Lucene search
K

12 matches found

RedhatCVE
RedhatCVE
added 2026/01/09 12:37 p.m.4 views

CVE-2023-50481

An issue was discovered in blinksocks version 3.3.8, allows remote attackers to obtain sensitive information via weak encryption algorithms in the component /presets/ssr-auth-chain.js...

7.5CVSS6.4AI score0.00105EPSS
Exploits0References1
Veracode
Veracode
added 2023/12/22 5:25 a.m.17 views

Weak Cryptography

blinksocks is vulnerable to Sensitive Information Disclosure. The vulnerability is due to the usage of weak encryption algorithms and fixed initialization vectors IV within /presets/ssr-auth-chain.js. This issue can be exploited by an attacker to disclose sensitive encrypted information via brute...

7.5CVSS6.2AI score0.00105EPSS
Exploits0References2Affected Software1
Github Security Blog
Github Security Blog
added 2023/12/21 12:30 p.m.20 views

blinksocks has weak encryption algorithms

An issue was discovered in blinksocks version 3.3.8, allows remote attackers to obtain sensitive information via weak encryption algorithms in the component /presets/ssr-auth-chain.js...

7.5CVSS6.7AI score0.00105EPSS
Exploits0References4Affected Software1
vulnersOsv
vulnersOsv
added 2023/12/21 12:30 p.m.1 views

blinksocks-desktop (>=0.0.1 <=0.1.3), blinksocks-gui (>=0.1.0 <=0.2.1) potentially affected by CVE-2023-50481 via blinksocks (>=2.9.0 <=3.3.8)

blinksocks NPM version =2.9.0, =0.0.1, =0.1.0, =0.2.1 Source cves: CVE-2023-50481 Source advisory: OSV:GHSA-PQJ5-37XF-X5GC...

7.5CVSS7.1AI score0.00105EPSS
Exploits0
OSV
OSV
added 2023/12/21 12:30 p.m.3 views

GHSA-PQJ5-37XF-X5GC blinksocks has weak encryption algorithms

An issue was discovered in blinksocks version 3.3.8, allows remote attackers to obtain sensitive information via weak encryption algorithms in the component /presets/ssr-auth-chain.js...

7.5CVSS5.9AI score0.00105EPSS
Exploits0References4
ATTACKERKB
ATTACKERKB
added 2023/12/21 11:15 a.m.2 views

CVE-2023-50481

An issue was discovered in blinksocks version 3.3.8, allows remote attackers to obtain sensitive information via weak encryption algorithms in the component /presets/ssr-auth-chain.js...

7.5CVSS7.1AI score0.00105EPSS
Exploits0References3
NVD
NVD
added 2023/12/21 11:15 a.m.12 views

CVE-2023-50481

An issue was discovered in blinksocks version 3.3.8, allows remote attackers to obtain sensitive information via weak encryption algorithms in the component /presets/ssr-auth-chain.js...

7.5CVSS0.00105EPSS
Exploits0References2
OSV
OSV
added 2023/12/21 11:15 a.m.9 views

CVE-2023-50481

An issue was discovered in blinksocks version 3.3.8, allows remote attackers to obtain sensitive information via weak encryption algorithms in the component /presets/ssr-auth-chain.js...

7.5CVSS7.3AI score0.00105EPSS
Exploits0References2
Cvelist
Cvelist
added 2023/12/21 12:0 a.m.13 views

CVE-2023-50481

An issue was discovered in blinksocks version 3.3.8, allows remote attackers to obtain sensitive information via weak encryption algorithms in the component /presets/ssr-auth-chain.js...

7.5AI score0.00105EPSS
Exploits0References2
CNNVD
CNNVD
added 2023/12/21 12:0 a.m.2 views

blinksocks security breach

blinksocks is a blinksocks open source framework for building composable proxy stacks. A security vulnerability exists in blinksocks version 3.3.8, which stems from a vulnerability that allows remote attackers to gain access to sensitive information via a weak encryption algorithm in...

7.5CVSS6.8AI score0.00105EPSS
Exploits0References3
Positive Technologies
Positive Technologies
added 2023/12/21 12:0 a.m.2 views

PT-2023-31578 · Unknown · Blinksocks

Name of the Vulnerable Software and Affected Versions: blinksocks version 3.3.8 Description: An issue was discovered in the component /presets/ssr-auth-chain.js, allowing remote attackers to obtain sensitive information via weak encryption algorithms. Recommendations: For blinksocks version 3.3.8...

7.5CVSS7.2AI score0.00105EPSS
Exploits0References9
CVE
CVE
added 2023/12/21 12:0 a.m.34 views

CVE-2023-50481

CVE-2023-50481 affects blinksocks 3.3.8. The vulnerability is in the component /presets/ssr-auth-chain.js, due to the use of weak encryption algorithms (and fixed IVs) that can disclose sensitive information. Impact is described as sensitive information disclosure; no exploit details are provided...

7.5CVSS7.2AI score0.00105EPSS
Exploits0References2Affected Software1
Rows per page
Query Builder