7919 matches found
PT-2026-125884
An attacker who obtained the hardcoded key could decrypt domain/service account passwords, task run-as credentials, and sysprep passwords stored in or transmitted by GSS Deployment Server installation...
PT-2026-126664
Security researchers have disclosed three vulnerabilities in GoAhead, an embedded web server used across hundreds of millions of devices, including routers, firewalls, industrial equipment and IoT systems. The most severe flaw CVE-2026-115881, CVSS 9.1 affects OpenSSL-compatible builds. GoAhead...
PT-2026-126663
Security researchers have disclosed three vulnerabilities in GoAhead, an embedded web server used across hundreds of millions of devices, including routers, firewalls, industrial equipment and IoT systems. The most severe flaw CVE-2026-115881, CVSS 9.1 affects OpenSSL-compatible builds. GoAhead...
CVE-2016-4437
shiro-1.2.4 Vulnerability Tool Decrypt rememberMe value and export corresponding class file Usage xk-mt-rememberMe解码.py Instructions: After running, first enter the key or press Enter to use the default key 'kPH+bIxk5D2deZiIxcaaaA==', then enter the rememberMe value from the request packet. After...
CVE-2020-27688
CVE-2020-27688 Introduction RVTools is an application developed by Robware.net and is written in .NET 4.6.1. It interacts with vSphere enviroments to extract information in a CSV or XLSX format. It can be run through an GUI or using an input CSV File in which the information is stored to connect ...
Webmin_Exploit_reverse_shell
ntroduction: The Webmin Exploit is a targeted exploit for the Webmin service, which can be exploited on older versions of Webmin. This exploit uses various techniques to execute malicious code and gain unauthorized access to the target system. It involves: Using both C and Assembly code to execut...
Milesight Routers - Information Disclosure
A critical security vulnerability has been identified in Milesight Industrial Cellular Routers, compromising the security of sensitive credentials and permitting unauthorized access. This vulnerability stems from a misconfiguration that results in directory listing being enabled on the router...
CVE-2026-116071
rotki before 1.44.2 contains a weak key derivation vulnerability that allows attackers to brute-force backups because the premium sync key is a single unsalted SHA-256 of the user password. Attackers who obtain an uploaded backup blob can run GPU-parallel offline password guessing and decrypt the...
EUVD-2026-109385
rotki before 1.44.2 contains a weak key derivation vulnerability that allows attackers to brute-force backups because the premium sync key is a single unsalted SHA-256 of the user password. Attackers who obtain an uploaded backup blob can run GPU-parallel offline password guessing and decrypt the...
kavanoz
🫙 kavanoz 🫙 Kavanoz jar in turkish is a tool to statically unpack common android banker malware. Do you ever wanted to get payload from packed malware without running android emulator ? Me neither : But here is a tool anyway. 👀 Installation pip install kavanoz To install from source, clone the...
PT-2026-122974
rotki before 1.44.2 contains a weak key derivation vulnerability that allows attackers to brute-force backups because the premium sync key is a single unsalted SHA-256 of the user password. Attackers who obtain an uploaded backup blob can run GPU-parallel offline password guessing and decrypt the...
widevine-l3-decryptor
Deprecation Warning This repository used to contain code to circumvent Widevine L3 DRM in Chrome on Windows machines. It's not working anymore as of May 31st 2021, but you can read the reversing writeup. Update Google issued a DMCA takedown request against most forks of this repository. The...
FreeBSD : cjose -- Heap-based Buffer Overflow (35b3a492-b05a-11f1-9369-b42e991fc52e)
The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 35b3a492-b05a-11f1-9369-b42e991fc52e advisory. https://github.com/OpenIDC/cjose/security/advisories/GHSA-75r7-f5cv-g3wj reports: OpenIDC/cjose is a C...
Atlassian Jira Service Management Data Center and Server 10.0.x < 10.3.25 / 10.4.x < 11.3.11 (JSDSERVER-16755)
The version of Atlassian Jira Service Management Data Center and Server Jira Service Desk running on the remote host is affected by a vulnerability as referenced in the JSDSERVER-16755 advisory. - In Bouncy Castle for Java before 1.85, CMS AuthEnvelopedData fails to enforce tag-length on...
RandomTSScripts
Info Random collection of scripts useful for engagements, which don't really need their own repo. Contents compcheck - Quick and dirty script to check Pre2K computers for default creds via a TGS. lapsv2decrypt - BOF and CS code to decrypt LAPSv2 passwords retrieved from LDAP. apppoolcreddecrypt -...
hikvision_CVE-2017-7921_auth_bypass_config_decryptor
hikvisionCVE-2017-7921authbypassconfigdecryptor This python file will decrypt the configurationFile used by hikvision cameras vulnerable to CVE-2017-7921. https://www.checkpoint.com/defense/advisories/public/2017/cpai-2017-0876.html/ Description Hikvision IP Cameras Authentication Bypass...
CLEANSTART-2026-JP03196 Issue summary: ChaCha20-Poly1305 and AES-OCB decryption with an empty ciphertext can report success without verifying the supplied authentication tag when the operation is finalized by calling the ...
CVE-2026-75803 affects multiple packages. Issue summary: ChaCha20-Poly1305 and AES-OCB decryption with an empty ciphertext can report success without verifying the supplied authentication tag when the operation is finalized by calling the EVPCipher function. See references for individual...
CLEANSTART-2026-VK14120 Issue summary: OpenSSL CMS decryption sizes the key-unwrap output buffer based on querying the unwrapped key size, but the AES-WRAP-PAD unwrap primitive can write and cleanse more bytes than that q...
CVE-2026-63072 affects multiple packages. Issue summary: OpenSSL CMS decryption sizes the key-unwrap output buffer based on querying the unwrapped key size, but the AES-WRAP-PAD unwrap primitive can write and cleanse more bytes than that query reports, causing an 8-byte out-of-bounds heap write...
EUVD-2026-107642
In Splunk SOAR versions below 8.7.0, an unauthenticated user with access to encrypted credential data from an affected Splunk SOAR instance could submit Basic authentication data to the Representational State Transfer REST API to expose and decrypt that encrypted credential data. The vulnerabilit...
Ubuntu 22.04 LTS / 24.04 LTS / 26.04 LTS / 26.10 : poppler vulnerability (USN-8950-1)
The remote Ubuntu 22.04 LTS / 24.04 LTS / 26.04 LTS / 26.10 host has packages installed that are affected by a vulnerability as referenced in the USN-8950-1 advisory. It was discovered that poppler incorrectly handled the password length limit when decrypting certain encrypted PDF files. An...