CVE-2022-1257

CVE-2022-1257 PoC: McAfee Agent データベース資格情報の収集 scottk817 作 このスクリプトは CVE-2022-1257 の PoC です。これは、McAfee Agent（Trellix Agent）がデータベースを使用する際に存在する脆弱性です。この脆弱性により、攻撃者は不適切な暗号化キーの取り扱いを悪用して、McAfee Agent のデータベースファイル（ma.db）から資格情報を取得し、復号化することができます。 免責事項...

CVE-2024-22894

CVE-2024-22894 最新のヒートポンプファームウェアバージョン wp2reg-V3.88.0-9015 を https://www.heatpump24.com/DownloadArea.php からダウンロードした。 このファームウェア内には、wp2reg-V3.88.0-9015\wp2reg-AlphaInnotech-prod\home.wp2reg-V3.88.0-9015221213\share\shadow というファイルがある。 これには、システムの root ユーザーの 3DES 暗号化パスワード root:MEfgX2vrPJzuE:0:0:99999:7:...

Percino

Percino 回避型Golangローダー Percinoは、アンチサンドボックスとアンチ解析対策を備え、Process Hollowing技術を利用してシェルコードを実行するGolangローダーです。 シェルコードは、Triple DES（3DES）暗号化アルゴリズムで暗号化されています。 あらゆるC2フレームワークで完全なEDRバイパスが可能です。MDE EDRに対してCobalt Strikeでテスト済みです。 主な機能: 3DES暗号化 サンドボックス回避 解析回避 実行遅延 Process Hollowing TIP: CSでバイナリに署名することを推奨します。 CS: MSF...

PoC

PoC 杂项 PoC - 物联网（不安全）设备 关于这些糟糕的（不）安全设备的内容非常值得一读： https://ipvm.com/reports/security-exploits Hikvision CVE-2021-36260 2021-10-19 所有功劳归于 WatchfulIP https://watchfulip.github.io/ https://github.com/mcw0/PoC/blob/master/CVE-2021-36260.py Dahua CVE-2021-33044, CVE-2021-33045 2021-10-06...

Simple-Sweet32

Sweet32 これはSweet32攻撃（CVE-2016-2183）のデモンストレーションです：https://sweet32.info/ この攻撃は、CBCモードで3DESやBlowfishなど、ブロックサイズが小さい（64ビット）暗号アルゴリズムを悪用する誕生日攻撃の一例です。 攻撃には、既知平文を持つ暗号化ブロックを大量に生成する必要があります。生成後、同一の暗号化ブロックを特定し、未知の平文ブロックの平文値を特定するために利用できます。 この実装では、暗号アルゴリズムとして 3DES Triple DES...

CVE-2023-54356

A flaw was found in Kyverno. The software supports insecure 3DES cipher suites on its TLS endpoints. A remote attacker could exploit this vulnerability, known as the Sweet32 attack, to recover small amounts of plaintext data. This exploitation requires very long-lived TLS connections carrying lar...

SUSE CVE-2023-54356

Kyverno versions 1.9.4 and earlier support insecure 3DES cipher suites TLSECDHERSAWITH3DESEDECBCSHA and TLSRSAWITH3DESEDECBCSHA on their TLS endpoints. These 64-bit block ciphers are vulnerable to the Sweet32 attack CVE-2016-2183, which, over very long-lived TLS connections carrying large volumes...

CVE-2023-54356

Kyverno versions 1.9.4 and earlier support insecure 3DES cipher suites TLSECDHERSAWITH3DESEDECBCSHA and TLSRSAWITH3DESEDECBCSHA on their TLS endpoints. These 64-bit block ciphers are vulnerable to the Sweet32 attack CVE-2016-2183, which, over very long-lived TLS connections carrying large volumes...

CVE-2023-54356 Kyverno before 1.9.5 Sweet32 Medium Strength Cipher Suites

Kyverno versions 1.9.4 and earlier support insecure 3DES cipher suites TLSECDHERSAWITH3DESEDECBCSHA and TLSRSAWITH3DESEDECBCSHA on their TLS endpoints. These 64-bit block ciphers are vulnerable to the Sweet32 attack CVE-2016-2183, which, over very long-lived TLS connections carrying large volumes...

