47 matches found
crypto-attacks
Introduction Python implementations of cryptographic attacks and utilities. Requirements SageMath with Python 3.9 PyCryptodome You can check your SageMath Python version using the following command: $ sage -python --version Python 3.9.0 If your SageMath Python version is older than 3.9.0, some...
ROCA-attack-on-vulnerability-CVE-2017-15361
ROCA-attack-on-vulnerability-CVE-2017-15361 This repository contains the thesis developed for my bachelor's degree in Mathematical Engineering at Polytechnic of Turin. It's a script based on python and sage. The goal of the script is to generate an RSA key, evaluete if it's vulnerable by the ROCA...
@justice8096/sagemath-mcp-server: executes arbitrary code via the escapeShellString and sanitizeCode functions
An issue in @justice8096/sagemath-mcp-server 1.0.1 allows a remote attacker to execute arbitrary code via the escapeShellString and sanitizeCode functions...
GHSA-2VQ3-MPMF-9XGR @justice8096/sagemath-mcp-server: executes arbitrary code via the escapeShellString and sanitizeCode functions
An issue in @justice8096/sagemath-mcp-server 1.0.1 allows a remote attacker to execute arbitrary code via the escapeShellString and sanitizeCode functions...
CVE-2026-106763
An issue in @justice8096/sagemath-mcp-server 1.0.1 allows a remote attacker to execute arbitrary code via the escapeShellString and sanitizeCode functions...
EUVD-2026-109096
An issue in @justice8096/sagemath-mcp-server 1.0.1 allows a remote attacker to execute arbitrary code via the escapeShellString and sanitizeCode functions...
PT-2026-122137
An issue in @justice8096/sagemath-mcp-server 1.0.1 allows a remote attacker to execute arbitrary code via the escapeShellString and sanitizeCode functions...
CVE-2026-106763
An issue in @justice8096/sagemath-mcp-server 1.0.1 allows a remote attacker to execute arbitrary code via the escapeShellString and sanitizeCode functions...
PT-2026-133235
An issue in @justice8096/sagemath-mcp-server 1.0.1 allows a remote attacker to execute arbitrary code via the escapeShellString and sanitizeCode functions...
CVE-2026-106763
An issue in @justice8096/sagemath-mcp-server 1.0.1 allows a remote attacker to execute arbitrary code via the escapeShellString and sanitizeCode functions...
CVE-2026-106763
An issue in @justice8096/sagemath-mcp-server 1.0.1 allows a remote attacker to execute arbitrary code via the escapeShellString and sanitizeCode functions...
Justice8096 Sagemath-MCP Server security vulnerability
The justice8096 sagemath-mcp-server version 1.0.1 contains a security vulnerability stemming from issues in the escapeShellString and sanitizeCode functions, which may allow remote attackers to execute arbitrary code...
CVE-2026-106763
An issue in @justice8096/sagemath-mcp-server 1.0.1 allows a remote attacker to achieve arbitrary code execution . The vulnerability originates within the escapeShellString and sanitizeCode functions. The documents do not provide specific details regarding remediation or evidence of in-the-wild ex...
CVE-2025-61514
An arbitrary file upload vulnerability in SageMath, Inc CoCalc before commit 0d2ff58 allows attackers to execute arbitrary code via uploading a crafted SVG file...
PT-2025-42531
Name of the Vulnerable Software and Affected Versions SageMath CoCalc versions prior to commit 0d2ff58 Description An arbitrary file upload issue exists in SageMath CoCalc. Successful exploitation allows attackers to execute arbitrary code by uploading a specially crafted SVG file. Recommendation...
CVE-2025-61514: Improper Neutralization of Special Elements used in a Command
An arbitrary file upload vulnerability in SageMath, Inc CoCalc before commit 0d2ff58 allows attackers to execute arbitrary code via uploading a crafted SVG file...
CVE-2025-61514
An arbitrary file upload vulnerability in SageMath, Inc CoCalc before commit 0d2ff58 allows attackers to execute arbitrary code via uploading a crafted SVG file...
CVE-2025-61514
SageMath, Inc CoCalc (specifically the @cocalc/frontend and @cocalc/hub components) is vulnerable to an arbitrary file upload flaw in versions prior to commit 0d2ff58 . The root cause is inadequate validation of specially crafted SVG files , which allows an attacker to achieve arbitrary code exec...