zeek-plugin-roca

Johanna::ROCA Этот плагин реализует обнаружение ключей, подверженных уязвимости CVE-2017-15361; он является перереализацией исходного кода, доступного по адресу https://github.com/crocs-muni/roca. Этот плагин предоставляет две новые BIF, которые могут проверять открытые ключи: rocavulnerablecert...

poc-CVE-2026-0073

CVE-2026-0073 PoC Обход аутентификации TLS в беспроводном ADB Этот каталог содержит Python-концепт PoC для CVE-2026-0073. Скрипт создан с использованием методов генерации кода с помощью ИИ. Краткое описание CVE-2026-0073 — это логическая ошибка в проверке сертификатов демона ADB adbdtlsverifycert...

Astra Linux – Vulnerability in nss

During RSA key generation, bignum implementations used a variant of the Binary Extended Euclidean Algorithm, which involved significant input-dependent processes. This allowed attackers to perform electromagnetic-based side-channel attacks to capture traces that could lead to the recovery of secr...

Astra Linux – Vulnerability in mbedtls

A vulnerability was discovered in Mbed TLS before versions 2.28.2 and 3.x, prior to 3.3.0. An adversary with access to sufficiently precise information about memory accesses typically, an untrusted operating system attacking a secure environment can retrieve an RSA private key by observing the...

Astra Linux – Vulnerability in Thunderbird, Firefox

When importing an SPKI RSA public key as an ECDSA P-256 key, the key is handled incorrectly, causing the tab to crash. This vulnerability affects Firefox 110, Thunderbird 102.8, and Firefox ESR 102.8...

exploit-mikrotik-2026

CVE-2026-67276 - Эксплойт обхода аутентификации SSH MikroTrik Обход аутентификации по открытому ключу SSH в MikroTik RouterOS — закрытый ключ не требуется Доказательство концепции эксплуатации CVE-2026-67276 MikroTrick — критической уязвимости обхода аутентификации в реализации SSH в MikroTik...

CVE-2022-2274

CVE-2022-2274 PoC для CVE-2022-2274 openssl В выпуске OpenSSL 3.0.4 была представлена серьёзная ошибка в реализации RSA для процессоров X8664, поддерживающих инструкции AVX512IFMA. Эта проблема делает реализацию RSA с 2048-битными закрытыми ключами некорректной на таких машинах, и во время...

CVE-2026-78861: Undefined Security Weakness

An issue in Mercusys AC12 V2 allows a local attacker to execute arbitrary code via a hardcoded 512-bit RSA Private Key...

EUVD-2026-92785

An issue in Mercusys AC12 V2 allows a local attacker to execute arbitrary code via a hardcoded 512-bit RSA Private Key...

CVE-2026-78861

An issue in Mercusys AC12 V2 allows a local attacker to execute arbitrary code via a hardcoded 512-bit RSA Private Key...

CVE-2026-78861

The Mercusys AC12 V2 is vulnerable to a flaw where a local attacker can execute arbitrary code . This vulnerability is caused by the inclusion of a hardcoded 512-bit RSA Private Key within the device. While the CVSS 3.1 score is 7.7 (High) , indicating high impact on confidentiality and integrity...

PT-2026-106221

An issue in Mercusys AC12 V2 allows a local attacker to execute arbitrary code via a hardcoded 512-bit RSA Private Key...

CVE-2026-78861

An issue in Mercusys AC12 V2 allows a local attacker to execute arbitrary code via a hardcoded 512-bit RSA Private Key...

MikroTik RouterOS Improper Verification of Cryptographic Signature (CVE-2026-67278)

MikroTik RouterOS accepts malformed RSA/PKCS1 v1.5 signatures across RSA-based services, including TLS/X.509 certificate validation and SSH host-key authentication. Because its trust store includes an e=3 root CA, an attacker controlling or redirecting an outbound RouterOS TLS connection can use...

MikroTik RouterOS Improper Verification of Cryptographic Signature (CVE-2026-67276)

RouterOS does not compare the complete RSA public key when matching an SSH authentication request to an authorized user key, checking the key type and modulus but omitting the exponent. Because signature verification uses the client-supplied key, an attacker knowing an authorized RSA modulus can...

Protecting Quantum Computers against Untrusted Users

Publicly accessible fault-tolerant quantum computers must preserve scientific utility while limiting cryptanalytic power. We propose the restricted model of computation, 1/2BQP1: a quantum server provides random computational-basis inputs, revealed only after execution, and one designated output...

Infineon-CVE-2017-15361

Infineon-CVE-2017-15361 Простой PowerShell-скрипт для проверки, использует ли компьютер чип Infineon TPM, который уязвим для CVE-2017-15361. ВАЖНО: ЭТО ДОЛЖНО БЫТЬ ЗАПУЩЕНО ОТ ИМЕНИ АДМИНИСТРАТОРА!! Этот скрипт работает только на Windows 8.1 и Windows Server 2012 или более поздних версиях Windows...

CVE-2021-21239

CVE-2021-21239 이것은 xmlsec 취약점 CVE-2021-21239를 악용하는 PoC 스크립트입니다. 이 스크립트를 사용하려면 Docker 이미지를 빌드하거나, RSA 키를 직접 제공하고 xmlsec이 설치되어 있다고 가정하고 실행할 수 있습니다. 취약점 정보: https://www.aleksey.com/pipermail/xmlsec/2013/009717.html...

CVE-2022-2274

OpenSSL-src RSA 개인 키 연산 시 힙 메모리 손상 : CVE-2022-2274 요약 OpenSSL-src-rust는 Rust로 작성되어 crate로 패키징된, OpenSSL을 소스에서 빌드하기 위한 소스 코드 및 로직입니다. 현재 유지 관리되는 두 OpenSSL 버전에 대응하는 두 개의 유지 관리 브랜치, 즉 OpenSSL 3.0을 빌드하는 main과 OpenSSL 1.1.1을 빌드하는 release/111이 있습니다. OpenSSL 3.0.4 릴리스는 AVX512IFMA 명령어를 지원하는 X8664 CPU용 RS...

CVE-2023-29409

CVE-2023-29409 $ openssl genrsa -out ca-key.pem 2048 $ openssl req -x509 -new -nodes -key ca-key.pem -sha256 -days 100000 -out ca.pem \ -addext 'keyUsage=keyCertSign' \ -subj '/CN=Root CA' $ go run main.go server in the background $ go run main.go client causes high cpu load on client $ go run...