EUVD-2023-60611

Kyverno versions 1.9.4 and earlier support insecure 3DES cipher suites TLSECDHERSAWITH3DESEDECBCSHA and TLSRSAWITH3DESEDECBCSHA on their TLS endpoints. These 64-bit block ciphers are vulnerable to the Sweet32 attack CVE-2016-2183, which, over very long-lived TLS connections carrying large volumes...

CVE-2023-54356 Kyverno before 1.9.5 Sweet32 Medium Strength Cipher Suites

Kyverno versions 1.9.4 and earlier support insecure 3DES cipher suites TLSECDHERSAWITH3DESEDECBCSHA and TLSRSAWITH3DESEDECBCSHA on their TLS endpoints. These 64-bit block ciphers are vulnerable to the Sweet32 attack CVE-2016-2183, which, over very long-lived TLS connections carrying large volumes...

CVE-2023-54356 Kyverno before 1.9.5 Sweet32 Medium Strength Cipher Suites

Kyverno versions 1.9.4 and earlier support insecure 3DES cipher suites TLSECDHERSAWITH3DESEDECBCSHA and TLSRSAWITH3DESEDECBCSHA on their TLS endpoints. These 64-bit block ciphers are vulnerable to the Sweet32 attack CVE-2016-2183, which, over very long-lived TLS connections carrying large volumes...

CVE-2023-54356

Kyverno versions 1.9.4 and earlier support insecure 3DES cipher suites (TLS_ECDHE_RSA_WITH_3DES_EDE_CBC_SHA and TLS_RSA_WITH_3DES_EDE_CBC_SHA) on their TLS endpoints. These 64-bit block ciphers are vulnerable to the Sweet32 attack (CVE-2016-2183), which over very long-lived TLS connections carryi...

CVE-2023-54356: Inadequate Encryption Strength

Kyverno versions 1.9.4 and earlier support insecure 3DES cipher suites TLSECDHERSAWITH3DESEDECBCSHA and TLSRSAWITH3DESEDECBCSHA on their TLS endpoints. These 64-bit block ciphers are vulnerable to the Sweet32 attack CVE-2016-2183, which, over very long-lived TLS connections carrying large volumes...

PT-2026-84144

Kyverno versions 1.9.4 and earlier support insecure 3DES cipher suites TLS ECDHE RSA WITH 3DES EDE CBC SHA and TLS RSA WITH 3DES EDE CBC SHA on their TLS endpoints. These 64-bit block ciphers are vulnerable to the Sweet32 attack CVE-2016-2183, which, over very long-lived TLS connections carrying...

CVE-2020-12712

CVE-2020-12712: SOS JobScheduler में संग्रहीत पासवर्ड का डिक्रिप्शन इस रिपॉजिटरी में स्क्रिप्ट आपको JobScheduler इंस्टेंस के लिए SFTP कॉन्फ़िगरेशन फ़ाइल में संग्रहीत पासवर्ड को डिक्रिप्ट करने की अनुमति देती है। विवरण SOS JobScheduler एक रिमोट सिस्टम प्रशासन टूल है जो उपयोगकर्ताओं को वेब इंटरफ़ेस ...

ANT-2026-45SRWS4Q · bearssl · Heap Buffer Overflow

heap-buffer-overflow high Severity Claude high · Security research firm - · Maintainer - REPORT Anthropic's analysis, sealed at approval. Disclosure to the maintainer was performed by Calif. ANT-2026-45SRWS4Q: BearSSL Missing Block-Alignment Check in cbcchecklength → Unbounded Heap/Stack Write vi...

CVE-2026-14969

A flaw was found in 389-ds-base where the LDBM backend attribute encryption uses a hardcoded static initialization vector for AES-CBC and 3DES-CBC operations, allowing an attacker with privileged filesystem access to detect plaintext equality across encrypted entries by comparing ciphertext block...

AZL-92186 CVE-2026-14969 affecting package 389-ds-base 3.1.1-12

A flaw was found in 389-ds-base where the LDBM backend attribute encryption uses a hardcoded static initialization vector for AES-CBC and 3DES-CBC operations, allowing an attacker with privileged filesystem access to detect plaintext equality across encrypted entries by comparing ciphertext block...

UBUNTU-CVE-2026-14969

A flaw was found in 389-ds-base where the LDBM backend attribute encryption uses a hardcoded static initialization vector for AES-CBC and 3DES-CBC operations, allowing an attacker with privileged filesystem access to detect plaintext equality across encrypted entries by comparing ciphertext block...