bedaisy-bypass

bedaisy-bypass 描述 bedaisy-bypass 是一个内核驱动程序，旨在绕过从 BEDaisy.sys 发送到 BEService.exe 的报告。对于不使用 UEFI 的用户，该项目利用 Infinity Hook。该驱动程序拦截通过两个服务之间的命名管道通信的数据。收到请求后，驱动程序检查请求类型，解密返回的数据，并相应地处理。由于报告缓冲区中缺少预期数据（与主用户模式 shellcode 不同），可以利用此机制来解密、置空并重新加密数据。这确保不会有报告发送回服务，同时仍然允许传输响应。 安装 1. 从此仓库下载 Infinity Hook。 2. 将...

kr00ker

kr00ker 描述 该脚本是一个利用 KR00K 漏洞（CVE-2019-15126）的简单实验，可以解密易受攻击设备（接入点或客户端）中的部分 WPA2 CCMP 数据。 更具体地说，该脚本尝试在已知以下信息的情况下恢复 WPA2 CCMP 数据包的解密数据： TK（128 位全零） Nonce（在数据包头中以明文发送） 加密数据 其中： WPA2 AES-CCMP 解密 -- AESNonce,TK XOR Encrypted Data = Decrypted Data 解密数据流以 "\xaa\xaa\x03\x00\x00\x00" 开头 Nonce（104 位）=...

CVE-2020-5248

CVE-2020-5248 Prueba de concepto PoC para CVE-2020-5248. Resumen GLPI antes de la versión 9.4.6 tiene una vulnerabilidad que involucra una clave de cifrado predeterminada. GLPIKEY es pública y se utiliza en todas las instancias. Esto significa que cualquiera puede descifrar datos sensibles...

details-for-CVE-2022-46505

CVE-2022-46505 详情 MatrixSSL 会话恢复漏洞 1. 漏洞描述 MatrixSSL 4.5.1-open 及更早版本中存在一个问题，导致无法安全检查 SessionID 字段，从而导致滥用全零 MasterSecret ，进而可以解密机密数据。 2. 受影响版本 MatrixSSL 4.5.1-open 及更早版本 3. 漏洞类型 TLS 恢复会话解密 4. 漏洞详情 MatrixSSL 服务器通过一个列表来存储协商的会话信息。 static sslSessionEntryt gsessionTableSSLSESSIONTABLESIZE; //...

CVE-2020-5248

CVE-2020-5248 POC环境配置及测试。 测试方法 环境配置 vim docker/nginx/default.conf servername docker host ip ; -change mysqlserver: mysql id: root pw: root 执行 cd docker/app/ tar -xvf /docker/app/glpi-9.4.5.tgz chmod -R 777 glpi docker-compose up -d glpi访问 http://localhost:8080/glpi POC测试 poc :...

EUVD-2026-86162

Termix is a web-based server management platform with SSH terminal, tunneling, and file editing capabilities. From 1.7.0 until 2.5.1, Termix derives the keys that wrap OIDC and WebAuthn users' Data Encryption Keys from committed default strings and the public userId salt in...

EUVD-2026-80067

An unauthenticated user with access to Secret Server could leverage a padding oracle to decrypt or encrypt data using one of the server's cryptographic keys. The key itself is not exposed...

CVE-2026-15638

An unauthenticated user with access to Secret Server could leverage a padding oracle to decrypt or encrypt data using one of the server's cryptographic keys. The key itself is not exposed...

CVE-2026-15638 Cryptographic Padding Oracle

An unauthenticated user with access to Secret Server could leverage a padding oracle to decrypt or encrypt data using one of the server's cryptographic keys. The key itself is not exposed...

CVE-2026-15638

Delinea Secret Server is affected by a cryptographic padding oracle vulnerability (CVE-2026-15638). An unauthenticated user with network access to the server can leverage the oracle to decrypt or encrypt data using one of the server's cryptographic keys; however, the key itself is not directly ex...

PT-2026-93221

Name of the Vulnerable Software and Affected Versions Secret Server affected versions not specified Description An unauthenticated user with access to Secret Server can utilize a padding oracle—a side-channel attack that reveals information about the padding of encrypted data—to decrypt or encryp...

CVE-2026-81821

CVE-2026-81821 affects AVEVA Pipeline Integrity Monitor (PIMBoards) due to the use of a hard-coded cryptographic key . An attacker with local read access to PIMBoards project files can decrypt and view sensitive information stored within them. The CVSS 3.1 score is 8.4 (HIGH) with changed scope, ...

CVE-2026-81821 AVEVA Pipeline Integrity Monitor Use of hard-coded cryptographic key

The vulnerability, if exploited, could allow a miscreant with read access to PIMBoards project files to decrypt and view sensitive information...

CVE-2025-36271 IBM Integrated Analytics System (IIAS) is affected by a predictable salt vulnerability in Magneto component

IBM Integrated Analytics System 1.0.0.0 through 1.0.31.0 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information...

CVE-2025-36271

IBM Integrated Analytics System (IIAS) versions 1.0.0.0 through 1.0.31.0 are affected by a predictable salt vulnerability in the Magneto component (specifically the resmgr.py module). The use of a predictable salt in cryptographic operations (classified as CWE-759 ) weakens hashing and encryption...

CVE-2026-4937

IBM PowerVM Hypervisor (FW1110.00–FW1110.20, FW1060.00–FW1060.71, FW950.00–FW950.H2) is vulnerable to insufficient entropy (CWE-331) in certain hypervisor calls, allowing a local attacker with administrative privileges to decrypt encrypted data. The CVSS 3.1 score is 5.3 (Medium) with a local att...

EUVD-2026-62842

IBM PowerVM Hypervisor FW1110.00 through FW1110.20, FW1060.00 through FW1060.71, and FW950.00 through FW950.H2 could allow a local attacker with administrative privileges to decrypt encrypted data due to certain hypervisor calls utilizing less entropy than requested...

PT-2026-78673

IBM PowerVM Hypervisor FW1110.00 through FW1110.20, FW1060.00 through FW1060.71, and FW950.00 through FW950.H2 could allow a local attacker with administrative privileges to decrypt encrypted data due to certain hypervisor calls utilizing less entropy than requested...

Security Bulletin: This Power System update is being released to address CVE-2026-4937

Summary PowerVM could allow a local attacker with administrative privileges to decrypt encrypted data due to certain hypervisor calls utilizing less entropy than requested. Vulnerability Details CVEID:CVE-2026-4937 DESCRIPTION: PowerVM could allow a local attacker with administrative privileges t...

CVE-2025-30239

In affected TP-Link Aginet devices, use of hardcoded cryptographic keys embedded in the firmware to protect sensitive configuration data may allow an attacker who has access to device storage to recover the keys and decrypt stored data. Successful exploitation may allow access to decrypted...