ssh-enum

ssh-enum CVE-2016-6210 统计验证研究 对 OpenSSH 用户名枚举的可重现再调查，基于统计分析。 本项目重新调查了 CVE-2016-6210 ，一个已知的 OpenSSH 定时侧信道漏洞，旨在确定其在现代 Ubuntu Server 使用默认 PAM 配置时是否仍然可观测。 项目并未假设已公开的行为仍然适用，而是通过手动探测、Hydra 和 Metasploit 收集认证计时测量值，并运用 韦尔奇的 t 检验 和 科恩的 d 值 来区分真实的计时信号与测量噪声。 研究发现，在测试的默认配置下 没有统计上显著的计时差异...

CVE-2023-1206-CVE-2025-40040-CVE-2024-49882

组合隐蔽信道：CVE-2023-1206 + CVE-2024-49882 概述 本项目演示了利用两个Linux内核漏洞构建的隐蔽通信信道： 组件| CVE| 目的 ---|---|--- 同步信道| CVE-2023-1206| 通过IPv6哈希碰撞时序实现时钟同步 数据信道| CVE-2024-49882| 通过大页泄漏实现跨容器数据传输 root@kitploit: ┌─────────────────────────────────────────────────────────────────────┐ │ 非加密隐蔽信道 │...

AVX-Side-Channel

基于 AVX 的时序侧信道 — ASLR 检测 作者： Byte Reaper 描述 一个演示如何使用 AVX 内存加载 + RDTSCP 计时以及可选的 SIGSEGV 检测来进行 ASLR 检测的脚本。 要求： Linux x8664 支持 -mavx2 的 GCC 支持 AVX2 和 RDTSCP 的 CPU 构建： root@kitploit: gcc -mavx2 -O2 file.c -o AVX-Side-Channel ./AVX-Side-Channel 快速输出（示例） 快速访问 → 未检测到 ASLR 慢速访问或 SIGSEGV → 检测到 ASLR 备注 DC...

CVE-2026-4567-Post-Quantum-KEM-Timing-Side-Channel-Kyber-Decapsulation-

2. CVE-2026-4567 – 后量子 KEM 定时侧信道（Kyber 解封装） 概述 Kyber KEM 解封装的易受攻击实现会通过密文拒绝步骤中的时间差异泄漏秘密密钥位，从而实现完整的密钥恢复。 严重性： 严重（私钥泄露） 易受攻击的服务器（C）与攻击脚本（Python） root@kitploit: // kybervulndecaps.c - Simulated vulnerable Kyber decapsulation include include include include // Secret key simplified, 16 bytes for demo...

CVE-2026-8794

CVE-2026-8794 — PaperCut NG 中通过认证时序侧信道进行的用户名枚举 字段| 详情 ---|--- CVE ID| CVE-2026-8794 产品| PaperCut NG 受影响版本| 25.0.11（Build 75758）及更早版本 CWE| CWE-208 — 可观察的时序差异 CVSS 分数| 3.7（低）— 单独使用时；与 CVE-2026-8793 链式利用时升级 研究人员| Vivien LEBAS（@Hazaz） 报告时间| 2026 年 5 月 状态| 已修复 — PaperCut NG 26.0.3 摘要 PaperCut NG...

SUSE SLED15: libopenssl-3-devel / libopenssl-3-fips-provider / etc (SUSE-SU-2026:3835-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:3835-1 advisory. OpenSSL is updated to 3.5.0 in SLE-15-SP7: jscPED-16072 Enables Post-Quantum Cryptography PQC TLS support...

SUSE-SU-2026:3835-1 Security update for openssl, openssl-3

This update for openssl, openssl-3 fixes the following issues: OpenSSL is updated to 3.5.0 in SLE-15-SP7: jscPED-16072 Enables Post-Quantum Cryptography PQC TLS support Security issues fixed: CVE-2026-42764: NULL pointer dereference in QUIC server initial packet handling bsc1266347 CVE-2026-34182...

CVE-2026-87737

An issue was discovered in the mirage-crypto-ec package before 2.4.0 for OCaml. There is a timing side channel for NIST elliptic-curve scalar multiplication: the time required for a lookup can depend on a secret...

DEBIAN-CVE-2026-87737

An issue was discovered in the mirage-crypto-ec package before 2.4.0 for OCaml. There is a timing side channel for NIST elliptic-curve scalar multiplication: the time required for a lookup can depend on a secret...

EUVD-2026-74623

An issue was discovered in the mirage-crypto-ec package before 2.4.0 for OCaml. There is a timing side channel for NIST elliptic-curve scalar multiplication: the time required for a lookup can depend on a secret...

CVE-2026-87737

mirage-crypto-ec before 2.4.0 (an OCaml package) contains a timing side channel in NIST elliptic-curve scalar multiplication: the time required for a lookup can depend on a secret value. This may allow an attacker to recover cryptographic secrets via timing measurements. The CVSS 3.1 score is 5.9...

CVE-2026-87737

An issue was discovered in the mirage-crypto-ec package before 2.4.0 for OCaml. There is a timing side channel for NIST elliptic-curve scalar multiplication: the time required for a lookup can depend on a secret...

CVE-2026-87737

An issue was discovered in the mirage-crypto-ec package before 2.4.0 for OCaml. There is a timing side channel for NIST elliptic-curve scalar multiplication: the time required for a lookup can depend on a secret...

Linux Distros Unpatched Vulnerability : CVE-2026-87737

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in the mirage-crypto-ec package before 2.4.0 for OCaml. There is a timing side channel for NIST elliptic-curve scalar multiplication: th...

EUVD-2026-69576

phpseclib — non-constant-time X25519 scalar multiplication permits full private-key recovery...

phpseclib — non-constant-time X25519 scalar multiplication permits full private-key recovery

The pure-PHP X25519 scalar multiplication in phpseclib is not constant-time. Field addition and subtraction each perform a data-dependent conditional modular reduction, so the cost of each Montgomery-ladder step is a linear function of that step's reduction count which is a quantity determined by...

Linux Distros Unpatched Vulnerability : CVE-2026-84308

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - phpseclib is a PHP secure communications library. Prior to 3.0.57 and 4.0.1, pure-PHP X25519 scalar multiplication in phpseclib/Math/PrimeField/Integer.php...

CVE-2026-59276

Several components in Spring Security compare security-sensitive values using standard string equality String.equals rather than a constant-time comparison. Because String.equals returns as soon as it finds a differing character, the time taken to reject an incorrect value is proportional to the...

CVE-2026-84308

phpseclib is a PHP secure communications library. Prior to 3.0.57 and 4.0.1, pure-PHP X25519 scalar multiplication in phpseclib/Math/PrimeField/Integer.php performs data-dependent conditional modular reductions in add and subtract. During the Montgomery ladder in...

DEBIAN-CVE-2026-84308

phpseclib is a PHP secure communications library. Prior to 3.0.57 and 4.0.1, pure-PHP X25519 scalar multiplication in phpseclib/Math/PrimeField/Integer.php performs data-dependent conditional modular reductions in add and subtract. During the Montgomery ladder in...