CVE-2025-56801

CVE-2025-56801 Reolink 桌面应用程序中的 AES-CFB IV 生成漏洞 1. 概述 名称 : Reolink 桌面应用程序 版本 : 8.18.12 厂商 : Reolink CWE : CWE-1204: 生成弱初始化向量 IV, CWE-321: 使用硬编码加密密钥 CVSS : 5.1 中危 向量字符串 : CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L 2. 摘要 Reolink 桌面应用程序（版本 8.18.12）使用 AES-CFB 算法加密配置文件和其他敏感数据。 然而，该过程中使用的初始化向量 IV...

WebLogic-Shiro-shell

Java逆シリアライズ技術の共有 今回の共有で扱う内容は以下のとおりです。 1. Javaのシリアライズと逆シリアライズの基礎 2. なぜ逆シリアライズの際に脆弱性が発生するのか？ 3. Javaリフレクション 4. ysoserial CommonsCollections2、CommonsCollections5 5. Java ClassLoader でクラスをロードするいくつかの方法 6. WebLogic CVE-2020-2555 CVE-2020-2883 RCE 7. Shiro-550 rememberMe のハードコードによる逆シリアライズRCE 8. WebLogic...

CVE-2016-4437

shiro-1.2.4-漏洞工具 解rememberMe值并导出对应的class文件 使用方式 xk-mt-rememberMe解码.py 运行讲解：运行后先输入密钥或者回车默认密钥为‘kPH+bIxk5D2deZiIxcaaaA==’，在输入请求包里面的rememberMe值，解析后会提示输入导出文件名会自动加class,如果不导出则直接回车。 运行启动：python xk-mt-rememberMe解码.py xk-mt-单个域名单个密钥检测.py...

CVE-2020-9289

解密 FortiManager 配置密钥 CVE-2020-9289 CVE-2020-9289 和 CVE-2019-6693 与相同的默认硬编码密钥相关。 在 FortiManager/FortiAnalyzer 中实现的解密例程的唯一区别是： IV 处理（所有 16 个字节在数字加密数据之前提供）。 最后一个加密块从输出中剥离，因此需要附加垃圾数据，然后从明文中移除。 详情请参见 https://www.fortiguard.com/psirt/FG-IR-19-007。...

ecologyExp.jar

ecologyExp.jar 泛微oa数据库配置文件读取 java -jar ecologyExp.jar http://127.0.0.1 源码 package com.test; import org.apache.http.HttpEntity; import org.apache.http.client.methods.CloseableHttpResponse; import org.apache.http.client.methods.HttpGet; import org.apache.http.impl.client.CloseableHttpClient; import...

nfc-ic-keys-dict

nfc-ic-keys-dict 2021-05-31 nfcPro.exe 早期版本下载 http://www.nsccn.com/web/soft/win/20210531/nfcPro.exe keys for ic: 1D14130D1A0B/000000000000 如何检测iC卡类型： 谷歌商店 = MIFARE Classic Tool = 工具 = 显示标签信息 root@kitploit: UID: xxxxx 4 byte RF 技术：ISO/IEC 14443, Type A ATQA: 0004 SAK: 08 ATS: - 标签类型和制造商：MIFARE...

EyesOfNetwork - Hardcoded API Key

An issue was discovered in EyesOfNetwork 5.3. The installation uses the same API key hardcoded as EONAPIKEY in include/apifunctions.php for API version 2.4.2 by default for all installations, hence allowing an attacker to calculate/guess the admin access token. id: CVE-2020-8657 info: name:...

CVE-2016-4437

CVE-2016-4437 用于利用CVE-2016-4437 Apache Shiro反序列化漏洞（由于硬编码加密密钥）的Python POC 使用示例： ./CVE-2016-4437.py -c nslookup -u https://example.com/ -i ecsepnkqtxlishpynfdge01543e4vmx7v.oast.fun 更多信息请参见注释和代码。...

