197 matches found
Lansweeper Unauthenticated SQL Injection
Lansweeper before 7.1.117.4 allows unauthenticated SQL injection. id: CVE-2019-13462 info: name: Lansweeper Unauthenticated SQL Injection author: divyamudgal severity: critical description: Lansweeper before 7.1.117.4 allows unauthenticated SQL injection. impact: | This vulnerability can lead to...
cve-2026-39031-lansweeper-lsrunase2-lsencrypt2
CVE-2026-39031: Lansweeper lsrunase 2.0 / lsencrypt 2.0 Password Recovery Summary Lansweeper lsrunase 2.0 and lsencrypt 2.0 use a reversible password encryption scheme based on RC4. The RC4 key is derived from an 8-character prefix that is stored in cleartext with the encrypted password and fixed...
CVE-2026-39031
Lansweeper lsrunase 2.0 and lsencrypt 2.0 use RC4 encryption with a hardcoded 142-byte static key array to encrypt credentials. An 8-character prefix is stored in cleartext alongside the ciphertext. This allows an attacker with local access to recover any encrypted password to plaintext using a...
CVE-2026-39031
Lansweeper lsrunase 2.0 and lsencrypt 2.0 use RC4 encryption with a hardcoded 142-byte static key array to encrypt credentials. An 8-character prefix is stored in cleartext alongside the ciphertext. This allows an attacker with local access to recover any encrypted password to plaintext using a...
CVE-2026-39031
Lansweeper lsrunase 2.0 and lsencrypt 2.0 use RC4 encryption with a hardcoded 142-byte static key array to encrypt credentials. An 8-character prefix is stored in cleartext alongside the ciphertext. This allows an attacker with local access to recover any encrypted password to plaintext using a...
CVE-2026-39031: Use of Hard-coded Cryptographic Key
Lansweeper lsrunase 2.0 and lsencrypt 2.0 use RC4 encryption with a hardcoded 142-byte static key array to encrypt credentials. An 8-character prefix is stored in cleartext alongside the ciphertext. This allows an attacker with local access to recover any encrypted password to plaintext using a...
CVE-2026-39031
Lansweeper lsrunase 2.0 and lsencrypt 2.0 are vulnerable to offline plaintext password recovery due to a flaw in their cryptographic design. The software uses RC4 encryption with a hardcoded 142-byte static key array and stores an 8-character prefix in cleartext alongside the ciphertext. An attac...
CVE-2026-39031
Lansweeper lsrunase 2.0 and lsencrypt 2.0 use RC4 encryption with a hardcoded 142-byte static key array to encrypt credentials. An 8-character prefix is stored in cleartext alongside the ciphertext. This allows an attacker with local access to recover any encrypted password to plaintext using a...
Exploit for CVE-2026-39031
cve-2026-39031-lansweeper-lsrunase2-l...
EUVD-2015-9106
Malware in sbrugna...
EUVD-2017-8015
Malware in sbrugna...
EUVD-2017-18228
Malware in sbrugna...
EUVD-2019-8623
Malware in sbrugna...
EUVD-2020-5899
Malware in sbrugna...
EUVD-2017-5223
Malware in sbrugna...
EUVD-2022-35639
Malicious code in bioql PyPI...
EUVD-2022-26391
Malicious code in bioql PyPI...
EUVD-2022-35829
Malicious code in bioql PyPI...