CVE-2020-5248

CVE-2020-5248 Proof of Concept PoC for CVE-2020-5248. Summary GLPI before before version 9.4.6 has a vulnerability involving a default encryption key. GLPIKEY is public and is used on every instance. This means anyone can decrypt sensitive data stored using this key. It is possible to change the...

publiccms_decrypt

publiccmsdecrypt https://github.com/sanluan/PublicCMS publiccms-core-V4.0.202004.a.jar!/com/publiccms/common/constants/CommonConstants.class publiccms-common-V4.0.202004.a.jar!/com/publiccms/common/tools/VerificationUtils.class com.publiccms.common.tools.VerificationUtils...

ALSA-2026:92157 Critical: mod_auth_openidc:2.3 security update

The modauthopenidc is an OpenID Connect authentication module for Apache HTTP Server. It enables an Apache HTTP Server to operate as an OpenID Connect Relying Party and/or OAuth 2.0 Resource Server. Security Fixes: cjose: OpenIDC/cjose uses all-zero Content Encryption Key for AES-CBC-HMAC JWE...

Critical: mod_auth_openidc:2.3 security update

The modauthopenidc is an OpenID Connect authentication module for Apache HTTP Server. It enables an Apache HTTP Server to operate as an OpenID Connect Relying Party and/or OAuth 2.0 Resource Server. Security Fixes: cjose: OpenIDC/cjose uses all-zero Content Encryption Key for AES-CBC-HMAC JWE...

eWeLink-QR-Code

eWeLink mobile Application - Incorrect Access Control Vulnerability CVE-2021-27941 Unconstrained Web access to the device's private encryption key in the QR code pairing mode in the eWeLink mobile application through 4.9.2 on Android and through 4.9.1 on iOS allows a physically proximate attacker...

CVE-2024-5764

CVE-2024-5764 This repository contains a Python script capable of exploiting CVE-2024-5764 by decrypting encrypted data with the static encryption key. Sonatype announcement available here. Usage usage: cve-2024-5764.py -h -e ENCRYPTEDPAYLOAD -p PASSPHRASE Decrypt data encrypted by the Java...

CVE-2016-4437

CVE-2016-4437 Python POC to Exploit CVE-2016-4437 Apache Shiro Deserialization Vulnerability Due to Hardcoded Encryption Key Example Usage: ./CVE-2016-4437.py -c nslookup -u https://example.com/ -i ecsepnkqtxlishpynfdge01543e4vmx7v.oast.fun See comments and the code for more information...

CVE-2020-27688

CVE-2020-27688 Introduction RVTools is an application developed by Robware.net and is written in .NET 4.6.1. It interacts with vSphere enviroments to extract information in a CSV or XLSX format. It can be run through an GUI or using an input CSV File in which the information is stored to connect ...

poc-cribl-rce

Disclaimer This is for informational/educational purposes only. This was put together to demonstrate an insecurity in the tool, in order for a fix to be verified by the vendor. Info Tested on Cribl v1.5.0 - Previous versions not tested but likely vulnerable. A valid JWT token can be transfered fr...

CVE-2019-6693

CVE-2019-6693 Decrypt FortiGate configuration secrets Original advisory Vendor advisory For Fortigate VM/appliances below versions 6.2.0, 6.0.0 to 6.0.6, 5.6.10 configuration secrets are stored encrypted with a unique key. For versions above the non-default private-data-encryption parameter lets...

CVE-2023-45184

CVE-2023-45184 IBM i Access Client Solutions 1.1.9.4 - Local server broken access control. Timeline Vulnerability reported to vendor: 22.09.2023 New fixed 1.1.9.4 version released: 08.12.2023 Public disclosure: 15.12.2023 Description IBM i Access Client Solutions for storing temporary password...

MGASA-2026-0546 Updated kronosnet package fixes security vulnerabilities

Encryption key exposure in memory after cryptographic configuration changes. CVE-2026-15811 Access control list bypass via link id spoofing on unencrypted dynamic links. CVE-2026-15812 Memory corruption and out-of-bounds access via malformed network packet defragmentation. CVE-2026-15813...

Updated kronosnet package fixes security vulnerabilities

Encryption key exposure in memory after cryptographic configuration changes. CVE-2026-15811 Access control list bypass via link id spoofing on unencrypted dynamic links. CVE-2026-15812 Memory corruption and out-of-bounds access via malformed network packet defragmentation. CVE-2026-15813...

CLSA-2026-1792632603 cjose: Fix of CVE-2026-53939

CVE-2026-53939: fix all-zero AES-CBC-HMAC content-encryption key...

RockyLinux 10 : cjose (RLSA-2026:80605)

The remote RockyLinux 10 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:80605 advisory. cjose: OpenIDC/cjose uses all-zero Content Encryption Key for AES-CBC-HMAC JWE encryption CVE-2026-53939 Tenable has extracted the preceding description block...

TP-Link Archer C6 V2 encryption issue vulnerability

Versions of the TP-Link Archer C6 V2 prior to build 260902 contain an encryption vulnerability. This vulnerability arises from the use of a shared, cross-device encryption key; there is a hard-coded issue related to encryption key management. As a result, attackers may obtain encrypted...

RHEL 10 : cjose (RHSA-2026:80605)

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:80605 advisory. CJose is C library implementing the Javascript Object Signing and Encryption JOSE. Security Fixes: cjose: OpenIDC/cjose uses all-zero Content...

MinIO encryption issues and vulnerabilities

MinIO RELEASE.2025-10-15T17-29-55Z and earlier versions have a security vulnerability. This vulnerability stems from the globalDeploymentID/SessionTokenAuthenticate function in the Embedded Console component, which uses a hard-coded encryption key. This vulnerability can be exploited remotely...

Moxa AIG-302 Series encryption vulnerabilities

The Moxa AIG-302 Series from version 1.0.0 to 1.4.0 has an encryption vulnerability. This vulnerability stems from a hard-coded encryption key present in /usr/bin/sysman. It could allow unauthenticated attackers with adjacent network access to exploit the exposed private key material, thereby...

Astra Linux – Vulnerability found in Linux 6.1, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: ksmbd: The issue of a null pointer dereference error in generateencryptionkey has been fixed. If a client sends two session setups with KRB5 authentication to ksmbd, a null pointer dereference error in generateencryptionkey can...