publiccms_decrypt

publiccmsdecrypt https://github.com/sanluan/PublicCMS publiccms-core-V4.0.202004.a.jar!/com/publiccms/common/constants/CommonConstants.class publiccms-common-V4.0.202004.a.jar!/com/publiccms/common/tools/VerificationUtils.class com.publiccms.common.tools.VerificationUtils...

EyesOfNetwork - Hardcoded API Key

An issue was discovered in EyesOfNetwork 5.3. The installation uses the same API key hardcoded as EONAPIKEY in include/apifunctions.php for API version 2.4.2 by default for all installations, hence allowing an attacker to calculate/guess the admin access token. id: CVE-2020-8657 info: name:...

ecologyExp.jar

ecologyExp.jar Weaver OA database configuration file reader java -jar ecologyExp.jar http://127.0.0.1 Source Code package com.test; import org.apache.http.HttpEntity; import org.apache.http.client.methods.CloseableHttpResponse; import org.apache.http.client.methods.HttpGet; import...

WebLogic-Shiro-shell

Compartir técnica de deserialización de Java Los aspectos cubiertos en esta presentación son los siguientes: 1. Conceptos básicos de serialización y deserialización de Java 2. ¿Por qué se generan vulnerabilidades durante la deserialización? 3. Reflexión de Java 4. ysoserial...

CVE-2026-79551-Tenda

CVE-2026-79551 Tenda Hardcoded TLS Private Key CNVD ID: CNVD-2026-25884 Vendor: Tenda Technology Co., Ltd. Product: NVR4H network video recorder hardware version CH3V2.1 Firmware: V27.5.58.6 Class: CWE-321 — Use of Hard-coded Cryptographic Key Overview The NVR4H firmware stores an ECDSA key pair ...

nfc-ic-keys-dict

nfc-ic-keys-dict 2021-05-31 nfcPro.exe early version download http://www.nsccn.com/web/soft/win/20210531/nfcPro.exe keys for ic: 1D14130D1A0B/000000000000 How to detect the type of an iC card: Google Play Store = MIFARE Classic Tool = Tools = Show Tag Info root@kitploit: UID: xxxxx 4 byte RF...

CVE-2016-4437

Herramienta de vulnerabilidad shiro-1.2.4 Descifra el valor de rememberMe y exporta el archivo class correspondiente Modo de uso xk-mt-rememberMe解码.py Explicación de ejecución: tras ejecutarlo, primero ingresa la clave o presiona Enter para usar la clave predeterminada ‘kPH+bIxk5D2deZiIxcaaaA==’,...

zte-smartlife-app-pwned

ZTE SmartLife Security Findings Leading to Account Takeover T...

CVE-2016-4437

CVE-2016-4437 POC en Python para explotar la vulnerabilidad de deserialización CVE-2016-4437 de Apache Shiro debido a una clave de cifrado codificada Ejemplo de uso: ./CVE-2016-4437.py -c nslookup -u https://example.com/ -i ecsepnkqtxlishpynfdge01543e4vmx7v.oast.fun Consulte los comentarios y el...

CVE-2026-86555

The ZTE SmartLife application has a hardcoded key. The key used to decrypt account server information is stored in plaintext in the code. Once the key is obtained, the server information can be decrypted, thus exposing it...

CVE-2026-86555

The ZTE SmartLife mobile application contains a hardcoded key used to decrypt account server information. The key is stored in plaintext within the application code, so an attacker with access to the binary can extract it and decrypt the protected server configuration data. The CVSS v3.1 score is...

CVE-2026-86555 Hardcoded Key Vulnerability in ZTE SmartLife APP

The ZTE SmartLife application has a hardcoded key. The key used to decrypt account server information is stored in plaintext in the code. Once the key is obtained, the server information can be decrypted, thus exposing it...

CVE-2026-86555 Hardcoded Key Vulnerability in ZTE SmartLife APP

The ZTE SmartLife application has a hardcoded key. The key used to decrypt account server information is stored in plaintext in the code. Once the key is obtained, the server information can be decrypted, thus exposing it...

EUVD-2026-83717

The ZTE SmartLife application has a hardcoded key. The key used to decrypt account server information is stored in plaintext in the code. Once the key is obtained, the server information can be decrypted, thus exposing it...

CVE-2020-9289

解密 FortiManager 配置密钥 CVE-2020-9289 CVE-2020-9289 和 CVE-2019-6693 与相同的默认硬编码密钥相关。 在 FortiManager/FortiAnalyzer 中实现的解密例程的唯一区别是： IV 处理（所有 16 个字节在数字加密数据之前提供）。 最后一个加密块从输出中剥离，因此需要附加垃圾数据，然后从明文中移除。 详情请参见 https://www.fortiguard.com/psirt/FG-IR-19-007。...

SSCMS_Decrypt

sscms siteserver cms database decrypt Introduction: SSCMS is based on .NET Core, enabling you to set up a fully functional, high-performance, large-scale, and easy-to-maintain website platform in the shortest time, at the lowest cost, and with the least manpower. Project address:...

redash-reset

redash-reset This will use a default REDASHSECRETKEY key of c292a0a3aa32397cdb050e233733900f this allows you to reset the password of the user ID but you will need to know the email address assocaited with it. Info https://github.com/getredash/redash/security/advisories/GHSA-g8xr-f424-h2rv Setup...

CVE-2026-54767

WeGIA , a web manager for charitable institutions, is affected by a critical (CVSS 9.1) vulnerability prior to version 3.8.5 . The file deletar_socios.php exposes an unauthenticated GET endpoint where the chave parameter is validated only against a hardcoded chave_correta value embedded in the pu...

CVE-2026-54767 WeGIA: Hardcoded Secret Key Backdoor — Mass Data Destruction via deletar_socios.php

WeGIA is a web manager for charitable institutions. Prior to 3.8.5, web/html/socio/sistema/controller/deletarsocios.php exposes an unauthenticated GET endpoint whose chave parameter is checked only against a hardcoded chavecorreta value embedded in the public source repository. A remote attacker...

CVE-2026-54767 WeGIA: Hardcoded Secret Key Backdoor — Mass Data Destruction via deletar_socios.php

WeGIA is a web manager for charitable institutions. Prior to 3.8.5, web/html/socio/sistema/controller/deletarsocios.php exposes an unauthenticated GET endpoint whose chave parameter is checked only against a hardcoded chavecorreta value embedded in the public source repository. A remote attacker...