sony-vp-extract

مستخرج حزم صوت سماعة Sony WH-1000XM4 قم بفك التشفير واستخراج ملفات MP3 الخاصة بالتوجيه الصوتي من ملفات البرامج الثابتة المشفرة لسماعة Sony WH-1000XM4. تم استخراج مفتاح AES-128-CBC عن طريق تف...

udp2raw

Udp2raw-tunnel نفق يحول حركة مرور UDP إلى حركة مرور FakeTCP/UDP/ICMP مشفرة باستخدام Raw Socket، ويساعدك في تجاوز جدران حماية UDP أو بيئة UDP غير مستقرة. عند استخدامه بمفرده،udp2raw ينقل فقط حركة مرور UDP. ومع ذلك،إذا استخدمت udp2raw مع أي VPN قائم على UDP معًا،يمكنك نقل أي حركة مرور بما في ذلك...

Huan

Huan Huan هي أداة توليد محمل PE مشفر قمت بتطويرها لتعلم بنية ملفات PE وعمليات تحميلها. تقوم بتشفير ملف PE المراد تشغيله باستخدام مفاتيح مختلفة في كل مرة وتضمينه في قسم جديد من الملف الثنائي للمحمل. تعمل حاليًا على ملفات PE ذات بنية 64 بت. كيف تعمل؟ أولاً، يقرأ Huan ملف PE المحدد ويقوم بتشفيره...

CVE-2023-3350

CVE-2023-3349 / CVE-2023-3350 | IBERMATICA RPS 2019 Recherche en sécurité documentant une divulgation d'informations non authentifiée et une faille de conception cryptographique dans IBERMATICA RPS 2019. Les vulnérabilités peuvent être enchaînées pour exposer les journaux d'application contenant...

SHIRO-721

SHIRO-721 Vulnerabilità RCE del Padding Oracle di RememberMe 0x00 Introduzione: Il RememberMe del cookie è crittografato tramite AES-128-CBC, il che lo rende vulnerabile agli attacchi Padding Oracle. Un attaccante può utilizzare un cookie RememberMe valido come prefisso per l'attacco Padding...

AZL-98039 CVE-2025-30156 affecting package ceph 18.2.2-12

Ceph is an open-source distributed storage platform providing object, block, and file storage. In versions prior to 20.2.4 and 19.2.6, the CephX authentication protocol encrypts tickets with AES-128-CBC in an unauthenticated mode that uses a hard-coded initialization vector and no message...

CVE-2025-30156

Ceph is an open-source distributed storage platform providing object, block, and file storage. In versions prior to 20.2.4 and 19.2.6, the CephX authentication protocol encrypts tickets with AES-128-CBC in an unauthenticated mode that uses a hard-coded initialization vector and no message...

CVE-2026-39944

CVE-2026-39944 affects the Ceph RADOS Gateway (RGW) , where STS session tokens are protected by an AES-128-CBC handler that provides no message authentication. An attacker holding any valid STS token can perform a CBC bit-flip on the acct_type, perm_type, and is_admin fields to forge an is_admin ...

CVE-2026-39944 Ceph: CephX AES Authentication error

Ceph is an open-source distributed storage platform providing object, block, and file storage. In versions prior to 20.2.4 and 19.2.6, the RADOS Gateway RGW protects STS session tokens with an AES-128-CBC handler that provides no message authentication, allowing an attacker who holds any valid ST...

CVE-2026-39944 Ceph: CephX AES Authentication error

Ceph is an open-source distributed storage platform providing object, block, and file storage. In versions prior to 20.2.4 and 19.2.6, the RADOS Gateway RGW protects STS session tokens with an AES-128-CBC handler that provides no message authentication, allowing an attacker who holds any valid ST...

PT-2026-82765

Name of the Vulnerable Software and Affected Versions Ceph versions prior to 20.2.4 Ceph versions prior to 19.2.6 Description The RADOS Gateway RGW uses an AES-128-CBC handler to protect STS session tokens that lacks message authentication. This allows an attacker with a valid STS token to perfor...

CVE-2025-30156

A flaw was found in the CephX authentication protocol used by Ceph, a distributed storage system. CephX uses AES-128-CBC encryption with a hardcoded initialization vector and no message authentication HMAC, making it vulnerable to the same class of unauthenticated-encryption attacks that...

CVE-2026-39944

A flaw was found in Ceph RGW's STS Security Token Service session token implementation. The STS tokens use the same unauthenticated AES-128-CBC encryption as CephX, which lacks message authentication and uses a hardcoded initialization vector. Because there is no integrity protection on the token...

📄 WordPress WPvivid 0.9.123 Arbitrary File Write

This Metasploit module exploits an unauthenticated arbitrary file write vulnerability in the WPvivid Backup plugin used in WordPress websites. The vulnerability allows an attacker to send a specially crafted encrypted payload to the vulnerable endpoint using the parameter wpvividaction=sendtosite...

CVE-2023-38909

An issue in TPLink Smart Bulb Tapo series L530 before 1.2.4, L510E before 1.1.0, L630 before 1.0.4, P100 before 1.5.0, and Tapo Application 2.8.14 allows a remote attacker to obtain sensitive information via the IV component in the AES128-CBC function...

Encrypted, Anti-Replay, Multiplexed Udp Tunnel: Udp2raw-tunnel

A UDP Tunnel which tunnels UDP via FakeTCP/UDP/ICMP Traffic by using Raw Socket, helps you Bypass UDP FireWalls or Unstable UDP Environment. Its Encrpyted, Anti-Replay and Multiplexed. It also acts as a Connection Stabilizer. Features Send / Receive UDP Packet with fake-tcp/icmp headers...

Impero Education Pro Remote Command Execution

/ If you're unsure what Impero is, it's essentially a corporate/educational RAT. Vendor site: https://www.imperosoftware.co.uk/ They recently were in the news about how they implemented "anti-radicalisation" shit or something. They had a booth at BETT back in January. They gave out donuts. Those...

Impero Education Pro - System Remote Command Execution

/ If you're unsure what Impero is, it's essentially a corporate/educational RAT. Vendor site: https://www.imperosoftware.co.uk/ They recently were in the news about how they implemented "anti-radicalisation" shit or something. They had a booth at BETT back in January. They gave out donuts. Those...

Impero Education Pro - System Remote Command Execution

Impero Education Pro - System Remote Command Execution / If you're unsure what Impero is, it's essentially a corporate/educational RAT. Vendor site: https://www.imperosoftware.co.uk/ They recently were in the news about how they implemented "anti-radicalisation" shit or something. They had a boot...

OpenSSL Heartbeat (Heartbleed) Client Memory Exposure

This module provides a fake SSL service that is intended to leak memory from client systems as they connect. This module is hardcoded for using the AES-128-CBC-SHA1 cipher. Module Options msf use auxiliary/server/openssl/heartbeatclientmemory msf undefinedheartbeatclientmemory show actions...