npq

NPQ Documentation This directory contains comprehensive documentation for the NPQ Node Package Quality security auditing tool. Core Documentation optional-features.md Configuration and usage of optional security features, including recent improvements and bug fixes. age.marshall.md Detailed...

CVE-2026-29000

CVE-2026-29000: Proof of Concept PoC for pac4j-jwt Auth Bypass ⚠️ Disclaimer This tool is for educational and ethical security testing purposes only. I do not and will not support threat acting in any way, shape or form. Use at your own risk. This is also my first PoC, so be nice please. This is...

minisign

Minisign A dead simple tool to sign files and verify signatures. Table of Contents Minisign Table of Contents Overview Documentation Installation Prebuilt Packages Building with Zig Building with CMake and GCC or Clang Usage Generating a Key Pair Signing Files Verifying Signatures Verification of...

Starlink-FI

Starlink User Terminal Modchip This repository accompanies the talk titled "Glitched on Earth by Humans: A Black-Box Security Evaluation of the SpaceX Starlink User Terminal". A slide deck is available here, a recording of the talk should be available soon. The talk covers how we managed to execu...

CVE-2026-113469

A failure has been identified in the SNS during dynamic data files signature check. A logic error in the signature verification routine resulting in acceptance of unauthenticated dynamic data update during Autoupdate routine...

CVE-2026-113469 Improper Signature Verification of Active Update Files

A failure has been identified in the SNS during dynamic data files signature check. A logic error in the signature verification routine resulting in acceptance of unauthenticated dynamic data update during Autoupdate routine...

EUVD-2026-104841

A failure has been identified in the SNS during dynamic data files signature check. A logic error in the signature verification routine resulting in acceptance of unauthenticated dynamic data update during Autoupdate routine...

CVE-2026-113469

The SNS is vulnerable to a logic error in its signature verification routine . This flaw allows the system to accept unauthenticated dynamic data updates during the Autoupdate routine . The vulnerability (CWE-287) can lead to high impacts on confidentiality , integrity , and availability (CVSS 3....

CVE-2026-111090

A logic error exists in the signature verification routine resulting in acceptance of unauthenticated update and license files.It is necessary to use only the MyStormshield servers to retrieve update files or licenses, or to use automatic verification via SNS...

CVE-2026-111090 Improper Signature Verification of Firmware Update Files

A logic error exists in the signature verification routine resulting in acceptance of unauthenticated update and license files.It is necessary to use only the MyStormshield servers to retrieve update files or licenses, or to use automatic verification via SNS...

EUVD-2026-104828

A logic error exists in the signature verification routine resulting in acceptance of unauthenticated update and license files.It is necessary to use only the MyStormshield servers to retrieve update files or licenses, or to use automatic verification via SNS...

CVE-2026-111090

A logic error in the signature verification routine allows for the acceptance of unauthenticated update and license files . To mitigate this risk, users should only retrieve updates or licenses from MyStormshield servers or utilize automatic verification via SNS . No specific software versions or...

CVE-2022-21449

CVE 2022 21449 python implementation This project allows you to: Plot an elliptic curve with desired parameters, over a finite field or not Generate a key pair from a given elliptic curve Encrypt / Decrypt a message via ECIES Sign / verify using ECDSA Simulate an exploitation of CVE 2022 21449 Fi...

DataEase v2.10.2 - JWT Signature Verification Bypass

DataEase is an open source data visualization analysis tool that helps users quickly analyze data and gain insights into business trends. In affected versions, the lack of signature verification of JWT tokens allows attackers to forge JWTs, which then allow access to any interface. The...

SimpleHelp <=5.5.15 - OIDC JWT Authentication Bypass

SimpleHelp = 5.5.15 and 6.0 pre-release contain an authentication bypass caused by lack of cryptographic signature verification in OIDC tokens, letting remote unauthenticated attackers gain technician sessions, exploit requires OIDC authentication configured. id: CVE-2026-48558 info: name:...

PT-2026-118268

A failure has been identified in the SNS during dynamic data files signature check. A logic error in the signature verification routine resulting in acceptance of unauthenticated dynamic data update during Autoupdate routine...

CVE-2024-42461

Solution for ECDSA and EDDSA Signature Verification Problems Description Problems have been identified in the verification of ECDSA and EDDSA signatures in the Wycheproof project. Missing checks during the signature decoding stage allow adding or removing zero bytes, which affects the ability to...

CVE-2026-85248

CVE-2026-85248 — camel-pqc: concurrent Signature race signature verification bypass Runnable proof-of-concept reproducer for the Apache Camel vulnerability where the PQC producer held a singlejava.security.Signature instance and used it for every exchange without synchronization. Signature is...

CVE-2022-38691_38692

CVE-2022-38691/38692 persistently boot FDL1/SPL without signature NOTE: first remove sign check of Boot Chain images in FDL1/SPL ​ fdl1 use genfdl1-dl sourcecode ​ spl android 9/10, use genspl-unlock-legacy sourcecode ​ spl android 11+, use genspl-unlock sourcecode ​ windows prebuilt tools can be...

CVE-2025-47827

CVE-2025-47827 Proof-of-concept and vulnerability report for CVE-2025-47827. Contents Description Disclosure Impact Detection Mitigation Binaries Proof of Concept Resources Description In IGEL OS before v11, Secure Boot can be bypassed because the igel-flash-driver module improperly verifies a...