Percino

Percino Evasive Golang Loader Percino is a Golang loader that execute shellcode utilizing the process hollowing technique with anti-sandbox and anti-analysis measures. The shellcode is encrypted with the Triple DES 3DES encryption algorithm. Full EDR bypass with any C2 Framework. Tested with Coba...

CVE-2024-22894

CVE-2024-22894 Downloaded the latest heatpump firmware version wp2reg-V3.88.0-9015 of https://www.heatpump24.com/DownloadArea.php. Within this firmware is a file called : wp2reg-V3.88.0-9015\wp2reg-AlphaInnotech-prod\home.wp2reg-V3.88.0-9015221213\share\shadow This contains a 3DES encrypted...

PoC

PoC misc PoC - Internet of InSecurity Things Well worth to read about these crappy insecurity things: https://ipvm.com/reports/security-exploits Hikvision CVE-2021-36260 2021-10-19 All credit to WatchfulIP https://watchfulip.github.io/ https://github.com/mcw0/PoC/blob/master/CVE-2021-36260.py Dah...

CVE-2022-1257

CVE-2022-1257 PoC: McAfee Agent Database Credential Harvesting Made by scottk817 This script is a PoC for CVE-2022-1257 , a vulnerability in the McAfee Agent Trellix Agent when working with it's database. The vulnerability allows attackers to retrieve and decrypt credentials from the McAfee Agent...

Simple-Sweet32

Sweet32 This is a demonstration of the Sweet32 attack CVE-2016-2183: https://sweet32.info/ The attack is an example of a birthday attack which exploits crypto algorithms with small block sizes 64-bit in CBC mode, such as 3DES and Blowfish. The attack requires generation of a lot of encrypted bloc...

BIT-KYVERNO-2023-54356 Kyverno before 1.9.5 Sweet32 Medium Strength Cipher Suites

Kyverno versions 1.9.4 and earlier support insecure 3DES cipher suites TLSECDHERSAWITH3DESEDECBCSHA and TLSRSAWITH3DESEDECBCSHA on their TLS endpoints. These 64-bit block ciphers are vulnerable to the Sweet32 attack CVE-2016-2183, which, over very long-lived TLS connections carrying large volumes...

CVE-2023-54356

A flaw was found in Kyverno. The software supports insecure 3DES cipher suites on its TLS endpoints. A remote attacker could exploit this vulnerability, known as the Sweet32 attack, to recover small amounts of plaintext data. This exploitation requires very long-lived TLS connections carrying lar...

SUSE CVE-2023-54356

Kyverno versions 1.9.4 and earlier support insecure 3DES cipher suites TLSECDHERSAWITH3DESEDECBCSHA and TLSRSAWITH3DESEDECBCSHA on their TLS endpoints. These 64-bit block ciphers are vulnerable to the Sweet32 attack CVE-2016-2183, which, over very long-lived TLS connections carrying large volumes...

CVE-2023-54356

Kyverno versions 1.9.4 and earlier support insecure 3DES cipher suites TLSECDHERSAWITH3DESEDECBCSHA and TLSRSAWITH3DESEDECBCSHA on their TLS endpoints. These 64-bit block ciphers are vulnerable to the Sweet32 attack CVE-2016-2183, which, over very long-lived TLS connections carrying large volumes...

CVE-2023-54356 Kyverno before 1.9.5 Sweet32 Medium Strength Cipher Suites

Kyverno versions 1.9.4 and earlier support insecure 3DES cipher suites TLSECDHERSAWITH3DESEDECBCSHA and TLSRSAWITH3DESEDECBCSHA on their TLS endpoints. These 64-bit block ciphers are vulnerable to the Sweet32 attack CVE-2016-2183, which, over very long-lived TLS connections carrying large volumes...

