50 matches found
chainoffools
CryptoAPI CVE-2020-0601: Windows CryptoAPI のなりすまし脆弱性の悪用。詳細はブログ記事をご覧ください。 必要条件のインストール pip install -U -r requirements.txt 証明書の生成はOpenSSLバージョン1.0.2uまでで動作します。 CA証明書 ここではUSERTrust ECC Certification Authorityを使用しましたが、P-384曲線で動作する任意のルート証明書で構いません。 ルート証明書の公開鍵に一致する秘密鍵を生成するために、スクリプトgen-key.py （Python...
CVE-2020-0601
CVE-2020-0601 PoC for CVE-2020-0601- Windows CryptoAPI Crypt32.dll POC: https://github.com/ollypwn/CurveBall On kali: 1.Make PKCS12 file openssl req -new -x509 -key spoofedca.key -out spoofedca.crt openssl ecparam -name secp384r1 -genkey -noout -out Microsoft.key openssl req -new -key Microsoft.k...
CVE-2026-55144
Missing cryptographic step in Windows CryptoAPI allows an authorized attacker to perform tampering locally...
CVE-2026-55144
Missing cryptographic step in Windows CryptoAPI allows an authorized attacker to perform tampering locally...
Windows Cryptography API: Next Generation (CNG) Tampering Vulnerability
Missing cryptographic step in Windows CryptoAPI allows an authorized attacker to perform tampering locally...
CVE-2026-55144: Missing Cryptographic Step
Missing cryptographic step in Windows CryptoAPI allows an authorized attacker to perform tampering locally...
PT-2026-58256
Name of the Vulnerable Software and Affected Versions Windows CryptoAPI affected versions not specified Description A missing cryptographic step in the Windows CryptoAPI allows an authorized attacker to perform local tampering, which can affect the system. Recommendations At the moment, there is ...
EUVD-2023-28924
Malicious code in bioql PyPI...
EUVD-2023-39342
Malicious code in bioql PyPI...
EUVD-2021-7146
Malicious code in bioql PyPI...
EUVD-2023-28925
Malicious code in bioql PyPI...
BIT-GOLANG-2020-0601
A spoofing vulnerability exists in the way Windows CryptoAPI Crypt32.dll validates Elliptic Curve Cryptography ECC certificates.An attacker could exploit the vulnerability by using a spoofed code-signing certificate to sign a malicious executable, making it appear the file was from a trusted,...
CVE-2023-35339
Windows CryptoAPI Denial of Service Vulnerability...
PT-2023-3852 · Microsoft · Windows Cryptoapi +1
Name of the Vulnerable Software and Affected Versions: Windows CryptoAPI affected versions not specified Description: The issue is related to incorrect clearing or release of resources in the Windows CryptoAPI, which can be exploited by a remote attacker to cause a denial of service...
CVE-2023-35339: Uncontrolled Resource Consumption
Windows CryptoAPI Denial of Service Vulnerability...
Microsoft Windows CryptoAPI 安全漏洞
Microsoft Windows CryptoAPI is a cryptographic compiler added to the Windows operating system by Microsoft. CryptoAPI supports synchronous and asynchronous key encryption and the management of digital certificates in the operating system as the basis for data encryption and decryption functions. ...
CVE-2023-24937
Windows CryptoAPI Denial of Service Vulnerability...
CVE-2023-24937
Windows CryptoAPI Denial of Service Vulnerability...
