12 matches found
CVE-2023-50481
An issue was discovered in blinksocks version 3.3.8, allows remote attackers to obtain sensitive information via weak encryption algorithms in the component /presets/ssr-auth-chain.js...
Weak Cryptography
blinksocks is vulnerable to Sensitive Information Disclosure. The vulnerability is due to the usage of weak encryption algorithms and fixed initialization vectors IV within /presets/ssr-auth-chain.js. This issue can be exploited by an attacker to disclose sensitive encrypted information via brute...
blinksocks-desktop (>=0.0.1 <=0.1.3), blinksocks-gui (>=0.1.0 <=0.2.1) potentially affected by CVE-2023-50481 via blinksocks (>=2.9.0 <=3.3.8)
blinksocks NPM version =2.9.0, =0.0.1, =0.1.0, =0.2.1 Source cves: CVE-2023-50481 Source advisory: OSV:GHSA-PQJ5-37XF-X5GC...
GHSA-PQJ5-37XF-X5GC blinksocks has weak encryption algorithms
An issue was discovered in blinksocks version 3.3.8, allows remote attackers to obtain sensitive information via weak encryption algorithms in the component /presets/ssr-auth-chain.js...
blinksocks has weak encryption algorithms
An issue was discovered in blinksocks version 3.3.8, allows remote attackers to obtain sensitive information via weak encryption algorithms in the component /presets/ssr-auth-chain.js...
CVE-2023-50481
An issue was discovered in blinksocks version 3.3.8, allows remote attackers to obtain sensitive information via weak encryption algorithms in the component /presets/ssr-auth-chain.js...
CVE-2023-50481
An issue was discovered in blinksocks version 3.3.8, allows remote attackers to obtain sensitive information via weak encryption algorithms in the component /presets/ssr-auth-chain.js...
CVE-2023-50481
An issue was discovered in blinksocks version 3.3.8, allows remote attackers to obtain sensitive information via weak encryption algorithms in the component /presets/ssr-auth-chain.js...
CVE-2023-50481
An issue was discovered in blinksocks version 3.3.8, allows remote attackers to obtain sensitive information via weak encryption algorithms in the component /presets/ssr-auth-chain.js...
PT-2023-31578 · Unknown · Blinksocks
Name of the Vulnerable Software and Affected Versions: blinksocks version 3.3.8 Description: An issue was discovered in the component /presets/ssr-auth-chain.js, allowing remote attackers to obtain sensitive information via weak encryption algorithms. Recommendations: For blinksocks version 3.3.8...
blinksocks security breach
blinksocks is a blinksocks open source framework for building composable proxy stacks. A security vulnerability exists in blinksocks version 3.3.8, which stems from a vulnerability that allows remote attackers to gain access to sensitive information via a weak encryption algorithm in...
CVE-2023-50481
CVE-2023-50481 affects blinksocks 3.3.8. The vulnerability is in the component /presets/ssr-auth-chain.js, due to the use of weak encryption algorithms (and fixed IVs) that can disclose sensitive information. Impact is described as sensitive information disclosure; no exploit details are provided...