CVE-2022-25012

CVE-2022-25012 Argus Surveillance DVR v4.0 impiega una crittografia debole delle password. Compilazione root@kitploit: gcc pocland.c -o pocland Esempio di utilizzo root@kitploit: ./pocland B4A1ECB4F539C48C7357F641C9C49083 Riferimenti CVE-2022-25012 Altri PoC disponibili su: pocland...

Security Bulletin: Langflow is affected by weaknesses in secret handling and sensitive configuration access

Summary Langflow includes features for secret protection, environment access, and runtime configuration of workflow components. Weaknesses in cryptographic key handling, exposure of process environment values, and insufficient restriction of sensitive runtime configuration fields could allow...

CACredDecoder

C-Ark Credential Decoder Strumento di exploit per CVE-2021-31796 Uno strumento per decodificare i file di credenziali C-Ark Di: Aaron Mizrachi - https://twitter.com/unmanarc/ Enrique Vaamonde - https://twitter.com/ejvm Prima release: 2/Sep/2019 Divulgazione: 11/Oct/2021 Riferimenti...

wibu-codemeter-analysis

WIBU CodeMeter DLL का क्रिप्टोग्राफिक विश्लेषण WIBU-Systems CodeMeter सुरक्षा पर स्वतंत्र सुरक्षा अनुसंधान उत्तरदायी प्रकटीकरण विक्रेता को सूचित: 24 दिसंबर, 2025 प्रकटीकरण अवधि: 90 दिन सार्वजनिक रिलीज़: 24 मार्च, 2026 दायरा: केवल WibuBz32.dll विश्लेषण सारांश WIBU CodeMeter रनटाइम लाइब्रेरी के...

meshtastic-cve-2025-52464-poc

Meshtastic CVE-2025-52464 प्रूफ ऑफ कॉन्सेप्ट अवलोकन यह प्रोजेक्ट एक सॉफ्टवेयर-मात्र प्रूफ ऑफ कॉन्सेप्ट है जो CVE-2025-52464 का प्रदर्शन करता है, एक कमजोरी जो Meshtastic फर्मवेयर संस्करण 2.5.0 से 2.6.10 को प्रभावित करती है। यह कार्यान्वयन संवेदनशील फर्मवेयर के क्रिप्टोग्राफिक व्यवहार को पुनर्स्थाप...

CVE-2026-4937

IBM PowerVM Hypervisor FW1110.00 through FW1110.20, FW1060.00 through FW1060.71, and FW950.00 through FW950.H2 could allow a local attacker with administrative privileges to decrypt encrypted data due to certain hypervisor calls utilizing less entropy than requested...

CVE-2026-4937 Power System Insufficient Entropy

IBM PowerVM Hypervisor FW1110.00 through FW1110.20, FW1060.00 through FW1060.71, and FW950.00 through FW950.H2 could allow a local attacker with administrative privileges to decrypt encrypted data due to certain hypervisor calls utilizing less entropy than requested...

CVE-2026-74402

A flaw was found in the Linux kernel's atmel-sha204a cryptographic hardware random number generator HWRNG driver. Improper buffer management in both blocking and non-blocking paths causes the driver to fail in providing valid entropy. This occurs because the buffer is read starting from byte 1, a...

CVE-2026-59650

A flaw was found in Bouncy Castle for Java. The software fails to validate Diffie-Hellman peer values during key agreement. A remote attacker can exploit this flaw to compromise cryptographic keys, potentially leading to the decryption of sensitive communications or successful impersonation...

EUVD-2026-60108

opensslencrypt versions before 1.4.0 use HKDF with no salt and static info parameter in key normalization functions, reducing entropy extraction and determinism. Attackers can exploit predictable key derivation with identical inputs to weaken cryptographic security against multi-target attacks...

CVE-2026-74887

openssl_encrypt before 1.4.0 imports Python's non-cryptographic random module (Mersenne Twister) in modules/pqc.py line 15. No current code calls random.*, so no crypto operation is actively affected, but the import creates a latent hazard: future code could accidentally use predictable PRNG outp...

CVE-2026-17616

IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 and IBM Verify Identity Access Container 11.0 through 11.0.3 Reverse Proxy in certain configurations may provide weaker than expected cryptographic validation of user supplied data...

CVE-2026-18536

A flaw was found in Data-Entropy. This component reads remote entropy randomness sources over unencrypted HTTP. An on-path attacker, such as one on an open Wi-Fi network or a compromised internet service provider ISP, can intercept and alter the responses from these sources. This allows the...

CVE-2026-9201 Langflow OSS is affected by arbitrary code execution in component generation, validation, and custom component handling

IBM Langflow OSS 1.0.0 through 1.10.3 could allow an authenticated attacker to execute arbitrary code due to a cryptographic weakness in the custom component validation mechanism. When the optional hardening mode that restricts execution to trusted component templates is enabled, the application...

CVE-2025-15627

A cryptographic weakness exists in the Omada adoption protocol. The protocol relies on hard-coded cryptographic keys to establish trust and protect authentication exchanges between controllers and managed devices during device adoption. An attacker may be able to impersonate trusted controllers o...

CVE-2025-15629

A cryptographic weakness exists in the Omada adoption protocol where session encryption keys used to protect communications between controllers and managed devices may be predictable due to insufficient entropy in session key generation. An attacker who successfully intercepts adoption-related...

CVE-2025-15631 Weak Credential Storage in TP-Link Omada Devices

A cryptographic weakness exists in affected Omada devices where site credentials are protected using a legacy hashing algorithm that does not provide sufficient protection. An attacker who obtains access to stored credential data may be able to recover valid credentials to gain unauthorized acces...

EUVD-2025-210611

A cryptographic weakness exists in the Omada adoption protocol where session encryption keys used to protect communications between controllers and managed devices may be predictable due to insufficient entropy in session key generation. An attacker who successfully intercepts adoption-related...

CVE-2025-15629

The CVE-2025-15629 entry concerns the TP-Link Omada Adoption Protocol. A cryptographic weakness exists where session encryption keys used to protect communications between Omada controllers and managed devices may be predictable due to insufficient entropy in session key generation. The consequen...

PT-2026-67460

A cryptographic weakness exists in the Omada adoption protocol where session encryption keys used to protect communications between controllers and managed devices may be predictable due to insufficient entropy in session key generation. An attacker who successfully intercepts adoption-related...