CVE-2022-1257

CVE-2022-1257 PoC: Acquisizione delle credenziali del database di McAfee Agent Realizzato da scottk817 Questo script è un PoC per CVE-2022-1257 , una vulnerabilità in McAfee Agent Trellix Agent durante l'interazione con il suo database. La vulnerabilità consente agli aggressori di recuperare e...

Percino

Percino Loader Golang Evasivo Percino è un loader Golang che esegue shellcode utilizzando la tecnica del process hollowing con misure anti-sandbox e anti-analisi. Lo shellcode è crittografato con l'algoritmo di crittografia Triple DES 3DES. Bypass completo dell'EDR con qualsiasi framework C2...

PoC

PoC Verschiedene PoCs - Internet der UnSicherheits-Dinge Es lohnt sich, über diese miesen unsicheren Dinge zu lesen: https://ipvm.com/reports/security-exploits Hikvision CVE-2021-36260 2021-10-19 Alle Credits an WatchfulIP https://watchfulip.github.io/...

CVE-2020-12712

CVE-2020-12712: SOS JobScheduler – Entschlüsselung gespeicherter Passwörter Das Skript in diesem Repository ermöglicht es Ihnen, die in der SFTP-Konfigurationsdatei für eine JobScheduler-Instanz gespeicherten Passwörter zu entschlüsseln. Beschreibung SOS JobScheduler ist ein Werkzeug zur...

Simple-Sweet32

Sweet32 Questa è una dimostrazione dell'attacco Sweet32 CVE-2016-2183: https://sweet32.info/ L'attacco è un esempio di attacco del compleanno che sfrutta algoritmi crittografici con dimensioni di blocco piccole 64 bit in modalità CBC, come 3DES e Blowfish. L'attacco richiede la generazione di mol...

CVE-2024-22894

CVE-2024-22894 Scaricato l'ultima versione del firmware della pompa di calore wp2reg-V3.88.0-9015 di https://www.heatpump24.com/DownloadArea.php. All'interno di questo firmware c'è un file chiamato: wp2reg-V3.88.0-9015\wp2reg-AlphaInnotech-prod\home.wp2reg-V3.88.0-9015221213\share\shadow Questo...

CVE-2026-14969

A flaw was found in 389-ds-base where the LDBM backend attribute encryption uses a hardcoded static initialization vector for AES-CBC and 3DES-CBC operations, allowing an attacker with privileged filesystem access to detect plaintext equality across encrypted entries by comparing ciphertext block...

UBUNTU-CVE-2026-14969

A flaw was found in 389-ds-base where the LDBM backend attribute encryption uses a hardcoded static initialization vector for AES-CBC and 3DES-CBC operations, allowing an attacker with privileged filesystem access to detect plaintext equality across encrypted entries by comparing ciphertext block...

EUVD-2008-6752

Malware in sbrugna...

EUVD-2001-0839

Malware in sbrugna...

EUVD-2016-5678

Malware in sbrugna...

EUVD-2019-4673

Malware in sbrugna...

EUVD-2016-2032

Malware in sbrugna...

Security Bulletin: IBM CloudPak for Data Scheduling Service is vulernable to the Sweet32 attack.

Summary The 3DES cipher was available in some TLS cipher suites. Vulnerability Details CVEID:CVE-2016-2183 DESCRIPTION: The DES and Triple DES ciphers, as used in the TLS, SSH, and IPSec protocols and other protocols and products, have a birthday bound of approximately four billion blocks, which...

CVE-2019-13140

Inteno EG200 EG200-WU7P1UADAMO3.16.4-1902261650 routers have a JUCI ACL misconfiguration that allows the "user" account to extract the 3DES key via JSON commands to ubus. The 3DES key is used to decrypt the provisioning file provided by Adamo Telecom on a public URL via cleartext HTTP...

CVE-2025-2545

Vulnerability in Best Practical Solutions, LLC's Request Tracker prior to v5.0.8, where the Triple DES 3DES cryptographic algorithm is used to protect emails sent with S/MIME encryption. Triple DES is considered obsolete and insecure due to its susceptibility to birthday attacks, which could...

PT-2025-19375 · Unknown +2 · Request-Tracker4 +2

Name of the Vulnerable Software and Affected Versions: request-tracker4 versions affected versions not specified Description: The issue concerns the use of a default OpenSSL cipher, specifically 3DES des3, for encrypting SMIME email. This could potentially lead to security issues due to the...

GO-2024-2441 The DES/3DES cipher was used as part of the TLS protocol by installation tools in github.com/karmada-io/karmada

The DES/3DES cipher was used as part of the TLS protocol by installation tools in github.com/karmada-io/karmada...

Insecure Cryptographic Algorithms

github.com/karmada-io/karmada is vulnerable to Insecure Cryptographic Algorithms. The vulnerability is due to the default cipher suits as part of the TLS protocol, which includes the 3DES cypher that is deemed insecure. Attackers could exploit this weaknesses to break TLS security...

GHSA-7XG2-83F8-39MR The DES/3DES cipher was used as part of the TLS protocol by installation tools

Impact What kind of vulnerability is it? Who is impacted? The Karmada components deployed with karmadactl, karma-operator, and helm chart take Golang default cipher suites as part of the TLS protocol, which includes the insecure algorithm. Referring to...