Exploits_and_Advisories

익스플로잇 및 보안 권고 제가 공동발견하거나 공동작성한 공개 익스플로잇, 취약점 및 보안 권고를 추적하는 저장소입니다. CVE 목록 CVE| ID| 대상| 설명| 공개 ---|---|---|---|--- CVE-2020-10881| ZDI-20-333| TP-Link Archer A7/C7| DNS 스택 오버플로| Pwn2Own Tokyo 2019 CVE-2020-10882| ZDI-20-334| TP-Link Archer A7/C7| 명령 주입| Pwn2Own Tokyo 2019 CVE-2020-10883| ZDI-20-33...

CVE-2025-30239

In affected TP-Link Aginet devices, use of hardcoded cryptographic keys embedded in the firmware to protect sensitive configuration data may allow an attacker who has access to device storage to recover the keys and decrypt stored data. Successful exploitation may allow access to decrypted...

PT-2025-35584

Name of the Vulnerable Software and Affected Versions: SunPower PVS6 affected versions not specified Description: The SunPower PVS6’s BluetoothLE interface is vulnerable due to the use of hardcoded encryption parameters and publicly accessible protocol details. An attacker within Bluetooth range...

Security Bulletin: IBM Maximo Application Suite - Monitor Component is vulnerable to Hardcoded Crypto Key CVE-2024-38314

Summary IBM Maximo Application Suite - Monitor Component is vulnerable to Hardcoded Crypto Key CVE-2024-38314. This bulletin identifies the steps to take to address the vulnerabilities. Vulnerability Details CVEID:CVE-2024-38314 DESCRIPTION: IBM Maximo Application Suite - Monitor Component could...