25 matches found
the-key-ships-with-the-lock-cve-2026-82876-phison-s11-ssd-firmware-signature-bypass
CVE-2026-82876 — Phison S11 SSD Firmware Signature Verification Bypass PoC Proof-of-concept for CVE-2026-82876 CVSS 3.1: 8.2 High / CVSS 4.0: 9.3 Critical, CWE-347: the Phison PS3111-S11 SATA SSD controller verifies firmware-update RSA signatures against a public modulus embedded inside the...
Mikrotrick_POC
RouterOS SSH Modulus-Confusion Validator CVE-2026-67276 An automated behavioral validator designed to detect the SSH public key authentication bypass vulnerability in MikroTik RouterOS CVE-2026-67276. The script tests whether an SSH service incomplete-validation flaw allows authentication by...
UBUNTU-CVE-2026-116587
Go JOSE provides an implementation of the Javascript Object Signing and Encryption set of standards in Go, including support for JSON Web Encryption JWE, JSON Web Signature JWS, and JSON Web Token JWT standards. Prior to 4.1.6, go-jose parses attacker-controlled RSA modulus and prime values from...
CVE-2026-93475 Out-of-bounds Write via an Unbounded RSA Modulus in NetX Secure X.509
The X.509 parser in NetX Secure accepts an RSA public key of any size, but every signature-verification path decrypts into fixed-size buffers dimensioned for the NXCRYPTOMAXRSAMODULUSSIZE default of 4096 bits. A certificate carrying a larger modulus drives an out-of-bounds write past a file-scope...
CVE-2026-93475 Out-of-bounds Write via an Unbounded RSA Modulus in NetX Secure X.509
The X.509 parser in NetX Secure accepts an RSA public key of any size, but every signature-verification path decrypts into fixed-size buffers dimensioned for the NXCRYPTOMAXRSAMODULUSSIZE default of 4096 bits. A certificate carrying a larger modulus drives an out-of-bounds write past a file-scope...
CVE-2026-93475
The NetX Secure X.509 parser is vulnerable to an out-of-bounds write because it accepts RSA public keys of any size but decrypts them into fixed-size buffers sized for a default of 4096 bits. An attacker can provide a certificate with a larger modulus, causing the write to occur past a file-scope...
CVE-2026-93475 Out-of-bounds Write via an Unbounded RSA Modulus in NetX Secure X.509
The X.509 parser in NetX Secure accepts an RSA public key of any size, but every signature-verification path decrypts into fixed-size buffers dimensioned for the NXCRYPTOMAXRSAMODULUSSIZE default of 4096 bits. A certificate carrying a larger modulus drives an out-of-bounds write past a file-scope...
Exploit for CVE-2026-67276
RouterOS SSH Modulus-Confusion Validator CVE-2026-67276 An...
Exploit for CVE-2026-82876
CVE-2026-82876 — Phison S11 SSD Firmware Signature Verificatio...
CVE-2026-82876 Phison PS3111-S11 Controller Firmware Signature Verification Bypass
Phison PS3111-S11 controller firmware verifies RSA signatures using a public modulus embedded within the firmware image itself rather than anchored in immutable storage. Attackers can generate arbitrary RSA key pairs, sign modified firmware with the private key, embed the matching modulus in the...
CVE-2026-82876
CVE-2026-82876 affects the Phison PS3111-S11 SSD controller. The firmware's RSA signature verification uses a public modulus embedded within the firmware image rather than anchored in immutable storage. An attacker with local access (high privileges required) can generate arbitrary RSA key pairs,...
CVE-2026-82876 Phison PS3111-S11 Controller Firmware Signature Verification Bypass
Phison PS3111-S11 controller firmware verifies RSA signatures using a public modulus embedded within the firmware image itself rather than anchored in immutable storage. Attackers can generate arbitrary RSA key pairs, sign modified firmware with the private key, embed the matching modulus in the...
Important: docker
Issue Overview: The RSA and DSA public key parsers did not enforce size limits on key parameters. A crafted public key with an excessively large modulus or DSA parameter could cause several minutes of CPU consumption during signature verification. This could be triggered by unauthenticated client...
Important: runfinch-finch
Issue Overview: An authenticated SSH client that repeatedly opened channels which were rejected by the server caused unbounded memory growth, eventually crashing the server process and affecting all connected users. Rejected channels are now properly removed from the connection's internal state a...
CVE-2026-39829
A flaw was found in golang.org/x/crypto/ssh. The RSA and DSA public key parsers in the affected component did not enforce size limits on key parameters. This vulnerability allows an unauthenticated client to provide a crafted public key with an excessively large modulus or DSA parameter during...
CVE-2026-39829 Invoking pathological RSA/DSA parameters may cause DoS in golang.org/x/crypto/ssh
The RSA and DSA public key parsers did not enforce size limits on key parameters. A crafted public key with an excessively large modulus or DSA parameter could cause several minutes of CPU consumption during signature verification. This could be triggered by unauthenticated clients during public...
CVE-2026-39829
The RSA and DSA public key parsers in the golang.org/x/crypto/ssh library failed to enforce size limits on key parameters. An unauthenticated client could trigger a Denial of Service (DoS) by providing a crafted public key with an excessively large modulus or DSA parameter, causing several minute...
PT-2026-42708
Name of the Vulnerable Software and Affected Versions The product name cannot be determined affected versions not specified Description RSA and DSA public key parsers fail to enforce size limits on key parameters. An unauthenticated client can trigger excessive CPU consumption during signature...
CVE-2026-33488
WWBN AVideo is an open source video platform. In versions up to and including 26.0, the createKeys function in the LoginControl plugin's PGP 2FA system generates 512-bit RSA keys, which have been publicly factorable since 1999. An attacker who obtains a target user's public key can factor the...
