chainoffools

CryptoAPI CVE-2020-0601: Explotación de la vulnerabilidad de suplantación de CryptoAPI de Windows. Más información en nuestro artículo de blog. Requisitos de instalación root@kitploit: pip install -U -r requirements.txt La generación de certificados funciona con OpenSSL versión hasta 1.0.2u...

CVE-2020-0601

CVE-2020-0601 PoC para CVE-2020-0601: Windows CryptoAPI Crypt32.dll POC: https://github.com/ollypwn/CurveBall En kali: 1.Crear archivo PKCS12 root@kitploit: openssl req -new -x509 -key spoofedca.key -out spoofedca.crt openssl ecparam -name secp384r1 -genkey -noout -out Microsoft.key openssl req...

CVE-2026-55144

Missing cryptographic step in Windows CryptoAPI allows an authorized attacker to perform tampering locally...

CVE-2026-55144

Missing cryptographic step in Windows CryptoAPI allows an authorized attacker to perform tampering locally...

Windows Cryptography API: Next Generation (CNG) Tampering Vulnerability

Missing cryptographic step in Windows CryptoAPI allows an authorized attacker to perform tampering locally...

EUVD-2023-39342

Malicious code in bioql PyPI...

EUVD-2023-28924

Malicious code in bioql PyPI...

EUVD-2021-7146

Malicious code in bioql PyPI...

EUVD-2023-28925

Malicious code in bioql PyPI...

BIT-GOLANG-2020-0601

A spoofing vulnerability exists in the way Windows CryptoAPI Crypt32.dll validates Elliptic Curve Cryptography ECC certificates.An attacker could exploit the vulnerability by using a spoofed code-signing certificate to sign a malicious executable, making it appear the file was from a trusted,...

CVE-2023-35339

Windows CryptoAPI Denial of Service Vulnerability...

Microsoft Windows CryptoAPI 安全漏洞

Microsoft Windows CryptoAPI is a cryptographic compiler added to the Windows operating system by Microsoft. CryptoAPI supports synchronous and asynchronous key encryption and the management of digital certificates in the operating system as the basis for data encryption and decryption functions. ...

PT-2023-3852 · Microsoft · Windows Cryptoapi +1

Name of the Vulnerable Software and Affected Versions: Windows CryptoAPI affected versions not specified Description: The issue is related to incorrect clearing or release of resources in the Windows CryptoAPI, which can be exploited by a remote attacker to cause a denial of service...

CVE-2023-24937

Windows CryptoAPI Denial of Service Vulnerability...

CVE-2023-24937

Windows CryptoAPI Denial of Service Vulnerability...

Denial of service

Windows CryptoAPI Denial of Service Vulnerability...

CVE-2023-24937 Windows CryptoAPI Denial of Service Vulnerability

...

CVE-2023-24938 Windows CryptoAPI Denial of Service Vulnerability

...

PT-2023-3502 · Microsoft · Windows Cryptoapi +1

Name of the Vulnerable Software and Affected Versions: Windows CryptoAPI affected versions not specified Description: The issue is related to insufficient input validation in the Windows CryptoAPI interface, which can be exploited by a remote attacker to cause a denial of service. This can affect...

SUSE CVE-2020-0601

A spoofing vulnerability exists in the way Windows CryptoAPI Crypt32.dll validates Elliptic Curve Cryptography ECC certificates.An attacker could exploit the vulnerability by using a spoofed code-signing certificate to sign a malicious executable, making it appear the file was from a trusted,...