CVE-2019-5420

CVE-2019-5420 脆弱性により、攻撃者が自動生成された開発モードのシークレットトークンを推測できる可能性があります。 Ruby-on-Railsが開発モードで実行されている場合。開発モードでは、攻撃者がセッションを保護するために使用されるキーを推測することが可能です。 復号化: キー生成: Railsは3つの環境（development, test, production）を使用します。アプリケーションが開発モードを使用する場合、シークレットトークンを推測し、暗号化されたセッションを復号化することができます。...

bluffs

BLUFFS Introducción Este repositorio contiene código relacionado con BLUFFS: Bluetooth Forward and Future Secrecy Attacks and Defenses. Resumen del artículo Bluetooth es una tecnología omnipresente para la comunicación inalámbrica. Miles de millones de dispositivos lo utilizan en aplicaciones...

CVE-2019-5420

CVE-2019-5420 Rails CVE-2019-5420 のエクスプロイト 問題 Rails v5.2.2 までは、開発モードでセッションを保護する場合、アプリケーションはアプリケーション名からキーを導出します。...

GIUDA

GIUDA 在无需密码的情况下，代表另一个用户获取 TGS 场景：你是本地管理员，并且有一个已登录的用户，你想要模拟（Impersonate）该用户！ 链条：SeTcbPrivilege 允许你读取 LSA 存储，从 TGT 中提取会话密钥（SESSION KEY），并伪造一个请求来获取 TGS；你必须使用 LUID 而不是用户名。 目标：借助 Kerberos TGS 从本地管理员升级为域管理员 要求：本地管理员权限，并且有一个域管理员已登录（或处于断开状态）。在本指南中，域管理员用户为 CALIPENDULA\fagiolo 1. 向 GIUDA 请求一个以 SYSTEM 身份运行的...

CVE-2019-5420

CVE-2019-5420 Ruby on Rails 提供三种不同的运行环境：开发、测试和生产。显然，你不应该让开发或测试环境中的代码暴露在互联网上，但这种情况（和往常一样）确实会发生（例如在预发布环境中）。 Ruby on Rails 使用“签名会话”（signed-sessions）来让用户轻松扩展应用。随着时间的推移，会话处理方式发生了变化。到 5.2.2 版本，会话默认使用 AES GCM（aes-256-gcm）保护的 JSON 编码数据。 CVE-2019–5420...

PT-2026-89109

MaxSite CMS through 109.6 ships with a hardcoded session encryption key in application/config/config.php that is never changed during installation, allowing unauthenticated attackers to forge administrator session cookies. Attackers can mint a malicious ci session cookie with administrator...

EUVD-2026-70819

A hard-coded cryptographic key vulnerability exists in the web module of TP-Link Archer AX55 v4. A LAN attacker who captures an HTTP login session may use the known shared RSA private key to decrypt the administrator password; the weakened AES session key further reduces the effort required to...

CVE-2026-52723

ePA 3.x Integration implements the authorization workflow and writes Medical Information Objects to Germany's electronic patient record. Prior to 1.3.0, ePA 3.x Integration performs VAU server certificate validation in app/vau/VAUProtokoll.py without anchoring the signedvauserverpubkeys and...

CVE-2026-23933

In Zabbix 7.4, the frontend session signing key was erroneously written to the database seed. When SAML authentication and guest users are both enabled, this key can be extracted and used to forge valid session cookies, enabling unauthorized access. CVSS 4.0 scores this HIGH (7.7). The Zabbix tic...

CVE-2026-72044

A flaw was found in ksmbd in the Linux kernel. A stack buffer overflow vulnerability exists in the multichannel session-key copy mechanism. A remote attacker can exploit this by supplying a crafted session key larger than the intended buffer size during a binding session setup. This can lead to a...

CVE-2025-15629

A cryptographic weakness exists in the Omada adoption protocol where session encryption keys used to protect communications between controllers and managed devices may be predictable due to insufficient entropy in session key generation. An attacker who successfully intercepts adoption-related...

CVE-2025-15629

The CVE-2025-15629 entry concerns the TP-Link Omada Adoption Protocol. A cryptographic weakness exists where session encryption keys used to protect communications between Omada controllers and managed devices may be predictable due to insufficient entropy in session key generation. The consequen...

Exposure of Sensitive Information Through Metadata

Overview Affected versions of this package are vulnerable to Exposure of Sensitive Information Through Metadata via CFB quick-check decryption oracle in the getDataStream method of PGPSymmetricKeyEncryptedData, reached through PGPPBEEncryptedData, PGPSessionKeyEncryptedData, and...

Exposure of Sensitive Information Through Metadata

Overview Affected versions of this package are vulnerable to Exposure of Sensitive Information Through Metadata via CFB quick-check decryption oracle in the getDataStream method of PGPSymmetricKeyEncryptedData, reached through PGPPBEEncryptedData, PGPSessionKeyEncryptedData, and...

DEBIAN-CVE-2026-59640

In Bouncy Castle for Java before 1.85, OpenPGP CFB quick-check oracle active on symmetric/session-key paths. This issue also affects Bouncy Castle for Java LTS before 2.73.12, and Bouncy Castle for Java FIPS BC-FJA before bcpg-fips 1.0.13 1.0.X series, 2.0.13 2.0.X series and 2.1.13 2.1.X series...

CVE-2026-59640

In Bouncy Castle for Java before 1.85, OpenPGP CFB quick-check oracle active on symmetric/session-key paths. This issue also affects Bouncy Castle for Java LTS before 2.73.12, and Bouncy Castle for Java FIPS BC-FJA before bcpg-fips 1.0.13 1.0.X series, 2.0.13 2.0.X series and 2.1.13 2.1.X series...

UBUNTU-CVE-2026-59640

In Bouncy Castle for Java before 1.85, OpenPGP CFB quick-check oracle active on symmetric/session-key paths. This issue also affects Bouncy Castle for Java LTS before 2.73.12, and Bouncy Castle for Java FIPS BC-FJA before bcpg-fips 1.0.13 1.0.X series, 2.0.13 2.0.X series and 2.1.13 2.1.X series...

CVE-2026-59640

In Bouncy Castle for Java before 1.85, OpenPGP CFB quick-check oracle active on symmetric/session-key paths. This issue also affects Bouncy Castle for Java LTS before 2.73.12, and Bouncy Castle for Java FIPS BC-FJA before bcpg-fips 1.0.13 1.0.X series, 2.0.13 2.0.X series and 2.1.13 2.1.X series...

CVE-2026-59640

CVE-2026-59640 affects Bouncy Castle for Java prior to 1.85, including the LTS release prior to 2.73.12 and BC-FJA (FIPS) before bcpg-fips 1.0.13 (1.0.x), 2.0.13 (2.0.x), and 2.1.13 (2.1.x). The issue is described as an OpenPGP CFB quick-check oracle that is active on symmetric/session-key paths....

CVE-2026-59640 OpenPGP CFB quick-check oracle active on symmetric/session-key paths

In Bouncy Castle for Java before 1.85, OpenPGP CFB quick-check oracle active on symmetric/session-key paths. This issue also affects Bouncy Castle for Java LTS before 2.73.12, and Bouncy Castle for Java FIPS BC-FJA before bcpg-fips 1.0.13 1.0.X series, 2.0.13 2.0.X series and 2.1.13 2.1.X series...