CVE-2025-2810

A low privileged local attacker can abuse the affected service by using a hardcoded cryptographic key...

CVE-2025-2810 Draeger: ICMHelper is vulnerable to use of Hard-coded Cryptographic Key

A low privileged local attacker can abuse the affected service by using a hardcoded cryptographic key...

CVE-2025-2810

CVE-2025-2810 affects Dräger ICMHelper (client assistance software) up to version 1.4.0.1 and earlier. The root cause is the use of a hard-coded cryptographic key, which can enable a low-privileged local attacker to abuse the affected service and potentially escalate privileges. Public documentat...

CVE-2025-54982

An improper verification of cryptographic signature in Zscaler's SAML authentication mechanism on the server-side allowed an authentication abuse...

CVE-2025-54982 SAML 2.0 Public Key Validation Issue

An improper verification of cryptographic signature in Zscaler's SAML authentication mechanism on the server-side allowed an authentication abuse...

CVE-2025-54982 SAML 2.0 Public Key Validation Issue

An improper verification of cryptographic signature in Zscaler's SAML authentication mechanism on the server-side allowed an authentication abuse...

CVE-2025-54982

CVE-2025-54982 concerns Zscaler's SAML authentication where the server-side verification of cryptographic signatures is improper, enabling authentication abuse. Public records describe the vulnerability as a cryptographic signature validation weakness that could allow bypassing authentication con...

FlashVault: Versatile In-NAND Self-Encryption with Zero Area Overhead

We present FlashVault, an in-NAND self-encryption architecture that embeds a reconfigurable cryptographic engine into the unused silicon area of a state-of-the-art 4D V-NAND structure. FlashVault supports not only block ciphers for data encryption but also public-key and post-quantum algorithms f...

PT-2025-31917 · Openssl · Openssl

Name of the Vulnerable Software and Affected Versions: affected versions not specified Description: A low privileged local attacker can abuse the affected service by using a hardcoded cryptographic key. Recommendations: At the moment, there is no information about a newer version that contains a...

VTun-ng 安全漏洞

vtun-ng is an application by Jan-Espen Oversand Individual Developer. A security vulnerability exists in VTun-ng 3.0.17 and earlier versions, which stems from a failure in the initialization of the cryptographic module that could lead to a plaintext transfer...

PT-2025-32008 · Unknown +1 · Security-Kit +1

Name of the Vulnerable Software and Affected Versions: Vision UI versions 1.4.0 and below security-kit versions prior to 3.5.0 Description: The getSecureRandomInt function contains a cryptographic weakness due to a silent 32-bit integer overflow in its internal masking logic. This prevents the...

PT-2025-31904 · Zscaler · Zscaler

Name of the Vulnerable Software and Affected Versions: Zscaler affected versions not specified Description: An improper verification of a cryptographic signature in Zscaler's SAML authentication mechanism on the server-side allowed for authentication abuse. Recommendations: At the moment, there i...

CVE-2025-38741

Dell Enterprise SONiC OS, version 4.5.0, contains a cryptographic key vulnerability in SSH. An unauthenticated remote attacker could potentially exploit this vulnerability, leading to unauthorized access to communication...

CVE-2025-38741

Dell Enterprise SONiC OS, version 4.5.0, contains a cryptographic key vulnerability in SSH. An unauthenticated remote attacker could potentially exploit this vulnerability, leading to unauthorized access to communication...

CVE-2025-26476

CVE-2025-26476 affects Dell ECS (versions prior to 3.8.1.5) and ObjectScale (prior to 4.0.0.0), where a Use of Hard-coded Cryptographic Key could allow an unauthenticated attacker with local access to achieve Unauthorized access. The issue is rooted in hard-coded keys; exploitation details are no...

CVE-2025-26476

Dell ECS versions prior to 3.8.1.5/ ObjectScale version 4.0.0.0, contain a Use of Hard-coded Cryptographic Key vulnerability. An unauthenticated attacker with local access could potentially exploit this vulnerability, leading to Unauthorized access...

CVE-2025-38741

Dell Enterprise SONiC OS (Dell SONiC) on version 4.5.0 and earlier contains a cryptographic key vulnerability in SSH that could be exploited by an unauthenticated remote attacker to gain unauthorized access to communications. The connected Nessus note (DSA-2025-275) and vendor advisory indicate t...

CVE-2025-38741

Dell Enterprise SONiC OS, version 4.5.0, contains a cryptographic key vulnerability in SSH. An unauthenticated remote attacker could potentially exploit this vulnerability, leading to unauthorized access to communication...

CVE-2025-38741

Dell Enterprise SONiC OS, version 4.5.0, contains a cryptographic key vulnerability in SSH. An unauthenticated remote attacker could potentially exploit this vulnerability, leading to unauthorized access to communication...

PT-2025-31852 · Dell · Dell Enterprise Sonic Os

Name of the Vulnerable Software and Affected Versions: Dell Enterprise SONiC OS version 4.5.0 Description: Dell Enterprise SONiC OS version 4.5.0 contains a cryptographic key vulnerability in SSH. An unauthenticated remote attacker could potentially exploit this issue, leading to unauthorized...