CVE-2026-105035 EnergizeLab FirmwareUpdater Universal Hard-Coded AES Key

The EnergizeLab FirmwareUpdater AArch64 ELF, distributed in the CDN bin.zip uses a single hard-coded AES key shared by all installations. An attacker who recovers the key from the updater can decrypt and forge firmware packages for any device that trusts it...

CVE-2026-108126

temporal-proxy 0.2.0 through 0.8.0 does not bind encrypted payloads to the namespace they were encrypted for. When payload encryption is enabled, the proxy chooses the decryption key by an identifier stored in the payload rather than by the namespace of the request, and nothing in the ciphertext...

CVE-2026-108126 temporal-proxy payload decryption is not bound to the request namespace

temporal-proxy 0.2.0 through 0.8.0 does not bind encrypted payloads to the namespace they were encrypted for. When payload encryption is enabled, the proxy chooses the decryption key by an identifier stored in the payload rather than by the namespace of the request, and nothing in the ciphertext...

Security Bulletin: Security vulnerability has been identified in WebSphere Application Server shipped with IBM Guardium Key Lifecycle Manager (SKLM/GKLM)

Summary WebSphere Application Server is shipped as a component of IBM Guardium Key Lifecycle Manager SKLM/GKLM. Information about a security vulnerability affecting WebSphere Application Server has been published in a security bulletin. Vulnerability Details Refer to the security bulletins listed...

Security Bulletin: Multiple security vulnerabilities identified in Containerized version of IBM Guardium Key Lifecycle Manager

Summary Multiple security vulnerabilities have been addressed in Containerized version of IBM Guardium Key Lifecycle Manager Vulnerability Details CVEID:CVE-2025-6170 DESCRIPTION: A flaw was found in the interactive shell of the xmllint command-line tool, used for parsing XML files. When a user...

EUVD-2026-102234

Authorization Bypass Through User-Controlled Key vulnerability in NSquared Simply Schedule Appointments simply-schedule-appointments allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Simply Schedule Appointments: from n/a through 1.6.12.35...

CVE-2026-110381 WordPress Simply Schedule Appointments plugin <= 1.6.12.35 - Insecure Direct Object References (IDOR) vulnerability

Authorization Bypass Through User-Controlled Key vulnerability in NSquared Simply Schedule Appointments simply-schedule-appointments allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Simply Schedule Appointments: from n/a through 1.6.12.35...

Measuring Human Cryptanalysis Effort

Matthew Green has a new site that tries to estimate the number of cryptanalyst-hours that have been spent analyzing different public-key algorithms: Abstract: We estimate how much public cryptanalysis each public-key assumption has received, using the literature itself as the instrument. From...

Databufflabs Databuff Encryption Vulnerabilities

Databufflabs Databuff versions 0.1.10 and earlier have an encryption-related vulnerability. This vulnerability stems from the use of a hard-coded HMAC key in the JwtTokenService. An attacker can exploit this vulnerability to forge administrator session tokens using the default dev-secret. Without...

WordPress InstaWP Connect: Permissions, licensing, and access control issues

WordPress InstaWP Connect versions 0.1.4.1 and earlier have vulnerabilities related to permission permissions and access control. These vulnerabilities arise when the plugin registers a management page using the role name as the required capability, and the main API key from instawpapioptions is...

Moul SSHPortal authorization issue vulnerability

Moul SSHPortal versions 1.19.5 and earlier have an authorization vulnerability. This vulnerability stems from the lack of authorization in the 'key show' command used in the management shell. It may allow authenticated non-administrator users to obtain decrypted backend private SSH keys. These ke...

tduck-survey-form authorization issue vulnerability

The tduck-survey-form 5.3 and earlier versions have an authorization issue vulnerability. This vulnerability stems from a lack of authorization verification, which may allow any authenticated user to retrieve the original form settings of other owners through the GET /user/form/setting/key...

FastAPIAdmin encryption issue vulnerability

In FastAPIAdmin versions 3.0 and earlier, there is a security vulnerability related to encryption. This vulnerability stems from the hardcoded JWT signing key in the backend/app/config/setting.py file. An attacker can register and log in through the unvalidated /api/v1/system/user/register...

WordPress Salon Booking System Cross-Site Script Vulnerability

The WordPress Salon Booking System versions 10.31.9 and earlier have a cross-site scripting vulnerability. This vulnerability stems from insufficient input cleaning and output escaping for the sln parameter. It may lead to storage-based cross-site scripting attacks. Unverified attackers can injec...

WHEELS.DEV: Vulnerabilities related to wheel permissions and access control

WHEELS.DEV: Versions of Wheels 4.0.0 to 4.2.0 have vulnerabilities related to permission licensing and access control. These vulnerabilities arise from using primary key conditions in methods like findByKey and existskey=, which replace the provided scope conditions. As a result, keys that are...

WordPress FluentCart: A New Era of eCommerce SQL Injection Vulnerabilities

WordPress FluentCart – A New Era of eCommerce. Versions 1.7.0 and earlier have a SQL injection vulnerability. This vulnerability stems from insufficient escaping of the parameter ‘products.variants.’ and inadequate SQL query preparation. This could allow authenticated attackers to append addition...

Number Sea Wen Zhou Visual Drag-and-Drop Big Data Integration Platform Backend Encryption Vulnerability

The backend commit efeacd3 and previous versions of the visual drag-and-drop big data integration platform have vulnerabilities related to encryption. This vulnerability stems from the use of a hardcoded public default AES key in the AesPasswordEncAndDecServiceImpl component. This allows...

LangChat authorization issue vulnerability

LangChat has an authorization issue vulnerability. This vulnerability stems from the absence of a registered Sa-Token interceptor. Unverified remote attackers can access the REST controller, read plaintext passwords, obtain the LLM provider’s API key, create super administrator accounts, and modi...

Moxa AIG-302 Series Authorization Issue Vulnerability

The Moxa AIG-302 Series from version 1.0.0 to 1.4.0 has an authorization vulnerability. This vulnerability stems from the lack of authorization verification in the internal API /api/v1/secrets/. Attackers with low privileges can access sensitive information through adjacent networks, resulting in...

Moxa AIG-302 Series encryption vulnerabilities

The Moxa AIG-302 Series from version 1.0.0 to 1.4.0 has an encryption vulnerability. This vulnerability stems from a hard-coded encryption key present in /usr/bin/sysman. It could allow unauthenticated attackers with adjacent network access to exploit the exposed private key material, thereby...