keypair

keypair Generate a RSA PEM key pair from pure JS Usage root@kitploit: var keypair = require'keypair'; var pair = keypair; console.logpair; outputs root@kitploit: $ node example.js public: '-----BEGIN RSA PUBLIC...

ROCA-attack-on-vulnerability-CVE-2017-15361

ROCA-attack-on-vulnerability-CVE-2017-15361 This repository contains the thesis developed for my bachelor's degree in Mathematical Engineering at Polytechnic of Turin. It's a script based on python and sage. The goal of the script is to generate an RSA key, evaluete if it's vulnerable by the ROCA...

Detect-CVE-2017-15361-TPM

Detecta Módulos de Plataforma de Confianza Vulnerables a CVE-2017-15361 Este repositorio proporciona contenido para ayudar a los administradores del DoD a detectar sistemas que tienen un Módulo de Plataforma de Confianza TPM habilitado que es vulnerable a CVE-2017-15361 y es un complemento del...

Astra Linux – Vulnerability in nss

During RSA key generation, bignum implementations used a variant of the Binary Extended Euclidean Algorithm, which involved significant input-dependent processes. This allowed attackers to perform electromagnetic-based side-channel attacks to capture traces that could lead to the recovery of secr...

PYSEC-2026-748 SaltStack RSA Key Generation allows remote users to decrypt communications

SaltStack RSA Key Generation allows remote users to decrypt communications...

MiracleLinux 4 : ntp-4.2.6p5-5.0.1.AXS4 (AXSA:2015-327:04)

The remote MiracleLinux 4 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2015-327:04 advisory. The Network Time Protocol NTP is used to synchronize a computer's time with another reference time source. This package includes ntpd a daemon which...

CVE-2021-41117

keypair is a a RSA PEM key generator written in javascript. keypair implements a lot of cryptographic primitives on its own or by borrowing from other libraries where possible, including node-forge. An issue was discovered where this library was generating identical RSA keys used in SSH. This wou...

JLSEC-2025-232 Side channel in RSA key generation and operations (SSBleed, M-Step)

Vulnerability Mbed TLS's modular inversion routine and GCD routine are vulnerable to local timing attacks in a number of settings discussed below. These functions are used in RSA, making the following operations vulnerable in all configurations: - RSA key generation with any API mbedtlsrsagenkey...

EUVD-2020-5407

Malware in sbrugna...

EUVD-2000-1236

Malware in sbrugna...

EUVD-1999-1425

Malware in sbrugna...

EUVD-2021-2147

Malware in sbrugna...

EUVD-2020-4714

Malware in sbrugna...

EUVD-2022-37695

Malicious code in bioql PyPI...

EUVD-2022-3990

Malicious code in bioql PyPI...

EUVD-2022-43603

Malicious code in bioql PyPI...

CVE-2022-40306

The login form /Login in ECi Printanista Hub formerly FMAudit Printscout before 5.5.2 July 2023 performs expensive RSA key-generation operations, which allows attackers to cause a denial of service DoS by requesting that form repeatedly...

CVE-2022-34746

An insufficient entropy vulnerability caused by the improper use of randomness sources with low entropy for RSA key pair generation was found in Zyxel GS1900 series firmware versions prior to V2.70. This vulnerability could allow an unauthenticated attacker to retrieve a private key by factoring...

CVE-2013-2228

SaltStack RSA Key Generation allows remote users to decrypt communications...

CVE-2018-9426

In RsaKeyPairGenerator::getNumberOfIterations of RSAKeyPairGenerator.java, an incorrect implementation could cause weak RSA key pairs being generated. This could lead to crypto vulnerability with no additional execution privileges needed. User interaction is not needed for exploitation. Bulletin...