CVE-2026-82448

Shinobi before commit 5a76c74f contains a hardcoded connection key in the child node service that allows unauthenticated attackers to execute arbitrary database queries. Attackers reaching the child node port can present the hardcoded key during WebSocket handshake, then dispatch SQL queries...

CVE-2026-82448 Shinobi before commit 5a76c74f Arbitrary Database Query Execution via Hardcoded Child Node Key

Shinobi before commit 5a76c74f contains a hardcoded connection key in the child node service that allows unauthenticated attackers to execute arbitrary database queries. Attackers reaching the child node port can present the hardcoded key during WebSocket handshake, then dispatch SQL queries...

EUVD-2026-68097

Shinobi before commit 5a76c74f contains a hardcoded connection key in the child node service that allows unauthenticated attackers to execute arbitrary database queries. Attackers reaching the child node port can present the hardcoded key during WebSocket handshake, then dispatch SQL queries...

CVE-2026-82448

Shinobi (a self-hosted CCTV/surveillance platform) contains a hardcoded connection key in its child node service prior to commit 5a76c74f . An unauthenticated attacker who can reach the child node port can present this key during the WebSocket handshake and then dispatch arbitrary SQL queries thr...

CVE-2026-82448 Shinobi before commit 5a76c74f Arbitrary Database Query Execution via Hardcoded Child Node Key

Shinobi before commit 5a76c74f contains a hardcoded connection key in the child node service that allows unauthenticated attackers to execute arbitrary database queries. Attackers reaching the child node port can present the hardcoded key during WebSocket handshake, then dispatch SQL queries...

CVE-2026-16259 Uix UserCenter <= 1.0.3 - Unauthenticated Privilege Escalation

The Uix UserCenter WordPress plugin through 1.0.3 does not verify that the account being modified through an unauthenticated profile-update action belongs to the requester, and it authenticates that action with a token whose signing key is hardcoded and identical across every install, allowing...

PT-2026-83427

Shinobi before commit 5a76c74f contains a hardcoded connection key in the child node service that allows unauthenticated attackers to execute arbitrary database queries. Attackers reaching the child node port can present the hardcoded key during WebSocket handshake, then dispatch SQL queries...

CVE-2026-56100

SpringBlade versions from 2.7.3 up to but not including 5.0.0 contain a privilege escalation vulnerability that allows authenticated attackers to create system administrator accounts by sending crafted POST requests to an unprotected internal Feign user-creation endpoint exposed via @RestControll...

CVE-2026-56100 SpringBlade 2.7.3 < 5.0.0 Privilege Escalation via Exposed Feign Endpoint

SpringBlade versions from 2.7.3 up to but not including 5.0.0 contain a privilege escalation vulnerability that allows authenticated attackers to create system administrator accounts by sending crafted POST requests to an unprotected internal Feign user-creation endpoint exposed via @RestControll...

CVE-2026-56100 SpringBlade 2.7.3 < 5.0.0 Privilege Escalation via Exposed Feign Endpoint

SpringBlade versions from 2.7.3 up to but not including 5.0.0 contain a privilege escalation vulnerability that allows authenticated attackers to create system administrator accounts by sending crafted POST requests to an unprotected internal Feign user-creation endpoint exposed via @RestControll...

SSCMS_Decrypt

sscms siteserver cms database decrypt Introduzione: SSCMS è basato su .NET Core e consente di realizzare una piattaforma web completa, performante, altamente scalabile e facile da mantenere con i costi più bassi, il minimo impiego di risorse umane e nel minor tempo possibile. Indirizzo del...

publiccms_decrypt

publiccmsdecrypt https://github.com/sanluan/PublicCMS publiccms-core-V4.0.202004.a.jar!/com/publiccms/common/constants/CommonConstants.class publiccms-common-V4.0.202004.a.jar!/com/publiccms/common/tools/VerificationUtils.class com.publiccms.common.tools.VerificationUtils...