CVE-2023-54356

Kyverno versions 1.9.4 and earlier support insecure 3DES cipher suites (TLS_ECDHE_RSA_WITH_3DES_EDE_CBC_SHA and TLS_RSA_WITH_3DES_EDE_CBC_SHA) on their TLS endpoints. These 64-bit block ciphers are vulnerable to the Sweet32 attack (CVE-2016-2183), which over very long-lived TLS connections carryi...

CVE-2023-54356 Kyverno before 1.9.5 Sweet32 Medium Strength Cipher Suites

Kyverno versions 1.9.4 and earlier support insecure 3DES cipher suites TLSECDHERSAWITH3DESEDECBCSHA and TLSRSAWITH3DESEDECBCSHA on their TLS endpoints. These 64-bit block ciphers are vulnerable to the Sweet32 attack CVE-2016-2183, which, over very long-lived TLS connections carrying large volumes...

EUVD-2023-60611

Kyverno versions 1.9.4 and earlier support insecure 3DES cipher suites TLSECDHERSAWITH3DESEDECBCSHA and TLSRSAWITH3DESEDECBCSHA on their TLS endpoints. These 64-bit block ciphers are vulnerable to the Sweet32 attack CVE-2016-2183, which, over very long-lived TLS connections carrying large volumes...

CVE-2023-54356 Kyverno before 1.9.5 Sweet32 Medium Strength Cipher Suites

Kyverno versions 1.9.4 and earlier support insecure 3DES cipher suites TLSECDHERSAWITH3DESEDECBCSHA and TLSRSAWITH3DESEDECBCSHA on their TLS endpoints. These 64-bit block ciphers are vulnerable to the Sweet32 attack CVE-2016-2183, which, over very long-lived TLS connections carrying large volumes...

CVE-2023-54356: Inadequate Encryption Strength

Kyverno versions 1.9.4 and earlier support insecure 3DES cipher suites TLSECDHERSAWITH3DESEDECBCSHA and TLSRSAWITH3DESEDECBCSHA on their TLS endpoints. These 64-bit block ciphers are vulnerable to the Sweet32 attack CVE-2016-2183, which, over very long-lived TLS connections carrying large volumes...

CVE-2020-12712

CVE-2020-12712: SOS JobScheduler में संग्रहीत पासवर्ड का डिक्रिप्शन इस रिपॉजिटरी में स्क्रिप्ट आपको JobScheduler इंस्टेंस के लिए SFTP कॉन्फ़िगरेशन फ़ाइल में संग्रहीत पासवर्ड को डिक्रिप्ट करने की अनुमति देती है। विवरण SOS JobScheduler एक रिमोट सिस्टम प्रशासन टूल है जो उपयोगकर्ताओं को वेब इंटरफ़ेस ...

ANT-2026-45SRWS4Q · bearssl · Heap Buffer Overflow

heap-buffer-overflow high Severity Claude high · Security research firm - · Maintainer - REPORT Anthropic's analysis, sealed at approval. Disclosure to the maintainer was performed by Calif. ANT-2026-45SRWS4Q: BearSSL Missing Block-Alignment Check in cbcchecklength → Unbounded Heap/Stack Write vi...

AZL-92186 CVE-2026-14969 affecting package 389-ds-base 3.1.1-12

A flaw was found in 389-ds-base where the LDBM backend attribute encryption uses a hardcoded static initialization vector for AES-CBC and 3DES-CBC operations, allowing an attacker with privileged filesystem access to detect plaintext equality across encrypted entries by comparing ciphertext block...

CVE-2026-14969

A flaw was found in 389-ds-base where the LDBM backend attribute encryption uses a hardcoded static initialization vector for AES-CBC and 3DES-CBC operations, allowing an attacker with privileged filesystem access to detect plaintext equality across encrypted entries by comparing ciphertext block...

UBUNTU-CVE-2026-14969

A flaw was found in 389-ds-base where the LDBM backend attribute encryption uses a hardcoded static initialization vector for AES-CBC and 3DES-CBC operations, allowing an attacker with privileged filesystem access to detect plaintext equality across encrypted entries by comparing ciphertext block...