CVE-2026-26012

CVE-2026-26012 — Vaultwarden 暗号列挙 PoC 組織コレクション権限を無視した完全な暗号列挙 CVE-2026-26012 の概念実証エクスプロイトです。Vaultwarden = 1.35.2 のアクセス制御の欠陥を利用し、組織のメンバーであれば誰でも、コレクションレベルの権限に関係なく、組織内のすべての 暗号を取得・復号できます。 🤖 注記: このプロジェクトは Claude 3 Opus の支援を受けて開発されました。コード生成、アーキテクチャ設計、ドキュメント作成に AI を活用しています。すべての成果物は品質保証のため手動でレビュー・テスト済みです。...

CVE-2026-26012

CVE-2026-26012 - Prueba de Concepto Omisión de Permisos de Colección para Miembros Autenticados y Enumeración de Cifrados Vaultwarden Referencia NVD: CVE-2026-26012 CVSSv3| Vector de Ataque| Complejidad de Ataque| Privilegios Requeridos| Interacción del Usuario| Confidencialidad| Integridad|...

Exploit for Incorrect Authorization in Dani-Garcia Vaultwarden

CVE-2026-26012 — Vaultwarden Cipher Enumeration PoC Full...

CVE-2026-26012 vaultwarden has Full Cipher Enumeration Ignoring Organization Collection Permissions

vaultwarden is an unofficial Bitwarden compatible server written in Rust, formerly known as bitwardenrs. Prior to 1.35.3, a regular organization member can retrieve all ciphers within an organization, regardless of collection permissions. The endpoint /ciphers/organization-details is accessible t...

[SSLSmart] Smart SSL Cipher Enumeration

SSLSmart is a highly flexible and interactive tool aimed at improving efficiency and reducing false positives during SSL testing. A number of tools allow users to test for supported SSL ciphers suites, but most only provide testers with a fixed set of cipher suites. Further testing is performed b...

Nmap NSE net: ssl-enum-ciphers

This script repeatedly initiates SSL/TLS connections, each time trying a new cipher or compressor while recording whether a host accepts or rejects it. The end result is a list of all the ciphers and compressors that a server accepts. SSLv3/TLSv1 requires more effort to determine which ciphers an...