CTT-enhanced-Apache-mod_auth_digest-timing-attack-exploit

CTT-enhanced-Apache-modauthdigest-timing-attack-exploit CTT-Enhanced Apache modauthdigest Timing Attack — CVE-2026-33006 Remote Digest Authentication Bypass → 33-Layer Temporal Timing Attack Original vulnerability: Apache HTTP Server 2.4.66 modauthdigest timing leak CTVSS Original: 4.8 Medium...

CVE-2023-1206-CVE-2025-40040-CVE-2024-49882

Combined Covert Channel: CVE-2023-1206 + CVE-2024-49882 Overview This project demonstrates a covert communication channel using two Linux kernel vulnerabilities: Component| CVE| Purpose ---|---|--- Sync Channel| CVE-2023-1206| Clock synchronization via IPv6 hash collision timing Data Channel|...

Hardware-Vulnerability-with-Proof-of-Concept-

🛡️ Spectre Variant 2 CVE-2017-5715 — Hardware Vulnerability Research An in-depth research paper and hands-on Proof-of-Concept PoC exploring speculative execution attacks on modern CPUs. 📖 Overview This project is a research and lab-based exploration of Spectre Variant 2 CVE-2017-5715 , also known...

CVE-2026-25050

CVE-2026-25050 – Authentication Timing Attack This repository contains a Proof of Concept demonstrating a timing attack affecting the NativeAuthenticationStrategy.authenticate method. This PoC is provided as a technical demonstration for blog / research purposes. Vulnerability The authentication...

AVX-Side-Channel

AVX-Based Timing Side Channel — ASLR Detection Author: Byte Reaper Description script that demonstrates ASLR detection using an AVX memory load + RDTSCP timing and optional SIGSEGV detection. Requirements : Linux x8664 GCC with -mavx2 CPU that supports AVX2 and RDTSCP Build : gcc -mavx2 -O2 file....

CVE-2016-6210

CVE-2016-6210 User name enumeration against SSH daemons affected by CVE-2016-6210. Use against your own hosts only! Attacking stuff you are not permitted to may put you in big trouble! INSTALATION Clone the Repository: git clone https://github.com/coolbabayaga/CVE-2016-6210.git cd...

cve-2024-13176-timing-analysis

Instrumented Detection of Low-Amplitude ECDSA Timing Leakage in CVE-2024-13176 This repository contains the research report, website, data, source material, and reproducibility files for an independent study of CVE-2024-13176. The project looks at whether the nonce-related timing condition report...

Security Bulletin: UPDATED bulletin for OpenSSL vulnerabilities impacting AIX. Updated On: Tue Oct 27 12:13:54 CDT 2026. Reason: Updated the iFix link, link was pointing to openssl_fix49.tar, instead of openssl_fix50.tar. And fixed typo in summary.

Summary Vulnerabilities in OpenSSL: CVE-2026-35189 - Memory exhaustion DoS, CVE-2026-54872 - ECDSA/SM2 timing side-channel, CVE-2026-77696 - SM2 timing side-channel,CVE-2026-84782 - Out-of-Bounds Read, CVE-2026-75805 - NULL pointer dereference DoS, CVE-2026-75806 - DTLS connection termination DoS...

CVE-2026-65630

Observable Timing Discrepancy vulnerability in potatosalad jose allows recovery of a long-term X25519 private key through a timing side channel in the pure-Erlang Curve25519 fallback. The pure-Erlang X25519 implementation performs scalar multiplication over the secret private key using a recursiv...

crypto/internal/nistec: golang: Timing sidechannel for P-256 on ppc64le in crypto/internal/nistec

A flaw was found in the Golang crypto/internal/nistec package. Due to the usage of a variable time instruction in the assembly implementation of an internal function, a small number of bits of secret scalars are leaked on the ppc64le architecture. Considering how this function is used, this leaka...

Security Bulletin: IBM HTTP Server is affected by multiple vulnerabilities due to the included Apache Portable Runtime Utility

Summary IBM HTTP Server used by IBM WebSphere Application Server is affected by multiple vulnerabilities due to Apache Portable Runtime Utility. Vulnerability Details CVEID:CVE-2026-32327 DESCRIPTION: A bug in APR-util version 1.6.3 and earlier allows a stack recursion attack against any library...

cve-2018-15473

CVE-2018-15473 OpenSSH through 7.7 is prone to a user enumeration vulnerability due to not delaying bailout for an invalid authenticating user until after the packet containing the request has been fully parsed, related to auth2-gss.c, auth2-hostbased.c, and auth2-pubkey.c. Install You may need t...

CVE-2023-30458

CVE-2023-30458 Exploit Title: Medicine Tracker System 1.0 - Observable Discrepancy: Username enumeration via response timing Date: April, 22 2023 Exploit Author: William David Mathisen d34dun1c02n Vendor Homepage:...

CVE-2016-6210-exploit

CVE-2016-6210-exploit Custom exploit python 2.7 written for enumerating usernames as per CVE-2016-6210 OpenSSH 7.2-p2 & prior should only be used on authorised systems DESCRIPTION I wrote this program as a tool to exploit CVE-2016-6210, which is a vulnerability in OpenSSH before version 7.3...

Multiple vulnerabilities impact AIX due to OpenSSL

IBM SECURITY ADVISORY First Issued: Tue Oct 27 03:47:38 CDT 2026 The most recent version of this document is available here: https://aix.software.ibm.com/aix/efixes/security/openssladvisory50.asc Security Bulletin: Multiple vulnerabilities impact AIX due to OpenSSL...

Linux Distros Unpatched Vulnerability : CVE-2026-65630

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Observable Timing Discrepancy vulnerability in potatosalad jose allows recovery of a long-term X25519 private key through a timing side channel in the pure-Erla...

AZL-111158 CVE-2026-65630 affecting package jose 14-3

Observable Timing Discrepancy vulnerability in potatosalad jose allows recovery of a long-term X25519 private key through a timing side channel in the pure-Erlang Curve25519 fallback. The pure-Erlang X25519 implementation performs scalar multiplication over the secret private key using a recursiv...

DEBIAN-CVE-2026-65630

Observable Timing Discrepancy vulnerability in potatosalad jose allows recovery of a long-term X25519 private key through a timing side channel in the pure-Erlang Curve25519 fallback. The pure-Erlang X25519 implementation performs scalar multiplication over the secret private key using a recursiv...

CVE-2026-65630

Observable Timing Discrepancy vulnerability in potatosalad jose allows recovery of a long-term X25519 private key through a timing side channel in the pure-Erlang Curve25519 fallback. The pure-Erlang X25519 implementation performs scalar multiplication over the secret private key using a recursiv...

CVE-2026-65630

Observable Timing Discrepancy vulnerability in potatosalad jose allows recovery of a long-term X25519 private key through a timing side channel in the pure-Erlang Curve25519 fallback. The pure-Erlang X25519 implementation performs scalar multiplication over the secret private key using a recursiv...