ecologyExp.jar

ecologyExp.jar 泛微oa数据库配置文件读取 java -jar ecologyExp.jar http://127.0.0.1 源码 package com.test; import org.apache.http.HttpEntity; import org.apache.http.client.methods.CloseableHttpResponse; import org.apache.http.client.methods.HttpGet; import org.apache.http.impl.client.CloseableHttpClient; import...

SSCMS_Decrypt

sscms（siteserver cms） database decrypt 简介：SSCMS 基于 .NET Core，能够以最低的成本、最少的人力投入在最短的时间内架设一个功能齐全、性能优异、规模庞大并易于维护的网站平台。 项目地址：https://github.com/siteserver/cms Des Decrypt https://github.com/siteserver/cms/blob/master/src/SSCMS/Utils/DesEncryptor.cs root@kitploit: python3 sscmsdecrypt.py + Current Encry...

CVE-2026-0834

CVE-2026-0834（PoC） TP-Link 设备调试协议（TDDP）身份验证绕过（CVE-2026-0834） 概述 TDDP（TP-Link 设备调试协议）服务中的一个漏洞允许本地网络上的未认证远程攻击者执行管理命令。在处理 TDDPv2 数据包时，pktLength 值为 0 会导致 DES 解密例程因短路求值而被跳过。超出 28 字节数据包头的数据被放置在预期存放解密后载荷数据的缓冲区中，从而绕过身份验证，并允许其被解释为有效的命令数据。 攻击者可利用此漏洞执行管理功能，包括在无需凭据的情况下进行恢复出厂设置和设备重启。 该漏洞影响 TDDP...

Malicious code in supersignaturenature (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab1df02839294b29ff278b7a80505be50de75eb0f317f4bf29635236a75e4b15 The published dist/ bundles main/module/browser entrypoints contain code absent from the src/ tree: at library load they read an encrypted rsaToken...

MAL-2026-15560 Malicious code in supersignaturenature (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab1df02839294b29ff278b7a80505be50de75eb0f317f4bf29635236a75e4b15 The published dist/ bundles main/module/browser entrypoints contain code absent from the src/ tree: at library load they read an encrypted rsaToken...

Malicious code in mcq-session (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1acf694ae0258defc54c414980c5f8512b7055e69630ede15a8bfb37d2005b9b On any require/import of mcq-session, the main module runs a top-level async IIFE that reads a file at../../../../public/logo.ico a path escaping the...

CVE-2022-3437

...

SUSE CVE-2022-3437

A heap-based buffer overflow vulnerability was found in Samba within the GSSAPI unwrapdes and unwrapdes3 routines of Heimdal. The DES and Triple-DES decryption routines in the Heimdal GSSAPI library allow a length-limited write buffer overflow on malloc allocated memory when presented with a...

ALPINE-CVE-2022-3437

A heap-based buffer overflow vulnerability was found in Samba within the GSSAPI unwrapdes and unwrapdes3 routines of Heimdal. The DES and Triple-DES decryption routines in the Heimdal GSSAPI library allow a length-limited write buffer overflow on malloc allocated memory when presented with a...

CVE-2022-3437

A heap-based buffer overflow vulnerability was found in Samba within the GSSAPI unwrapdes and unwrapdes3 routines of Heimdal. The DES and Triple-DES decryption routines in the Heimdal GSSAPI library allow a length-limited write buffer overflow on malloc allocated memory when presented with a...

DEBIAN-CVE-2022-3437

A heap-based buffer overflow vulnerability was found in Samba within the GSSAPI unwrapdes and unwrapdes3 routines of Heimdal. The DES and Triple-DES decryption routines in the Heimdal GSSAPI library allow a length-limited write buffer overflow on malloc allocated memory when presented with a...

Переполнение буфера в gopherd

Переполнения буфера в подпрограмме дешифрации DES и в других местах...

CRYPTOAdmin 4.1 server with PalmPilot PT-1 token 1.04 PIN Extract ion

@Stake Inc. L0pht Research Labs www.atstake.com www.L0pht.com Security Advisory Advisory Name: CRYPTOCard PalmToken PIN Extraction Release Date: April 10, 2000 Application: CRYPTOAdmin 4.1 server with CRYPTOCard PT-1 token 1.04 Platform: Server software on any environment and token software on Pa...