kr00ker

kr00ker विवरण यह स्क्रिप्ट KR00K कमजोरी CVE-2019-15126 का दोहन करने का एक सरल प्रयोग है, जो कमजोर उपकरणों एक्सेस पॉइंट या क्लाइंट में कुछ WPA2 CCMP डेटा को डिक्रिप्ट करने की अनुमति देता है। विशेष रूप से यह स्क्रिप्ट निम्नलिखित को जानते हुए WPA2 CCMP पैकेट्स के डिक्रिप्टेड डेटा को पुनर्प्राप्त करन...

MonsterCloud Owner Accused of Billing Over $19M While Secretly Paying Ransoms to Decrypt Data

The U.S. Department of Justice DoJ on Wednesday announced charges against a 50-year-old U.S. and Israeli national for allegedly defrauding ransomware victims by secretly paying the attackers to obtain decryptors while claiming to use proprietary tools to recover their data. Zohar Pinhasi aka Zack...

CVE-2020-5248

CVE-2020-5248 Proof of Concept PoC for CVE-2020-5248. Summary GLPI before before version 9.4.6 has a vulnerability involving a default encryption key. GLPIKEY is public and is used on every instance. This means anyone can decrypt sensitive data stored using this key. It is possible to change the...

details-for-CVE-2022-46505

details-for-CVE-2022-46505 MatrixSSL session resume bug 1. Description of bug An issue in MatrixSSL 4.5.1-open and earlier leads to failure to securely check the SessionID field, resulting in the misuse of an all-zero MasterSecret that can decrypt secret data. 2. Affected version MatrixSSL...

CVE-2020-5248

إعداد بيئة واختبار POC لـ CVE-2020-5248 طريقة الاختبار إعداد البيئة vim docker/nginx/default.conf servername docker host ip ; -change mysqlserver: mysql id: root pw: root التشغيل cd docker/app/ tar -xvf /docker/app/glpi-9.4.5.tgz chmod -R 777 glpi docker-compose up -d الوصول إلى glpi...

bedaisy-bypass

bedaisy-bypass الوصف bedaisy-bypass هو برنامج تشغيل للنواة kernel driver مصمم لتجاوز التقارير المرسلة من BEDaisy.sys إلى BEService.exe. بالنسبة للمستخدمين الذين لا يعملون بنظام UEFI، يستخدم المشروع Infinity Hook. يعترض برنامج التشغيل البيانات المُرسلة عبر الأنبوب المسمّى named pipe بين الخدمتين...

EUVD-2026-86162

Termix is a web-based server management platform with SSH terminal, tunneling, and file editing capabilities. From 1.7.0 until 2.5.1, Termix derives the keys that wrap OIDC and WebAuthn users' Data Encryption Keys from committed default strings and the public userId salt in...

EUVD-2026-80067

An unauthenticated user with access to Secret Server could leverage a padding oracle to decrypt or encrypt data using one of the server's cryptographic keys. The key itself is not exposed...

CVE-2026-15638

An unauthenticated user with access to Secret Server could leverage a padding oracle to decrypt or encrypt data using one of the server's cryptographic keys. The key itself is not exposed...

PT-2026-93690

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the skb zerocopy function where it incorrectly calls skb tx error on the source skb during an skb orphan frags failure. This operation is destructive to the source skb...

CVE-2026-15638 Cryptographic Padding Oracle

An unauthenticated user with access to Secret Server could leverage a padding oracle to decrypt or encrypt data using one of the server's cryptographic keys. The key itself is not exposed...

CVE-2026-15638

Delinea Secret Server is affected by a cryptographic padding oracle vulnerability (CVE-2026-15638). An unauthenticated user with network access to the server can leverage the oracle to decrypt or encrypt data using one of the server's cryptographic keys; however, the key itself is not directly ex...

PT-2026-93221

Name of the Vulnerable Software and Affected Versions Secret Server affected versions not specified Description An unauthenticated user with access to Secret Server can utilize a padding oracle—a side-channel attack that reveals information about the padding of encrypted data—to decrypt or encryp...

CVE-2026-81821 AVEVA Pipeline Integrity Monitor Use of hard-coded cryptographic key

The vulnerability, if exploited, could allow a miscreant with read access to PIMBoards project files to decrypt and view sensitive information...

CVE-2026-81821

CVE-2026-81821 affects AVEVA Pipeline Integrity Monitor (PIMBoards) due to the use of a hard-coded cryptographic key . An attacker with local read access to PIMBoards project files can decrypt and view sensitive information stored within them. The CVSS 3.1 score is 8.4 (HIGH) with changed scope, ...

CVE-2025-36271 IBM Integrated Analytics System (IIAS) is affected by a predictable salt vulnerability in Magneto component

IBM Integrated Analytics System 1.0.0.0 through 1.0.31.0 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information...

CVE-2025-36271

IBM Integrated Analytics System (IIAS) versions 1.0.0.0 through 1.0.31.0 are affected by a predictable salt vulnerability in the Magneto component (specifically the resmgr.py module). The use of a predictable salt in cryptographic operations (classified as CWE-759 ) weakens hashing and encryption...

CVE-2026-4937

IBM PowerVM Hypervisor (FW1110.00–FW1110.20, FW1060.00–FW1060.71, FW950.00–FW950.H2) is vulnerable to insufficient entropy (CWE-331) in certain hypervisor calls, allowing a local attacker with administrative privileges to decrypt encrypted data. The CVSS 3.1 score is 5.3 (Medium) with a local att...

EUVD-2026-62842

IBM PowerVM Hypervisor FW1110.00 through FW1110.20, FW1060.00 through FW1060.71, and FW950.00 through FW950.H2 could allow a local attacker with administrative privileges to decrypt encrypted data due to certain hypervisor calls utilizing less entropy than requested...

PT-2026-78673

IBM PowerVM Hypervisor FW1110.00 through FW1110.20, FW1060.00 through FW1060.71, and FW950.00 through FW950.H2 could allow a local attacker with administrative privileges to decrypt encrypted data due to certain hypervisor calls utilizing less entropy than requested...