eWeLink-QR-Code

Applicazione mobile eWeLink - Vulnerabilità di controllo degli accessi non corretto CVE-2021-27941 L'accesso Web senza restrizioni alla chiave di crittografia privata del dispositivo nella modalità di pairing tramite codice QR nell'applicazione mobile eWeLink fino alla versione 4.9.2 su Android e...

cve-2019-6693

FortiGate-Passwort-Entschlüsselungsskript - CVE-2019-6693 🔐 Ein autorisierter Remote-Benutzer mit Zugriff oder Kenntnis des Standard-Verschlüsselungsschlüssels könnte Zugriff erlangen und die FortiOS-Sicherungsdateien sowie alle Nicht-Administrator-Passwörter, privaten Schlüssel und...

CVE-2016-4437

CVE-2016-4437 POC em Python para Explorar a Vulnerabilidade de Desserialização CVE-2016-4437 do Apache Shiro devido a uma Chave de Criptografia Hardcoded Exemplo de uso: ./CVE-2016-4437.py -c nslookup -u https://example.com/ -i ecsepnkqtxlishpynfdge01543e4vmx7v.oast.fun Consulte os comentários e ...

CVE-2020-27688

CVE-2020-27688 परिचय RVTools एक एप्लिकेशन है जो Robware.net द्वारा विकसित किया गया है और .NET 4.6.1 में लिखा गया है। यह vSphere वातावरणों के साथ इंटरैक्ट करता है ताकि CSV या XLSX प्रारूप में जानकारी निकाल सके। इसे GUI के माध्यम से या इनपुट CSV फ़ाइल का उपयोग करके चलाया जा सकता है जिसमें vSphere...

CVE-2019-6693

CVE-2019-6693 Decifrare i segreti di configurazione di FortiGate Avviso originale Avviso del fornitore Per le VM/appliances FortiGate con versioni inferiori a 6.2.0, da 6.0.0 a 6.0.6, 5.6.10 i segreti di configurazione vengono memorizzati crittografati con una chiave unica. Per le versioni...

publiccms_decrypt

publiccmsdecrypt https://github.com/sanluan/PublicCMS publiccms-core-V4.0.202004.a.jar!/com/publiccms/common/constants/CommonConstants.class publiccms-common-V4.0.202004.a.jar!/com/publiccms/common/tools/VerificationUtils.class com.publiccms.common.tools.VerificationUtils...

CVE-2020-5248

CVE-2020-5248 Preuve de concept PoC pour CVE-2020-5248. Résumé GLPI avant la version 9.4.6 présente une vulnérabilité impliquant une clé de chiffrement par défaut. GLPIKEY est publique et utilisée sur chaque instance. Cela signifie que n'importe qui peut déchiffrer les données sensibles stockées...

CVE-2024-5764

CVE-2024-5764 Questo repository contiene uno script Python in grado di sfruttare CVE-2024-5764 decifrando i dati cifrati con la chiave di cifratura statica. L'annuncio di Sonatype è disponibile qui. Utilizzo root@kitploit: usage: cve-2024-5764.py -h -e ENCRYPTEDPAYLOAD -p PASSPHRASE Decrypt data...

magento2-encryption-key-manager-cli

CLI per la Gestione della Chiave di Crittografia di Magento 2 Un'utilità per la rotazione e la gestione della chiave di crittografia di Magento 2. Le vittime di CVE-2024-34102 aka Cosmic Sting possono usarla come assistenza post-rimedio. Progettato per Uso in sviluppo Automazione del deployment...

poc-cribl-rce

Aviso Legal Isto é apenas para fins informativos/educacionais. Isto foi elaborado para demonstrar uma vulnerabilidade na ferramenta, para que uma correção possa ser verificada pelo fornecedor. Informações Testado no Cribl v1.5.0 - Versões anteriores não testadas, mas provavelmente vulneráveis. Um...

CVE-2023-45184

CVE-2023-45184 IBM i Access Client Solutions 1.1.9.4 - Lokaler Server mit defekter Zugriffskontrolle. Zeitplan Schwachstelle an den Hersteller gemeldet: 22.09.2023 Neue behobene Version 1.1.9.4 veröffentlicht: 08.12.2023 Öffentliche Offenlegung: 15.12.2023 Beschreibung IBM i Access Client Solutio...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: ksmbd: The issue of a null pointer dereference error in generateencryptionkey has been fixed. If a client sends two session setups with KRB5 authentication to ksmbd, a null pointer dereference error in generateencryptionkey can...

CVE-2026-19293

SMP security request from peripheral does not include the maximum encryption key size supported. Using a key with less than the maximum keysize makes brute-forcing the key easier. See V6 in BLERP paper linked below...

CVE-2026-19293 SMP security request

SMP security request from peripheral does not include the maximum encryption key size supported. Using a key with less than the maximum keysize makes brute-forcing the key easier. See V6 in BLERP paper linked below...

CVE-2026-19293

The vulnerability CVE-2026-19293 concerns the BLE SMP (Security Manager Protocol) security request where the peripheral omits the maximum supported encryption key size. This omission can allow brute-forcing of the key more easily for an adjacent attacker. The entry cites the BLERP paper and provi...

CVE-2026-72801

SiYuan before version 3.7.4 discloses encrypted-notebook key-derivation material and wrapped data keys via unauthenticated endpoints in publish mode. The vulnerability exposes Argon2id salt, Argon2 cost parameters, password verifiers, and wrapped notebook keys, enabling unlimited offline master-p...

CVE-2026-72801 SiYuan before v3.7.4 Information Disclosure via Encryption Key Material

SiYuan versions before v3.7.4 disclose encrypted-notebook key-derivation material and wrapped data keys through unauthenticated endpoints in publish mode. Attackers can retrieve Argon2id salt, cost parameters, password verifiers, and wrapped notebook keys to perform unlimited offline...

CVE-2026-57262

The CVE-2026-57262 vulnerability affects LOGO! Soft Comfort (All versions

Astra Linux – Vulnerability found in Linux 6.12, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: A missing check for the encryption key size was fixed in the L2CAPLEConnREQ. This addition ensures that the key size is checked upon receiving the L2CAPLEConnREQ, which is required by L2CAP/LE/CFC/BV-15-C. This...

CVE-2026-63725

The CVE describes an authenticated OS command injection in sysPass, where FileBackupService::doBackupFiles() constructs a tar command by directly inserting the config-provided backup path ($this->path) into the shell command without escaping or validation, and passes it to exec(). This path co...