kr00ker

kr00ker 説明 このスクリプトは、KR00K脆弱性（CVE-2019-15126）を悪用する簡単な実験であり、脆弱なデバイス（アクセスポイントまたはクライアント）の一部のWPA2 CCMPデータを復号できるようにします。 より具体的には、このスクリプトはWPA2 CCMPパケットの復号データを取得しようとします。ただし、以下の情報が必要です。 TK（128ビットすべてゼロ） Nonce（パケットヘッダで平文で送信） 暗号化データ ここで： WPA2 AES-CCMP復号 -- AESNonce,TK XOR 暗号化データ = 復号データ 復号されたストリームは...

details-for-CVE-2022-46505

CVE-2022-46505 の詳細 MatrixSSL セッション再開バグ 1. バグの説明 MatrixSSL 4.5.1-open およびそれ以前のバージョンには、SessionID フィールドの安全なチェックが行われず、その結果 すべてゼロの MasterSecret が誤って使用され、機密データが復号化される可能性がある問題があります。 2. 影響を受けるバージョン MatrixSSL 4.5.1-open およびそれ以前 3. 脆弱性タイプ TLS セッション再開の復号化 4. バグの詳細 matrixssl...

CVE-2020-5248

CVE-2020-5248 Prueba de concepto PoC para CVE-2020-5248. Resumen GLPI antes de la versión 9.4.6 tiene una vulnerabilidad que involucra una clave de cifrado predeterminada. GLPIKEY es pública y se utiliza en todas las instancias. Esto significa que cualquiera puede descifrar datos sensibles...

CVE-2020-5248

CVE-2020-5248 POC Umgebung einrichten und testen Testmethode Umgebung einrichten root@kitploit: vim docker/nginx/default.conf servername docker host ip ; -change mysqlserver: mysql id: root pw: root Ausführung root@kitploit: cd docker/app/ tar -xvf /docker/app/glpi-9.4.5.tgz chmod -R 777 glpi...

CVE-2025-36271

IBM Integrated Analytics System (IIAS) versions 1.0.0.0 through 1.0.31.0 are affected by a predictable salt vulnerability in the Magneto component (specifically the resmgr.py module). The use of a predictable salt in cryptographic operations (classified as CWE-759 ) weakens hashing and encryption...

CVE-2025-36271 IBM Integrated Analytics System (IIAS) is affected by a predictable salt vulnerability in Magneto component

IBM Integrated Analytics System 1.0.0.0 through 1.0.31.0 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information...

bedaisy-bypass

bedaisy-bypass Descrizione bedaisy-bypass è un driver kernel progettato per bypassare i report inviati da BEDaisy.sys a BEService.exe. Per gli utenti che non sono su un UEFI, il progetto utilizza Infinity Hook. Il driver intercetta i dati comunicati attraverso la named pipe tra i due servizi. All...

CVE-2026-4937

IBM PowerVM Hypervisor (FW1110.00–FW1110.20, FW1060.00–FW1060.71, FW950.00–FW950.H2) is vulnerable to insufficient entropy (CWE-331) in certain hypervisor calls, allowing a local attacker with administrative privileges to decrypt encrypted data. The CVSS 3.1 score is 5.3 (Medium) with a local att...

EUVD-2026-62842

IBM PowerVM Hypervisor FW1110.00 through FW1110.20, FW1060.00 through FW1060.71, and FW950.00 through FW950.H2 could allow a local attacker with administrative privileges to decrypt encrypted data due to certain hypervisor calls utilizing less entropy than requested...

Security Bulletin: This Power System update is being released to address CVE-2026-4937

Summary PowerVM could allow a local attacker with administrative privileges to decrypt encrypted data due to certain hypervisor calls utilizing less entropy than requested. Vulnerability Details CVEID:CVE-2026-4937 DESCRIPTION: PowerVM could allow a local attacker with administrative privileges t...

CVE-2025-30239

In affected TP-Link Aginet devices, use of hardcoded cryptographic keys embedded in the firmware to protect sensitive configuration data may allow an attacker who has access to device storage to recover the keys and decrypt stored data. Successful exploitation may allow access to decrypted...

CVE-2026-69247 cryptography: PKCS#7 EnvelopedData decryption exposes a Bleichenbacher oracle through distinguishable errors and timing

cryptography is a package designed to expose cryptographic primitives and recipes to Python developers. From 44.0.0 until 50.0.0, pkcs7decryptder, pkcs7decryptpem, and pkcs7decryptsmime reported the outcome of decrypting a RecipientInfo's encryptedKey in several distinguishable ways, one of which...

CVE-2021-32086

An issue was discovered in Quest KACE Systems Deployment Appliance SMA 11.0.273. It uses a hardcoded symmetric encryption key to encrypt secrets in the MySQL databases. This key is not unique for each installation. An attacker that gains access to the MySQL server or a backup files can decrypt th...

CVE-2026-56582 HCL MyCloud was affected with SSL/TLS Protocol Affected with LUCKY13 Vulnerability.

HCL MyCloud was affected by the SSL/TLS LUCKY13 Vulnerability. An attacker may exploit this vulnerability to decrypt sensitive information through a TLS/SSL padding oracle attack...

EUVD-2026-46345

HCL MyCloud was affected by the SSL/TLS LUCKY13 Vulnerability. An attacker may exploit this vulnerability to decrypt sensitive information through a TLS/SSL padding oracle attack...

CVE-2026-56582

CVE-2026-56582 affects HCL MyCloud, describing an SSL/TLS LUCKY13 padding-oracle vulnerability that could allow an attacker to decrypt sensitive data over the network. CVSS 3.1 (LOW) with Network attack, High complexity, Low privileges, No user interaction, and no impact to integrity/availability...

SUSE CVE-2026-64026

In the Linux kernel, the following vulnerability has been resolved: rxrpc: Fix DATA decrypt vs splice by copying data to buffer in recvmsg This improves the fix for CVE-2026-43500. Fix the pagecache corruption from in-place decryption of a DATA packet transmitted locally by splice by getting rid ...

CVE-2026-64026

In the Linux kernel, the following vulnerability has been resolved: rxrpc: Fix DATA decrypt vs splice by copying data to buffer in recvmsg This improves the fix for CVE-2026-43500. Fix the pagecache corruption from in-place decryption of a DATA packet transmitted locally by splice by getting rid ...

CVE-2026-64026 rxrpc: Fix DATA decrypt vs splice() by copying data to buffer in recvmsg

In the Linux kernel, the following vulnerability has been resolved: rxrpc: Fix DATA decrypt vs splice by copying data to buffer in recvmsg This improves the fix for CVE-2026-43500. Fix the pagecache corruption from in-place decryption of a DATA packet transmitted locally by splice by getting rid ...

Apache Tomcat: Apache Tomcat: Information disclosure via Padding Oracle vulnerability in EncryptInterceptor

A flaw was found in Apache Tomcat. This Padding Oracle vulnerability, present in the EncryptInterceptor with its default configuration, could allow a remote attacker to decrypt sensitive information. By exploiting weaknesses in the encryption padding, an attacker may be able to gain unauthorized...