439 matches found
Use of Hard-coded Cryptographic Key
Overview Affected versions of this package are vulnerable to Use of Hard-coded Cryptographic Key in the password encryption process. An attacker can recover original cleartext password values by accessing the internal database content, as the encryption key is hard-coded and publicly known. Note:...
CVE-2025-65998
Apache Syncope can be configured to store the user password values in the internal database with AES encryption, though this is not the default option. When AES is configured, the default key value, hard-coded in the source code, is always used. This allows a malicious attacker, once obtained...
CVE-2025-65998 Apache Syncope: Default AES key used for internal password encryption
Apache Syncope can be configured to store the user password values in the internal database with AES encryption, though this is not the default option. When AES is configured, the default key value, hard-coded in the source code, is always used. This allows a malicious attacker, once obtained...
CVE-2025-65998 Apache Syncope: Default AES key used for internal password encryption
Apache Syncope can be configured to store the user password values in the internal database with AES encryption, though this is not the default option. When AES is configured, the default key value, hard-coded in the source code, is always used. This allows a malicious attacker, once obtained...
Neptune Rubikon Banking Solution 安全漏洞
Neptune Rubikon Banking Solution is a banking services platform from Neptune UK. A security vulnerability exists in Neptune Rubikon Banking Solution version 4.0.3, which originates from the presence of reflective cross-site scripting in the Search For Customers Information endpoint...
Amazon Linux 2 : libtiff, --advisory ALAS2-2025-3019 (ALAS-2025-3019)
The version of libtiff installed on the remote host is prior to 4.0.3-35. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2025-3019 advisory. Multiple potential integer overflow in tiffcp.c in libtiff = 4.5.1 can allow remote attackers to cause a denial of servic...
EUVD-2006-4561
Malware in sbrugna...
EUVD-2013-0187
Malware in sbrugna...
EUVD-2011-2124
Malware in sbrugna...
EUVD-2006-2794
Malware in sbrugna...
EUVD-2008-4933
Malware in sbrugna...
EUVD-1999-1487
Malware in sbrugna...
EUVD-2024-29137
Malicious code in bioql PyPI...
EUVD-2021-8627
Malicious code in bioql PyPI...
EUVD-2025-25253
Malicious code in bioql PyPI...
EUVD-2021-8626
Malicious code in bioql PyPI...
EUVD-2025-11994
Malicious code in bioql PyPI...
EUVD-2021-8633
Malicious code in bioql PyPI...