CVE-2022-1257

CVE-2022-1257 PoC: McAfee 에이전트 데이터베이스 자격 증명 탈취 scottk817 제작 이 스크립트는 McAfee 에이전트Trellix 에이전트가 데이터베이스를 사용할 때 발생하는 취약점인 CVE-2022-1257 에 대한 PoC입니다. 이 취약점은 부적절한 암호화 키 처리로 인해 공격자가 McAfee 에이전트 데이터베이스 파일ma.db에서 자격 증명을 추출하고 복호화할 수 있게 합니다. 면책 조항 이 스크립트는 교육 목적으로만 제작되었습니다. 소유하지 않았거나 테스트에 대한 명시적 허가를 받지 않은...

Simple-Sweet32

Sweet32 Ceci est une démonstration de l'attaque Sweet32 CVE-2016-2183 : https://sweet32.info/ L'attaque est un exemple d'attaque par anniversaire qui exploite des algorithmes cryptographiques avec de petites tailles de blocs 64 bits en mode CBC, comme 3DES et Blowfish. L'attaque nécessite la...

Percino

Percino Evasive Golang Loader Percino — это загрузчик на Golang, который выполняет shellcode, используя технику process hollowing, с мерами против песочниц и анализа. Shellcode шифруется с помощью алгоритма тройного DES 3DES. Полный обход EDR с любой C2-платформой. Протестировано с Cobalt Strike...

PoC

PoC PoC divers - Internet des objets insécurisés Ça vaut vraiment la peine de lire ces insécurités pourries : https://ipvm.com/reports/security-exploits Hikvision CVE-2021-36260 2021-10-19 Tout le crédit à WatchfulIP https://watchfulip.github.io/...

CVE-2024-22894

CVE-2024-22894 Загружена последняя версия прошивки теплового насоса wp2reg-V3.88.0-9015 с https://www.heatpump24.com/DownloadArea.php. Внутри этой прошивки находится файл: wp2reg-V3.88.0-9015\wp2reg-AlphaInnotech-prod\home.wp2reg-V3.88.0-9015221213\share\shadow Он содержит зашифрованный 3DES паро...

CVE-2020-12712

CVE-2020-12712: Расшифровка хранящегося пароля в SOS JobScheduler Скрипт в этом репозитории позволяет расшифровать парольи, хранящиеся в файле конфигурации SFTP для экземпляра JobScheduler. Описание SOS JobScheduler — это инструмент для удаленного администрирования системы, позволяющий вызывать...

CVE-2026-14969

A flaw was found in 389-ds-base where the LDBM backend attribute encryption uses a hardcoded static initialization vector for AES-CBC and 3DES-CBC operations, allowing an attacker with privileged filesystem access to detect plaintext equality across encrypted entries by comparing ciphertext block...

UBUNTU-CVE-2026-14969

A flaw was found in 389-ds-base where the LDBM backend attribute encryption uses a hardcoded static initialization vector for AES-CBC and 3DES-CBC operations, allowing an attacker with privileged filesystem access to detect plaintext equality across encrypted entries by comparing ciphertext block...

EUVD-2008-6752

Malware in sbrugna...

EUVD-2001-0839

Malware in sbrugna...

EUVD-2016-5678

Malware in sbrugna...

EUVD-2019-4673

Malware in sbrugna...

EUVD-2016-2032

Malware in sbrugna...

Security Bulletin: IBM CloudPak for Data Scheduling Service is vulernable to the Sweet32 attack.

Summary The 3DES cipher was available in some TLS cipher suites. Vulnerability Details CVEID:CVE-2016-2183 DESCRIPTION: The DES and Triple DES ciphers, as used in the TLS, SSH, and IPSec protocols and other protocols and products, have a birthday bound of approximately four billion blocks, which...

CVE-2019-13140

Inteno EG200 EG200-WU7P1UADAMO3.16.4-1902261650 routers have a JUCI ACL misconfiguration that allows the "user" account to extract the 3DES key via JSON commands to ubus. The 3DES key is used to decrypt the provisioning file provided by Adamo Telecom on a public URL via cleartext HTTP...

CVE-2025-2545

Vulnerability in Best Practical Solutions, LLC's Request Tracker prior to v5.0.8, where the Triple DES 3DES cryptographic algorithm is used to protect emails sent with S/MIME encryption. Triple DES is considered obsolete and insecure due to its susceptibility to birthday attacks, which could...

PT-2025-19375 · Unknown +2 · Request-Tracker4 +2

Name of the Vulnerable Software and Affected Versions: request-tracker4 versions affected versions not specified Description: The issue concerns the use of a default OpenSSL cipher, specifically 3DES des3, for encrypting SMIME email. This could potentially lead to security issues due to the...

GO-2024-2441 The DES/3DES cipher was used as part of the TLS protocol by installation tools in github.com/karmada-io/karmada

The DES/3DES cipher was used as part of the TLS protocol by installation tools in github.com/karmada-io/karmada...

Insecure Cryptographic Algorithms

github.com/karmada-io/karmada is vulnerable to Insecure Cryptographic Algorithms. The vulnerability is due to the default cipher suits as part of the TLS protocol, which includes the 3DES cypher that is deemed insecure. Attackers could exploit this weaknesses to break TLS security...

GHSA-7XG2-83F8-39MR The DES/3DES cipher was used as part of the TLS protocol by installation tools

Impact What kind of vulnerability is it? Who is impacted? The Karmada components deployed with karmadactl, karma-operator, and helm chart take Golang default cipher suites as part of the TLS protocol, which includes the insecure algorithm. Referring to...