EUVD-2026-67039

opensslencrypt pip package openssl-encrypt versions 1.4.8 and earlier store an mTLS client private key in cleartext within a world-readable 0644 SharedPreferences file via the desktop GUI's Settings screen 'combined certificate and private key' PEM field. A local attacker with file system access...

Pixnapping-Attack-on-Android

Questo articolo esamina l'evoluzione delle minacce alla sicurezza nel settore dello stoccaggio delle criptovalute, concentrandosi sui metodi moderni per compromettere chiavi private e frasi seed, che proteggono i portafogli digitali. L'ecosistema moderno delle criptovalute affronta una minaccia...

Phoenix-Rowhammer-Attack-CVE-2025-6202

यह लेख Phoenix Rowhammer हमले CVE-2025-6202 द्वारा उत्पन्न प्रणालीगत क्रिप्टोग्राफिक सुरक्षा खतरों की जांच करता है, जो हार्डवेयर-स्तरीय बिट हेरफेर के माध्यम से DDR5 RAM से निजी कुंजियाँ निकाल सकता है। हाल के वर्षों में, क्रिप्टोकरेंसी प्रौद्योगिकियों के गतिशील विकास ने डिजिटल परिसंपत्ति...

Phantom-Signature-Attack

本研究论文对比特币协议数字签名实现中的关键漏洞进行了全面的密码分析研究，即 幽灵签名攻击 （CVE-2025-29774）以及根本性的 SIGHASHSINGLE 处理错误。研究表明，交易签名机制中对密码学原语的不正确处理，为加密货币钱包所有者在不知情的情况下完全泄露其私钥创造了条件。该攻击利用了原始中本聪客户端中的一个遗留缺陷：当交易输入和输出数量不匹配时，系统不会拒绝签名，而是返回一个通用哈希值 “1”（uint256）。 研究的实践部分涉及使用 KeyFuzzMaster 密码学工具 ，用于系统性地识别签名验证代码、椭圆曲线运算和交易哈希函数中的漏洞。文中给出了通过 secp256...

RAMnesia-Attack

Questa ricerca presenta un'analisi completa di due classi critiche di attacchi alla memoria hardware dei moderni sistemi informatici che utilizzano memoria DDR5: Phoenix Rowhammer Attack CVE-2025-6202 e Attacco RAMnesia CVE-2023-39910 . Entrambi gli attacchi dimostrano vulnerabilità fondamentali...

CVE-2023-31290-Scanner-

DONA: bc1qps62cyk9f9unmdkc9k3ccj9e2h8ywfhg2j53ec Costruito con ❤️ per la comunità di ricerca crypto. 🚀 Scanner CVE-2023-31290 - Exploit della vulnerabilità Bitcoin & Ethereum ⚡ Il più veloce scanner CVE-2023-31290 Milk Sad per Bitcoin & Ethereum 🔥 Fino a 150.000 seed/secondo su hardware moderno! 📌...

PoC_CurveBall

CVE-2020-0601 - CurveBall Destaques PoC para CVE-2020-0601 Solução trivial para chave privada igual a 1 Solução não trivial para 1 chave-privada ordem-da-curva Escrito em C, usa a libcrypto do OpenSSL Requisitos Linux de alguma variedade apt install libssl libssl-dev Ou qualquer gerenciador de...

CVE-2022-0778

CVE-2022-0778 Descrizione Facciamo riferimento al concetto di drago-96 e poi riscriviamo un PoC basato sui formati P12 e PEM. Puoi usarlo per verificare le vulnerabilità CVE-2022-0778, ovvero un certificato SSL pericoloso senza alcuna password privata, lascialo vuoto. Se il dispositivo è affetto,...

JetBrains TeamCity < 2021.2.1 Multiple Vulnerabilities

The version of JetBrains TeamCity installed on the remote host is prior to 2021.2.1. It is, therefore, affected by multiple vulnerabilities: - In JetBrains TeamCity before 2021.2.1, a redirection to an external site was possible. CVE-2022-24330 - In JetBrains TeamCity before 2021.2.1, the Agent...

Astra Linux – Vulnerability in mbedtls

A vulnerability was discovered in Arm Mbed TLS before versions 2.16.6 and 2.7.x, prior to 2.7.15. An attacker who can obtain precise side-channel measurements can recover the long-term ECDSA private key by 1 reconstructing the projective coordinates of the result of scalar multiplication by...

Astra Linux – Vulnerability in mbedtls

A issue was discovered in Arm Mbed TLS before version 2.23.0. A side channel allows the recovery of an ECC private key, which is related to functions such as mbedtlsecpcheckpubpriv, mbedtlspkparsekey, mbedtlspkparsekeyfile, mbedtlsecpmul, and mbedtlsecpmulrestartable...

Astra Linux – Vulnerability in mbedtls

The ECDSA signature implementation in ecdsa.c in Arm Mbed Crypto 2.1 and Mbed TLS from 2.19.1 onwards does not reduce the blinded scalar before computing the inverse. This allows a local attacker to recover the private key through side-channel attacks...

Astra Linux – Vulnerability in mbedtls

A vulnerability was discovered in Arm Mbed TLS prior to version 2.24.0. An attacker can obtain a private key for RSA or static Diffie-Hellman through a side-channel attack targeting the generation of base blinding/unblinding values...

Astra Linux – Vulnerability in mbedtls

A vulnerability was discovered in Mbed TLS before versions 2.28.2 and 3.x, prior to 3.3.0. An adversary with access to sufficiently precise information about memory accesses typically, an untrusted operating system attacking a secure environment can retrieve an RSA private key by observing the...

Astra Linux – Vulnerability in edk2

The example of an encrypted private key in EDK2, present in the IpSecDxe.efi, may pose potential security risks...

Astra Linux – Vulnerability in Paramiko

In Paramiko before 2.10.1, a race condition between creation and chmod in the writeprivatekeyfile function could allow unauthorized information disclosure...

CVE-2026-50192 Kerberos Hub private key (X-Kerberos-Hub-PrivateKey) leaked to cross-host redirect target due to redirect-following HTTP client without CheckRedirect

Kerberos Agent is an open source video surveillance management agent. Prior to version 3.6.26, the Kerberos Hub upload path sends the agent's Hub credentials in the custom X-Kerberos-Hub-PrivateKey and X-Kerberos-Hub-PublicKey request headers to the operator-configured Hub URL config.HubURI. The...

netty-incubator-codec-ohttp: BoringSSL HPKE private key bytes exposed through toString() and exception messages

Summary io.netty.incubator:netty-incubator-codec-ohttp-hpke-classes-boringssl exposes raw HPKE private key bytes in string representations and error messages. BoringSSLAsymmetricCipherKeyPair.toString includes the private-key parameter object, and BoringSSLAsymmetricKeyParameter.toString renders...

GHSA-2MC4-J865-9Q4R netty-incubator-codec-ohttp: BoringSSL HPKE private key bytes exposed through toString() and exception messages

Summary io.netty.incubator:netty-incubator-codec-ohttp-hpke-classes-boringssl exposes raw HPKE private key bytes in string representations and error messages. BoringSSLAsymmetricCipherKeyPair.toString includes the private-key parameter object, and BoringSSLAsymmetricKeyParameter.toString renders...

EUVD-2026-62950

In versions below 2.1.4 of the Venafi app for Splunk SOAR, a user who holds a role with permission to run actions could expose keystore and private-key passwords by invoking the get certificate action, because the action's keystorepassword and password parameters are not masked and are shown in...