CryKeX

Properties: Cross-platform Minimalism Simplicity Interactivity Compatibility/Portability Application Independable Process Wrapping Process Injection Dependencies: Unix - should work on any Unix-based OS BASH - the whole script root privileges optional Limitations: AES and RSA keys only Fails most...

BeaconEye

BeaconEye Introduction BeaconEye scans running processes for active CobaltStrike beacons. When processes are found to be running beacon, BeaconEye will monitor each process for C2 activity. How it works BeaconEye will scan live processes or MiniDump files for suspected CobaltStrike beacons. In li...

TP-Link Archer C6 V2 1.1.10 Build 20230830 Hardcoded AES Key Credential Disclosure

TP-Link Archer C6 V2 firmware versions prior to version 1.2.1 Build 260902 contain a hardcoded AES key that permits recovery of credentials from an obtained encrypted configuration backup. The proof of concept decrypts supported credential values offline. https://packetstorm.news/download/240260...

CVE-2026-112164

The LaserGest mobile application encrypts stored assistance portal credentials with a hardcoded AES key and IV, allowing an attacker with access to the application package to recover them in cleartext...

EUVD-2026-120088

The LaserGest mobile application encrypts stored assistance portal credentials with a hardcoded AES key and IV, allowing an attacker with access to the application package to recover them in cleartext...

CVE-2026-112164

The LaserGest mobile application is vulnerable to a security flaw where assistance portal credentials are encrypted using a hardcoded AES key and IV . An attacker who gains access to the application package can exploit these static cryptographic values to recover the credentials in cleartext . Th...

CVE-2026-112164 Hardcoded AES Key Enables Credential Disclosure

The LaserGest mobile application encrypts stored assistance portal credentials with a hardcoded AES key and IV, allowing an attacker with access to the application package to recover them in cleartext...

PT-2026-140433

Name of the Vulnerable Software and Affected Versions LaserGest affected versions not specified Description The mobile application encrypts stored assistance portal credentials using a hardcoded AES key and Initialization Vector IV. An attacker who obtains the application package can use these...

CVE-2026-112164: laservideo lasergest: The LaserGest mobile application encrypts stored assistance portal credentials with a hardcoded AES key and IV,…

The LaserGest mobile application encrypts stored assistance portal credentials with a hardcoded AES key and IV, allowing an attacker with access to the application package to recover them in cleartext...

[SECURITY] [DLA 4887-1] cjose security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-4887-1 [email protected] https://www.debian.org/lts/security/ Simon Quigley November 07, 2026 https://wiki.debian.org/LTS -...

CVE-2020-10560-Key-Recovery

CVE-2020-10560 Key Recovery AES This PoC recovers the sitekey for OSSN 5.3 and above. For more information see http://techanarchy.net/blog/cve-2020-10560-ossn-arbitrary-file-read...

GlobalUnProtect

GlobalUnProtect PoC tool for decrypting and collecting GlobalProtect configuration, cookies, and HIP files from windows client installations. Blog post: https://rotarydrone.medium.com/4a1d8fc7773e Usage Run as standalone or in-memory via execute-assembly or equivalent. Collects all contents to an...

IvantiInitrdDecryptor

Here's a quick-and-dirty tool to decrypt the Ivanti device's initrd. It's mostly academic since there are other ways to extract the much more useful LVM keys for the real root device. To use it, copy the kernel file from the Ivanti, and extract the ELF from the bzImage I used binwalk -e. Throw it...

MiracleLinux 9 : cjose-0.6.1-17.el9_8.1 (AXSA:2026-2213:01)

The remote MiracleLinux 9 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2026-2213:01 advisory. cjose: cjose: Heap buffer overflow in AES Key Wrap decryption leads to denial of service CVE-2026-53938 Tenable has extracted the preceding description block...

CVE-2026-27944

CVE-2026-27944 POC: Nginx UI Unauthenticated Backup Download + Dashboard Access This repository contains an enhanced Proof of Concept POC exploit for CVE-2026-27944 , a critical vulnerability in Nginx UI. The vulnerability allows an unauthenticated attacker to download system backups via the...

HTB-Snapped-Writeup

HTB-Snapped-Writeup HTB Snapped — Hard Linux machine writeup. CVE-2026-27944 Nginx UI unauthenticated backup disclosure chained with CVE-2026-3888 snapd race condition LPE to achieve full system compromise. HTB: Snapped — Writeup Difficulty: Hard OS: Linux Ubuntu 24.04 Release Date: 23 Mar 2026...

CVE-2023-43261

CVE-2023-43261 - PoC Critical Vulnerability Exposes Sensitive Information and Enables Unauthorized Access in Milesight Routers Date: 1 October 2023 Vendor of the product: Milesight Formerly Xiamen Ursalink Technology Co., Ltd. Affected Products: UR5X, UR32L, UR32, UR35, UR41 and there might be...

CVE-2016-4437

shiro-1.2.4 Vulnerability Tool Decrypt rememberMe value and export corresponding class file Usage xk-mt-rememberMe解码.py Instructions: After running, first enter the key or press Enter to use the default key 'kPH+bIxk5D2deZiIxcaaaA==', then enter the rememberMe value from the request packet. After...

Rocky Linux 9 [CIQ] Security Update: cjose / cjose-debuginfo / cjose-debugsource / cjose-devel (crlsa-2026_90812)

The Rocky Linux 9 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202690812 advisory. cjose: cjose: Heap buffer overflow in AES Key Wrap decryption leads to denial of service CVE-2026-53938 Tenable has extracted the preceding description block...

CVE-2026-27944

CVE-2026-27944 - Nginx UI Unauthenticated Backup Download & Decryption https://img.shields.io/badge/python-3.6+-blue.svg https://img.shields.io/badge/license-MIT-green https://img.shields.io/badge/PoC-Exploit-red A proof‑of‑concept PoC exploit for CVE‑2026‑27944, a critical vulnerability in Nginx...