552 matches found
database-druid
druid encode java -cp druid-1.1.19.jar com.alibaba.druid.filter.config.ConfigTools 密码 Пример: java -cp druid-1.1.19.jar com.alibaba.druid.filter.config.ConfigTools jas502n...
CVE-2022-25012
Argus Surveillance DVR 4.0 - Chiffrement faible du mot de passe CVE-2022-25012 Version mise à jour de ce script de chiffrement faible de mot de passe Exploit DB REF : https://www.exploit-db.com/exploits/50130 Auteur REF : https://deathflash1411.github.io/blog/dvr4-hash-crack NIST REF :...
hash-identifier
hash-identifier Logiciel permettant d'identifier les différents types de hachages utilisés pour chiffrer des données et notamment les mots de passe. Formats de chiffrement pris en charge : ADLER-32 CRC-32 CRC-32B CRC-16 CRC-16-CCITT DESUnix FCS-16 GHash-32-3 GHash-32-5 GOST R 34.11-94 Haval-160...
stegano
Stéganographie par bzt Démo en ligne En résumé, la stéganographie est l'art de cacher des messages dans un autre support en toute transparence sans que les gens ne s'en rendent compte. Cette implémentation lit des images dans des formats web courants WEBP, PNG, GIF, JPEG, y cache le texte...
CSRF-breach
Проект по уязвимости безопасности - Межсайтовая подделка запроса CSRF Dolibarr 7.0.0 подвержен: Межсайтовой подделке запроса CSRF. Воздействие: позволяет вредоносному HTML изменять пароль пользователя, отключать пользователей и отключать шифрование паролей. Компонент: функция смены пароля...
gpp-encrypt
gpp-encrypt Описание Этот небольшой скрипт шифрует пароль в gpp cpassword. Он полезен для создания уязвимой лабораторной AD. Требования Для этого пакета требуются: python3 стандартная библиотека python3 Установка git clone "https://github.com/mauricelambert/gpp-encrypt.git" cd "gpp-encrypt" pytho...
CVE-2022-25012
CVE-2022-25012 Argus Surveillance DVR v4.0 utilise un chiffrement de mot de passe faible. Compilation gcc pocland.c -o pocland Exemple d'utilisation ./pocland B4A1ECB4F539C48C7357F641C9C49083 Références CVE-2022-25012 Plus de PoCs disponibles sur : pocland...
CVE-2022-25012-dvr4-weak-password-encryption
This is an improved version of the exploit by deathflash1411 Original exploit: https://www.exploit-db.com/exploits/50130 Improved Features Cracked password is now output as reconstructed password string instead of only output character by character The encrypted password string is now entered as ...
CVE-2022-25012-dvr4-weak-password-encryption — Updated!
This is an improved version of the exploit by deathflash1411 Original exploit: https://www.exploit-db.com/exploits/50130 Improved Features Cracked password is now output as reconstructed password string instead of only output character by character The encrypted password string is now entered as ...
openssl: Out-of-bounds read & write in RFC 3211 KEK Unwrap
A flaw was found in the OpenSSL CMS implementation RFC 3211 KEK Unwrap. This vulnerability allows memory corruption, an application level denial of service, or potential execution of attacker-supplied code via crafted CMS messages using password-based encryption PWRI...
Covert Timing Channel
Overview Affected versions of this package are vulnerable to Covert Timing Channel via the authentication process. An attacker can recover user credentials by exploiting timing differences during MD5-hashed password comparison. This is only exploitable if the database contains MD5-hashed password...
CVE-2026-5363 Use of weak cryptographic key in TP-Link Archer C7
Inadequate Encryption Strength vulnerability in TP-Link Archer C7 v5 and v5.8 uhttpd modules allows Password Recovery Exploitation. The web interface encrypts the admin password client-side using RSA-1024 before sending it to the router during login. An adjacent attacker with the ability to...
CVE-2026-30785 RustDesk Encrypts Local Passwords with World-Readable Machine ID and Fixed Zero Nonce (XSalsa20-Poly1305)
Improperly Controlled Modification of Object Prototype Attributes 'Prototype Pollution', Use of Password Hash With Insufficient Computational Effort vulnerability in rustdesk-client RustDesk Client rustdesk, hbbcommon on Windows, MacOS, Linux Password security module, config encryption, machine U...
CVE-2026-30785
RustDesk Client (through version 1.4.5) is affected by CVE-2026-30785 due to a vulnerability described as Prototype Pollution and weak password hashing in the password_security, config, and machine-uid-related code paths (hbb_common and related modules). The issue can allow Retrieve Embedded Sens...
CVE-2026-30785 RustDesk Encrypts Local Passwords with World-Readable Machine ID and Fixed Zero Nonce (XSalsa20-Poly1305)
Improperly Controlled Modification of Object Prototype Attributes 'Prototype Pollution', Use of Password Hash With Insufficient Computational Effort vulnerability in rustdesk-client RustDesk Client rustdesk, hbbcommon on Windows, MacOS, Linux Password security module, config encryption, machine U...
Security Bulletin: IBM WebSphere Application Server, which is bundled with IBM Cloud Pak for Applications, is affected by a vulnerability that could provide weaker than expected security (CVE-2025-13333)
Summary IBM WebSphere Application Server, which is bundled with IBM Cloud Pak for Applications, is affected by a vulnerability that could provide weaker than expected security when enabling AES-256 password encryption. Vulnerability Details Refer to the security bulletins listed in the...
openssl: Out-of-bounds read & write in RFC 3211 KEK Unwrap
A flaw was found in the OpenSSL CMS implementation RFC 3211 KEK Unwrap. This vulnerability allows memory corruption, an application level denial of service, or potential execution of attacker-supplied code via crafted CMS messages using password-based encryption PWRI...
CVE-2024-52334
A vulnerability has been identified in syngo.plaza VB30E All versions VB30EHF07. The affected application does not encrypt the passwords properly. This could allow an attacker to recover the original passwords and might gain unauthorized access...
CVE-2024-52334
A vulnerability has been identified in syngo.plaza VB30E All versions VB30EHF07. The affected application does not encrypt the passwords properly. This could allow an attacker to recover the original passwords and might gain unauthorized access...