Linux Distros Unpatched Vulnerability : CVE-2025-2545

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Vulnerability in Best Practical Solutions, LLC's Request Tracker prior to v5.0.8, where the Triple DES 3DES cryptographic algorithm is used to protect emails se...

CVE-2025-9239 elunez eladmin DES Key EncryptUtils.java EncryptUtils inadequate encryption

A vulnerability was identified in elunez eladmin up to 2.7. Affected by this vulnerability is the function EncryptUtils of the file eladmin-common/src/main/java/me/zhengjie/utils/EncryptUtils.java of the component DES Key Handler. The manipulation of the argument STRPARAM with the input Passw0rd...

Malicious code in des-responsive-framework (npm)

The package des-responsive-framework was found to contain malicious code...

MAL-2025-18303 Malicious code in des-responsive-framework (npm)

The package des-responsive-framework was found to contain malicious code...

[SECURITY] Fedora 41 Update: perl-Crypt-CBC-3.07-1.fc41

This is Crypt::CBC, a Perl-only implementation of the cryptographic cipher block chaining mode CBC. In combination with a block cipher such as Crypt::DES or Crypt::IDEA, you can encrypt and decrypt messages of arbitrarily long length. The encrypted messages are compatible with the encryption form...

Exploit for CVE-1999-0078

Browsable content of eqgrp-auction-file.tar.xz - Original file: https://mega.nz/!zEAU1AQL!oWJ63n-D6lCuCQ4AY0Cv405hX8kn7MEsa1iLH5UjKU - Passphrase: CrDj";Va.NdlnzB9M?@K2deB7mN as disclosed by the ShadowBrokers, source - This summary is provided by the community: complaints/credits to jvoisin @...

The vulnerability of the build-ca command in the Easy-RSA certificate management tool allows a attacker to execute a brute-force attack.

The vulnerability of the build-ca command in the Easy-RSA certificate management tool is related to insufficient data encryption due to the use of the cipher:des-ede3-cbc algorithm. Exploiting this vulnerability allows an attacker to execute a brute-force attack...

Unspecified Vulnerability in Endress+Hauser MEAC300-FNADE4 (CNVD-2025-16348)

The Endress+Hauser MEAC300-FNADE4 is a cost-effective emissions data management computer from Endress+Hauser Vietnam. A security vulnerability exists in the Endress+Hauser MEAC300-FNADE4 that stems from the use of DES encryption to store passwords, which can be exploited by an attacker to cause...

CVE-2025-27459

The VNC application stores its passwords encrypted within the registry but uses DES for encryption. As DES is broken, the original passwords can be recovered...

CVE-2025-27459

The VNC application stores its passwords encrypted within the registry but uses DES for encryption. As DES is broken, the original passwords can be recovered...

CVE-2025-27459

The CVE-2025-27459 entry concerns a VNC application that stores passwords encrypted in the registry using DES. The root cause is the use of DES for password storage, which is considered broken, enabling recovery of original passwords. The available connected sources corroborate that passwords are...

CVE-2025-27459 CVE-2025-27459

The VNC application stores its passwords encrypted within the registry but uses DES for encryption. As DES is broken, the original passwords can be recovered...

CVE-2025-27459 CVE-2025-27459

The VNC application stores its passwords encrypted within the registry but uses DES for encryption. As DES is broken, the original passwords can be recovered...

PT-2025-27788

Name of the Vulnerable Software and Affected Versions: VNC affected versions not specified Description: The VNC application stores its passwords encrypted within the registry but uses DES for encryption. As DES is broken, the original passwords can be recovered. Recommendations: At the moment,...

USN-7542-1 krb5 vulnerability

It was discovered that Kerberos allowed the usage of weak cryptographic standards. An attacker could possibly use this issue to expose sensitive information. This update introduces the allowrc4 and allowdes3 configuration options, and disables the usage of RC4 and 3DES ciphers by default. Users a...

CVE-2022-25806

An issue was discovered in the IGEL Universal Management Suite UMS 6.07.100. A hardcoded DES key in the PrefDBCredentials class allows an attacker, who has discovered encrypted superuser credentials, to decrypt those credentials using a static 8-byte DES key...

CVE-2013-7308

The OSPF implementation on the D-Link DES-3810-28 switch with firmware R2.20.B017 does not consider the possibility of duplicate Link State ID values in Link State Advertisement LSA packets before performing operations on the LSA database, which allows remote attackers to cause a denial of servic...

CVE-2014-10069

Hitron CVE-30360 devices use a 578A958E3DD933FC DES key that is shared across different customers' installations, which makes it easier for attackers to obtain sensitive information by decrypting a backup configuration file, as demonstrated by a password hash in the umauthaccountpassword field...

CVE-2017-15998

In the "NQ Contacts Backup & Restore" application 1.1 for Android, DES encryption with a static key is used to secure transmitted contact data. This makes it easier for remote attackers to obtain cleartext information by sniffing the network...

CVE-2025-2545

Vulnerability in Best Practical Solutions, LLC's Request Tracker v5.0.7, where the Triple DES 3DES cryptographic algorithm is used within SMIME code to encrypt S/MIME emails. Triple DES is considered obsolete and insecure due to its susceptibility to birthday attacks, which could compromise the...