ecologyExp.jar

ecologyExp.jar 泛微 OA 데이터베이스 구성 파일 읽기 java -jar ecologyExp.jar http://127.0.0.1 소스 코드 package com.test; import org.apache.http.HttpEntity; import org.apache.http.client.methods.CloseableHttpResponse; import org.apache.http.client.methods.HttpGet; import...

SSCMS_Decrypt

sscms（siteserver cms） 데이터베이스 복호화 소개: SSCMS는 .NET Core 기반으로, 최소한의 비용과 적은 인력 투입으로 가장 짧은 시간 안에 기능이 완비되고 성능이 우수하며 규모가 크고 유지보수가 쉬운 웹사이트 플랫폼을 구축할 수 있습니다. 프로젝트 주소: https://github.com/siteserver/cms Des 복호화 python3 sscmsdecrypt.py + Current Encrypt Data= 0NofLD4zWcY/jm+42NYzug== + secretKey= f9c01027 +...

CVE-2026-0834

CVE-2026-0834 PoC TP-Link 장치 디버그 프로토콜TDDP 인증 우회 CVE-2026-0834 개요 TDDPTP-Link Device Debug Protocol 서비스의 취약점으로 인해 로컬 네트워크의 인증되지 않은 원격 공격자가 관리 명령을 실행할 수 있습니다. TDDPv2 패킷을 처리할 때 pktLength 값이 0이면 단락 평가short-circuit evaluation로 인해 DES 복호화 루틴이 건너뛰어집니다. 28바이트 패킷 헤더를 초과하여 전송된 데이터는 복호화된 페이로드 데이터가 예상되는 버퍼에...

Malicious code in supersignaturenature (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab1df02839294b29ff278b7a80505be50de75eb0f317f4bf29635236a75e4b15 The published dist/ bundles main/module/browser entrypoints contain code absent from the src/ tree: at library load they read an encrypted rsaToken...

MAL-2026-15560 Malicious code in supersignaturenature (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab1df02839294b29ff278b7a80505be50de75eb0f317f4bf29635236a75e4b15 The published dist/ bundles main/module/browser entrypoints contain code absent from the src/ tree: at library load they read an encrypted rsaToken...

Malicious code in mcq-session (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1acf694ae0258defc54c414980c5f8512b7055e69630ede15a8bfb37d2005b9b On any require/import of mcq-session, the main module runs a top-level async IIFE that reads a file at../../../../public/logo.ico a path escaping the...

A heap-based buffer overflow vulnerability was found in Samba within the GSSAPI unwrap_des() and unwrap_des3() routines of Heimdal. The DES and Triple-DES decryption routines in the Heimdal GSSAPI library allow a length-limited write buffer overflow on malloc() allocated memory when presented with a maliciously small packet. This flaw allows a remote user to send specially crafted malicious data to the application possibly resulting in a denial of service (DoS) attack.

...

SUSE CVE-2022-3437

A heap-based buffer overflow vulnerability was found in Samba within the GSSAPI unwrapdes and unwrapdes3 routines of Heimdal. The DES and Triple-DES decryption routines in the Heimdal GSSAPI library allow a length-limited write buffer overflow on malloc allocated memory when presented with a...

ALPINE-CVE-2022-3437

A heap-based buffer overflow vulnerability was found in Samba within the GSSAPI unwrapdes and unwrapdes3 routines of Heimdal. The DES and Triple-DES decryption routines in the Heimdal GSSAPI library allow a length-limited write buffer overflow on malloc allocated memory when presented with a...

CVE-2022-3437

A heap-based buffer overflow vulnerability was found in Samba within the GSSAPI unwrapdes and unwrapdes3 routines of Heimdal. The DES and Triple-DES decryption routines in the Heimdal GSSAPI library allow a length-limited write buffer overflow on malloc allocated memory when presented with a...

DEBIAN-CVE-2022-3437

A heap-based buffer overflow vulnerability was found in Samba within the GSSAPI unwrapdes and unwrapdes3 routines of Heimdal. The DES and Triple-DES decryption routines in the Heimdal GSSAPI library allow a length-limited write buffer overflow on malloc allocated memory when presented with a...

Переполнение буфера в gopherd

Переполнения буфера в подпрограмме дешифрации DES и в других местах...

CRYPTOAdmin 4.1 server with PalmPilot PT-1 token 1.04 PIN Extract ion

@Stake Inc. L0pht Research Labs www.atstake.com www.L0pht.com Security Advisory Advisory Name: CRYPTOCard PalmToken PIN Extraction Release Date: April 10, 2000 Application: CRYPTOAdmin 4.1 server with CRYPTOCard PT-1 token 1.04 Platform: Server software on any environment and token software on Pa...