490 matches found
openssl
Welcome to the OpenSSL Project OpenSSL is a robust, commercial-grade, full-featured Open Source Toolkit for the Transport Layer Security TLS, formerly SSL, Datagram TLS DTLS, and QUIC protocols. The protocol implementations are based on a full-strength general purpose cryptographic library, which...
cryptovenom
CryptoVenom CryptoVenom: The Cryptography Swiss Army knife What is CryptoVenom? CryptoVenom is an OpenSource tool which contains a lot of cryptosystems and cryptoanalysis methods all in one, including classical algorithms, hash algorithms, encoding algorithms, logic gates, mathematical functions,...
rainbowcrackalack
Rainbow Crackalack Author: Joe Testa @therealjoetesta About This project produces open-source code to generate rainbow tables as well as use them to look up password hashes. While the current release only supports NTLM, future releases may support MD5, SHA-1, SHA-256, and possibly more. Both Linu...
hash-identifier
hash-identifier Software to identify the different types of hashes used to encrypt data and especially passwords. Encryption formats supported: ADLER-32 CRC-32 CRC-32B CRC-16 CRC-16-CCITT DESUnix FCS-16 GHash-32-3 GHash-32-5 GOST R 34.11-94 Haval-160 Haval-192 110080 ,Haval-224 114080 ,Haval-256...
HashCheck
PasswordHashCheck Este proyecto tiene como objetivo ayudar en la búsqueda de contraseñas filtradas manteniendo un alto nivel de privacidad utilizando el método de k-anonimato. Para lograrlo, se utilizan las API de diferentes servicios, enviando solo una parte del Hash de la contraseña que queremo...
CVE-2021-36460
CVE-2021-36460 NVD CVE-2021-36460: https://nvd.nist.gov/vuln/detail/CVE-2021-36460 MITRE CVE-2021-36460: https://cve.mitre.org/cgi-bin/cvename.cgi?name=2021-36460 CWE-836: Use of Password Hash Instead of Password for Authentication The VeryFitPro app Android: com.veryfit2hr.second, iOS =3.3.7...
hashes
Hashes mágicos – «colisiones» de hash en PHP Regístrate con contraseña 1 y luego inicia sesión con contraseña 2. Si consigues entrar, entonces el almacenamiento usa el algoritmo especificado para aplicar hash a la contraseña y PHP usa == para compararlas para MD5, SHA-1 y texto plano. MD5, SHA-1,...
git-dump
git-dump This script is a tool to recursively download the contents of the '.git' directory from a website. Using Python and libraries like 'requests' and 'BeautifulSoup', this script examines the directory structure, downloads files, and identifies SHA-1 hashes within Git files. Feature...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: gnupg2 (UTSA-2026-090063)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-090063 advisory. A flaw was found in the way certificate signatures could be forged using collisions found in the SHA-1 algorithm. An attacker could use this weakness to create forge...
CVE-2025-51726
Tal como se solicitó, ahora he demostrado ambas vulnerabilidades BA2022 & BA2015 con escenarios prácticos de explotación y evidencia PoC, lo que muestra cómo un atacante podría abusar de estos problemas en un contexto del mundo real. 📌 1. BA2022 Hash Débil en la Firma de Código – Demostración de...
EulerOS 2.0 SP15 : python-paramiko (EulerOS-SA-2026-3792)
According to the versions of the python-paramiko packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : In Paramiko through 4.0.0 before a448945, rsakey.py allows the SHA-1 algorithm.CVE-2026-44405 Tenable has extracted the preceding...
EulerOS 2.0 SP15 : python-paramiko (EulerOS-SA-2026-3817)
According to the versions of the python-paramiko packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : In Paramiko through 4.0.0 before a448945, rsakey.py allows the SHA-1 algorithm.CVE-2026-44405 Tenable has extracted the preceding...
Security Bulletin: IBM Integrated Analytics System (IIAS) is affected by a weak cryptographic algorithm vulnerability due to Paramiko
Summary Paramiko is used by IBM Integrated Analytics System as a Python library providing SSH protocol implementation for secure connections. CVE-2026-44405 affects Paramiko through version 4.0.0, where the rsakey.py module allows the use of the SHA-1 algorithm, which is considered...
EulerOS Virtualization 2.13.0 : python-paramiko (EulerOS-SA-2026-3231)
According to the versions of the python-paramiko packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : In Paramiko through 4.0.0 before a448945, rsakey.py allows the SHA-1 algorithm.CVE-2026-44405 Tenable has extracted the...
EulerOS Virtualization 2.13.1 : python-paramiko (EulerOS-SA-2026-3191)
According to the versions of the python-paramiko packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : In Paramiko through 4.0.0 before a448945, rsakey.py allows the SHA-1 algorithm.CVE-2026-44405 Tenable has extracted the...
EUVD-2026-58719
kas is a setup tool for bitbake based projects. Prior to version 5.3, when relying solely on a git commit ID SHA-1 or SHA-256 to qualify if a checkout of a repository is equivalent to the state validated while adding its commit ID to a kas configuration, users may be tricked to check out a branch...
CVE-2026-47191 kas checks out SHA-like git branches as valid commits
kas is a setup tool for bitbake based projects. Prior to version 5.3, when relying solely on a git commit ID SHA-1 or SHA-256 to qualify if a checkout of a repository is equivalent to the state validated while adding its commit ID to a kas configuration, users may be tricked to check out a branch...
Security Bulletin:Vulnerability in paramiko affects IBM Netezza Appliance
Summary The paramiko package is used by IBM Netezza Appliance. IBM Netezza Appliance has addressed the applicable CVE CVE-2026-44405 Vulnerability Details CVEID:CVE-2026-44405 DESCRIPTION: In Paramiko through 4.0.0 before a448945, rsakey.py allows the SHA-1 algorithm. CWE:CWE-327: Use of a Broken...
Security Bulletin: IBM Cloud Pak for Data System (CPDS 1.0) is affected by use of a broken cryptographic algorithm vulnerability due to Paramiko
Summary Paramiko is used by IBM Cloud Pak for Data System 1.0 as a Python implementation of the SSH protocol for secure remote connections and file transfers. CVE-2026-44405 affects Paramiko's RSA key handling in rsakey.py, where the SHA-1 algorithm is permitted for cryptographic operations despi...
