: `ed25519-dalek` Double Public Key Signing Function Oracle Attack

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-w5vr-6qhr-36cc. This link is maintained to preserve external references. Original Description The ed25519-dalek crate before 2 for Rust allows a double public key signing function oracle attack. The Keypair...

CVE-2022-50237

The ed25519-dalek crate before 2 for Rust allows a double public key signing function oracle attack. The Keypair implementation leads to a simple computation for extracting a private key...

CVE-2022-50237

The ed25519-dalek crate before 2 for Rust allows a double public key signing function oracle attack. The Keypair implementation leads to a simple computation for extracting a private key...

ed25519-dalek crate 安全漏洞

ed25519-dalek crate is a Rust library from dalek cryptography open source. A security vulnerability exists in versions prior to ed25519-dalek crate 2, which stems from a dual public key signing function leading to private key extraction...

CVE-2022-50237

The ed25519-dalek crate before 2 for Rust allows a double public key signing function oracle attack. The Keypair implementation leads to a simple computation for extracting a private key...

Sensitive Data Exposure

github.com/juju/utils is vulnerable to Sensitive Data Exposure. The vulnerability is due to the cert.NewLeaf function generating certificates that may contain private key information, which allows an attacker to extract the private key if the certificate is transmitted over the network in plainte...

CVE-2024-49364

tiny-secp256k1 is a tiny secp256k1 native/JS wrapper. Prior to version 1.1.7, a private key can be extracted on signing a malicious JSON-stringifiable object, when global Buffer is the buffer package. This affects only environments where require'buffer' is the NPM buffer package. The...

Private Key Extraction

tiny-secp256k1 is vulnerable to private key extraction. The vulnerability is due to the ability to bypass Buffer.isBuffer checks when the global Buffer is overridden by the NPM buffer package, which allows an attacker to reuse the nonce k across different messages and extract the private key by...