CVE-2026-8794

CVE-2026-8794 — Username Enumeration via Authentication Timing Side-Channel in PaperCut NG Field| Details ---|--- CVE ID| CVE-2026-8794 Product| PaperCut NG Affected Version| 25.0.11 Build 75758 and earlier CWE| CWE-208 — Observable Timing Discrepancy CVSS Score| 3.7 Low — standalone; escalates...

ssh-enum

ssh-enum Statistical Validation Study of CVE-2016-6210 A reproducible re-investigation of OpenSSH username enumeration using statistical analysis. This project re-investigates CVE-2016-6210 , a documented OpenSSH timing side-channel, to determine whether it remains observable on a modern Ubuntu...

CVE-2026-4567-Post-Quantum-KEM-Timing-Side-Channel-Kyber-Decapsulation-

2. CVE-2026-4567 – Post-Quantum KEM Timing Side-Channel Kyber Decapsulation Overview A vulnerable implementation of the Kyber KEM decapsulation leaks secret key bits through timing differences in the ciphertext rejection step, enabling full key recovery. Severity: Critical Private Key Compromise...

AVX-Side-Channel

AVX-Based Timing Side Channel — ASLR Detection Author: Byte Reaper Description script that demonstrates ASLR detection using an AVX memory load + RDTSCP timing and optional SIGSEGV detection. Requirements : Linux x8664 GCC with -mavx2 CPU that supports AVX2 and RDTSCP Build : gcc -mavx2 -O2 file....

CVE-2023-1206-CVE-2025-40040-CVE-2024-49882

Combined Covert Channel: CVE-2023-1206 + CVE-2024-49882 Overview This project demonstrates a covert communication channel using two Linux kernel vulnerabilities: Component| CVE| Purpose ---|---|--- Sync Channel| CVE-2023-1206| Clock synchronization via IPv6 hash collision timing Data Channel|...

Security Bulletin: UPDATED bulletin for OpenSSL vulnerabilities impacting AIX. Updated On: Tue Oct 27 12:13:54 CDT 2026. Reason: Updated the iFix link, link was pointing to openssl_fix49.tar, instead of openssl_fix50.tar. And fixed typo in summary.

Summary Vulnerabilities in OpenSSL: CVE-2026-35189 - Memory exhaustion DoS, CVE-2026-54872 - ECDSA/SM2 timing side-channel, CVE-2026-77696 - SM2 timing side-channel,CVE-2026-84782 - Out-of-Bounds Read, CVE-2026-75805 - NULL pointer dereference DoS, CVE-2026-75806 - DTLS connection termination DoS...

CVE-2026-65630

Observable Timing Discrepancy vulnerability in potatosalad jose allows recovery of a long-term X25519 private key through a timing side channel in the pure-Erlang Curve25519 fallback. The pure-Erlang X25519 implementation performs scalar multiplication over the secret private key using a recursiv...

Multiple vulnerabilities impact AIX due to OpenSSL

IBM SECURITY ADVISORY First Issued: Tue Oct 27 03:47:38 CDT 2026 The most recent version of this document is available here: https://aix.software.ibm.com/aix/efixes/security/openssladvisory50.asc Security Bulletin: Multiple vulnerabilities impact AIX due to OpenSSL...

Linux Distros Unpatched Vulnerability : CVE-2026-65630

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Observable Timing Discrepancy vulnerability in potatosalad jose allows recovery of a long-term X25519 private key through a timing side channel in the pure-Erla...

DEBIAN-CVE-2026-65630

Observable Timing Discrepancy vulnerability in potatosalad jose allows recovery of a long-term X25519 private key through a timing side channel in the pure-Erlang Curve25519 fallback. The pure-Erlang X25519 implementation performs scalar multiplication over the secret private key using a recursiv...

AZL-111158 CVE-2026-65630 affecting package jose 14-3

Observable Timing Discrepancy vulnerability in potatosalad jose allows recovery of a long-term X25519 private key through a timing side channel in the pure-Erlang Curve25519 fallback. The pure-Erlang X25519 implementation performs scalar multiplication over the secret private key using a recursiv...

CVE-2026-65630

Observable Timing Discrepancy vulnerability in potatosalad jose allows recovery of a long-term X25519 private key through a timing side channel in the pure-Erlang Curve25519 fallback. The pure-Erlang X25519 implementation performs scalar multiplication over the secret private key using a recursiv...

UBUNTU-CVE-2026-65630

Observable Timing Discrepancy vulnerability in potatosalad jose allows recovery of a long-term X25519 private key through a timing side channel in the pure-Erlang Curve25519 fallback. The pure-Erlang X25519 implementation performs scalar multiplication over the secret private key using a recursiv...

CVE-2026-65630

Observable Timing Discrepancy vulnerability in potatosalad jose allows recovery of a long-term X25519 private key through a timing side channel in the pure-Erlang Curve25519 fallback. The pure-Erlang X25519 implementation performs scalar multiplication over the secret private key using a recursiv...

CVE-2026-65630 Timing side-channel in pure-Erlang X25519 scalar multiplication leaks the private key in jose

Observable Timing Discrepancy vulnerability in potatosalad jose allows recovery of a long-term X25519 private key through a timing side channel in the pure-Erlang Curve25519 fallback. The pure-Erlang X25519 implementation performs scalar multiplication over the secret private key using a recursiv...

CVE-2026-65630

Observable Timing Discrepancy vulnerability in potatosalad jose allows recovery of a long-term X25519 private key through a timing side channel in the pure-Erlang Curve25519 fallback. The pure-Erlang X25519 implementation performs scalar multiplication over the secret private key using a recursiv...

EEF-CVE-2026-65630 Timing side-channel in pure-Erlang X25519 scalar multiplication leaks the private key in jose

Summary Observable Timing Discrepancy vulnerability in potatosalad jose allows recovery of a long-term X25519 private key through a timing side channel in the pure-Erlang Curve25519 fallback. The pure-Erlang X25519 implementation performs scalar multiplication over the secret private key using a...

CVE-2026-65630 Timing side-channel in pure-Erlang X25519 scalar multiplication leaks the private key in jose

Observable Timing Discrepancy vulnerability in potatosalad jose allows recovery of a long-term X25519 private key through a timing side channel in the pure-Erlang Curve25519 fallback. The pure-Erlang X25519 implementation performs scalar multiplication over the secret private key using a recursiv...

EUVD-2026-110311

Observable Timing Discrepancy vulnerability in potatosalad jose allows recovery of a long-term X25519 private key through a timing side channel in the pure-Erlang Curve25519 fallback. The pure-Erlang X25519 implementation performs scalar multiplication over the secret private key using a recursiv...

CVE-2026-65630

The potatosalad jose library (versions 1.10.0 before 1.11.13 ) contains an Observable Timing Discrepancy (CWE-208) in its pure-Erlang Curve25519 fallback. The vulnerability arises because the recursive Montgomery ladder uses value-dependent Erlang bignum arithmetic (multiplication, remainder, and...