Code injection

IBM GSKit IBM DB2 for Linux, UNIX and Windows 9.7, 10.1, 10.5, and 11.1 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 139073...

CVE-2017-17428

Cavium Nitrox SSL, Nitrox V SSL, and TurboSSL software development kits SDKs allow remote attackers to decrypt TLS ciphertext data by leveraging a Bleichenbacher RSA padding oracle, aka a ROBOT attack...

CVE-2017-17428

Cavium Nitrox SSL, Nitrox V SSL, and TurboSSL software development kits SDKs allow remote attackers to decrypt TLS ciphertext data by leveraging a Bleichenbacher RSA padding oracle, aka a ROBOT attack...

CVE-2017-17428: Use of a Broken or Risky Cryptographic Algorithm

Cavium Nitrox SSL, Nitrox V SSL, and TurboSSL software development kits SDKs allow remote attackers to decrypt TLS ciphertext data by leveraging a Bleichenbacher RSA padding oracle, aka a ROBOT attack...

Code injection

The TLS implementation in the TCP/IP networking module in Unisys ClearPath MCP systems with TCP-IP-SW 58.1 before 58.160, 59.1 before 059.1a.17 IC 17, and 60.0 before 60.044 might allow remote attackers to decrypt TLS ciphertext data by leveraging a Bleichenbacher RSA padding oracle, aka a ROBOT...

PT-2018-17133

Name of the Vulnerable Software and Affected Versions: Unisys ClearPath MCP systems with TCP-IP-SW versions 58.1 through 58.159 Unisys ClearPath MCP systems with TCP-IP-SW versions 59.1 through 059.1a.16 IC 16 Unisys ClearPath MCP systems with TCP-IP-SW versions 60.0 through 60.043 Description: T...

Whapa - WhatsApp DataBase Parser Tool

Whapa is a whatsapp database parser that automates the process. The main purpose of whapa is to present the data handled by the Sqlite database in a way that is comprehensible to the analyst. The Script is written in Python 2.x The software is divided into three modes: Message Mode : It analyzes...

LaZagneForensic - Decrypt Windows Credentials From Another Host

LaZagne uses an internal Windows API called CryptUnprotectData to decrypt user passwords. This API should be called on the victim user session, otherwise, it does not work. If the computer has not been started when the analysis is realized on an offline mounted disk, or if we do not want to drop ...

PT-2018-5621

Name of the Vulnerable Software and Affected Versions: Trend Micro Smart Protection Server Standalone versions 3.2 and below Description: An issue exists where improper access control could allow an attacker to decrypt database contents, potentially accessing a vulnerable system. Recommendations:...

CVE-2017-14097: Undefined Security Weakness

An improper access control vulnerability in Trend Micro Smart Protection Server Standalone versions 3.2 and below could allow an attacker to decrypt contents of a database with information that could be used to access a vulnerable system...

Code injection

Palo Alto Networks PAN-OS 6.1, 7.1, and 8.0.x before 8.0.7, when an interface implements SSL decryption with RSA enabled or hosts a GlobalProtect portal or gateway, might allow remote attackers to decrypt TLS ciphertext data by leveraging a Bleichenbacher RSA padding oracle, aka a ROBOT attack...

CVE-2017-1664

IBM Tivoli Key Lifecycle Manager 2.5, 2.6, and 2.7 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 133557...

CVE-2017-1665

IBM Tivoli Key Lifecycle Manager 2.5, 2.6, and 2.7 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 133559...

CVE-2017-1664

IBM Tivoli Key Lifecycle Manager 2.5, 2.6, and 2.7 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 133557...

UBUNTU-CVE-2017-17844

An issue was discovered in Enigmail before 1.9.9. A remote attacker can obtain cleartext content by sending an encrypted data block that the attacker cannot directly decrypt to a victim, and relying on the victim to automatically decrypt that block and then send it back to the attacker as quoted...

CVE-2017-17382: Use of a Broken or Risky Cryptographic Algorithm

Citrix NetScaler Application Delivery Controller ADC and NetScaler Gateway 10.5 before build 67.13, 11.0 before build 71.22, 11.1 before build 56.19, and 12.0 before build 53.22 might allow remote attackers to decrypt TLS ciphertext data by leveraging a Bleichenbacher RSA padding oracle, aka a...

PT-2017-14774

Name of the Vulnerable Software and Affected Versions Radware Alteon versions 31.0.0.0 through 31.0.3.0 Description The issue allows an attacker to perform an adaptive-chosen ciphertext attack, also known as a Bleichenbacher attack, on observed traffic encrypted with the RSA cipher. This enables...

PT-2017-14764

Name of the Vulnerable Software and Affected Versions Citrix NetScaler Application Delivery Controller ADC and NetScaler Gateway versions 10.5 before build 67.13 Citrix NetScaler Application Delivery Controller ADC and NetScaler Gateway versions 11.0 before build 71.22 Citrix NetScaler Applicatio...

CVE-2017-8866: Use of a Broken or Risky Cryptographic Algorithm

Elemental Path's CogniToys Dino smart toys through firmware version 0.0.794 share a fixed small pool of hardcoded keys, allowing a remote attacker to use a different Dino device to decrypt VoIP traffic between a child's Dino and remote server...

PT-2017-18591

Name of the Vulnerable Software and Affected Versions Elemental Path's CogniToys Dino smart toys versions 0.0.794 and earlier Description The issue allows a remote attacker to decrypt VoIP traffic between a child's Dino and a remote server by utilizing a different Dino device, due to the use of a...