Lucene search
+L

12 matches found

RedhatCVE
RedhatCVE
•added 2026/01/09 12:37 p.m.•15 views

CVE-2023-50481

An issue was discovered in blinksocks version 3.3.8, allows remote attackers to obtain sensitive information via weak encryption algorithms in the component /presets/ssr-auth-chain.js...

7.5CVSS6.4AI score0.00274EPSS
SaveExploits0References1
Veracode
Veracode
•added 2023/12/22 5:25 a.m.•28 views

Weak Cryptography

blinksocks is vulnerable to Sensitive Information Disclosure. The vulnerability is due to the usage of weak encryption algorithms and fixed initialization vectors IV within /presets/ssr-auth-chain.js. This issue can be exploited by an attacker to disclose sensitive encrypted information via brute...

7.5CVSS6.2AI score0.00274EPSS
SaveExploits0References2Affected Software1
Github Security Blog
Github Security Blog
•added 2023/12/21 12:30 p.m.•36 views

blinksocks has weak encryption algorithms

An issue was discovered in blinksocks version 3.3.8, allows remote attackers to obtain sensitive information via weak encryption algorithms in the component /presets/ssr-auth-chain.js...

7.5CVSS6.7AI score0.00274EPSS
SaveExploits0References4Affected Software1
OSV
OSV
•added 2023/12/21 12:30 p.m.•47 views

GHSA-PQJ5-37XF-X5GC blinksocks has weak encryption algorithms

An issue was discovered in blinksocks version 3.3.8, allows remote attackers to obtain sensitive information via weak encryption algorithms in the component /presets/ssr-auth-chain.js...

7.5CVSS5.9AI score0.00274EPSS
SaveExploits0References4
vulnersOsv
vulnersOsv
•added 2023/12/21 12:30 p.m.•4 views

blinksocks-gui (>=0.1.0, <=0.2.1) potentially affected by CVE-2023-50481 via blinksocks (3.3.8)

blinksocks NPM version 3.3.8 is affected by a known vulnerability. The following packages have a transitive dependency on blinksocks and may be impacted: - blinksocks-gui =0.1.0, =0.2.1 Source cves: CVE-2023-50481 Source advisory: OSV:GHSA-PQJ5-37XF-X5GC...

7.5CVSS7.4AI score0.00274EPSS
SaveExploits0
NVD
NVD
•added 2023/12/21 11:15 a.m.•39 views

CVE-2023-50481

An issue was discovered in blinksocks version 3.3.8, allows remote attackers to obtain sensitive information via weak encryption algorithms in the component /presets/ssr-auth-chain.js...

7.5CVSS0.00274EPSS
SaveExploits0References2
attackerkb
attackerkb
•added 2023/12/21 11:15 a.m.•10 views

CVE-2023-50481

An issue was discovered in blinksocks version 3.3.8, allows remote attackers to obtain sensitive information via weak encryption algorithms in the component /presets/ssr-auth-chain.js...

7.5CVSS7.1AI score0.00274EPSS
SaveExploits0References3
OSV
OSV
•added 2023/12/21 12:00 a.m.•26 views

CVE-2023-50481

An issue was discovered in blinksocks version 3.3.8, allows remote attackers to obtain sensitive information via weak encryption algorithms in the component /presets/ssr-auth-chain.js...

7.3AI score
SaveExploits0References4
CNNVD
CNNVD
•added 2023/12/21 12:00 a.m.•18 views

blinksocks security breach

blinksocks is a blinksocks open source framework for building composable proxy stacks. A security vulnerability exists in blinksocks version 3.3.8, which stems from a vulnerability that allows remote attackers to gain access to sensitive information via a weak encryption algorithm in...

7.5CVSS6.8AI score0.00274EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2023/12/21 12:00 a.m.•10 views

PT-2023-31578 · Unknown · Blinksocks

Name of the Vulnerable Software and Affected Versions: blinksocks version 3.3.8 Description: An issue was discovered in the component /presets/ssr-auth-chain.js, allowing remote attackers to obtain sensitive information via weak encryption algorithms. Recommendations: For blinksocks version 3.3.8...

7.5CVSS7.2AI score0.00274EPSS
SaveExploits0References9
Cvelist
Cvelist
•added 2023/12/21 12:00 a.m.•47 views

CVE-2023-50481

An issue was discovered in blinksocks version 3.3.8, allows remote attackers to obtain sensitive information via weak encryption algorithms in the component /presets/ssr-auth-chain.js...

7.5AI score0.00274EPSS
SaveExploits0References2
CVE
CVE
•added 2023/12/21 12:00 a.m.•70 views

CVE-2023-50481

CVE-2023-50481 affects blinksocks 3.3.8. The vulnerability is in the component /presets/ssr-auth-chain.js, due to the use of weak encryption algorithms (and fixed IVs) that can disclose sensitive information. Impact is described as sensitive information disclosure; no exploit details are provided...

7.5CVSS7.2AI score0.00274EPSS
SaveExploits0References2Affected Software1
Rows per page
Query Builder