CVE-2020-9289

Decrypt FortiManager configuration secrets CVE-2020-9289 CVE-2020-9289 and CVE-2019-6693 are related to the same default and hardcoded key. The only differences on the decryption routine implemented in FortiManager/FortiAnalyzer are: The IV handling all the 16 bytes are provided before the...

SSCMS_Decrypt

sscms siteserver cms database decrypt Introduction: SSCMS is based on .NET Core, enabling you to set up a fully functional, high-performance, large-scale, and easy-to-maintain website platform in the shortest time, at the lowest cost, and with the least manpower. Project address:...

publiccms_decrypt

publiccmsdecrypt https://github.com/sanluan/PublicCMS publiccms-core-V4.0.202004.a.jar!/com/publiccms/common/constants/CommonConstants.class publiccms-common-V4.0.202004.a.jar!/com/publiccms/common/tools/VerificationUtils.class com.publiccms.common.tools.VerificationUtils...

redash-reset

redash-reset This will use a default REDASHSECRETKEY key of c292a0a3aa32397cdb050e233733900f this allows you to reset the password of the user ID but you will need to know the email address assocaited with it. Info https://github.com/getredash/redash/security/advisories/GHSA-g8xr-f424-h2rv Setup...

CVE-2016-4437

CVE-2016-4437 Python POC to Exploit CVE-2016-4437 Apache Shiro Deserialization Vulnerability Due to Hardcoded Encryption Key Example Usage: ./CVE-2016-4437.py -c nslookup -u https://example.com/ -i ecsepnkqtxlishpynfdge01543e4vmx7v.oast.fun See comments and the code for more information...

ecologyExp.jar

ecologyExp.jar Weaver OA database configuration file reader java -jar ecologyExp.jar http://127.0.0.1 Source Code package com.test; import org.apache.http.HttpEntity; import org.apache.http.client.methods.CloseableHttpResponse; import org.apache.http.client.methods.HttpGet; import...

WebLogic-Shiro-shell

Java Deserialization Technology Sharing This sharing covers the following points: 1. Java Serialization and Deserialization Basics 2. Why do vulnerabilities occur during deserialization? 3. Java Reflection 4. ysoserial CommonsCollections2, CommonsCollections5 5. Java ClassLoader: Several methods...

nfc-ic-keys-dict

nfc-ic-keys-dict 2021-05-31 nfcPro.exe early version download http://www.nsccn.com/web/soft/win/20210531/nfcPro.exe keys for ic: 1D14130D1A0B/000000000000 How to detect the type of an iC card: Google Play Store = MIFARE Classic Tool = Tools = Show Tag Info UID: xxxxx 4 byte RF technology: ISO/IEC...

CVE-2016-4437

shiro-1.2.4 Vulnerability Tool Decrypt rememberMe value and export corresponding class file Usage xk-mt-rememberMe解码.py Instructions: After running, first enter the key or press Enter to use the default key 'kPH+bIxk5D2deZiIxcaaaA==', then enter the rememberMe value from the request packet. After...

CVE-2026-28326-check

SolarWinds Access Rights Manager Unauthenticated RCE — Vulnerability Detection Script An unauthenticated patch-state check for CVE-2026-28326, the unauthenticated remote code execution vulnerability in SolarWinds Access Rights Manager ARM, fixed in ARM 2026.2.1 on 2026-09-17. CWE-798, CVSS 8.8 Hi...

CVE-2026-79551-Tenda

CVE-2026-79551 Tenda Hardcoded TLS Private Key CNVD ID: CNVD-2026-25884 Vendor: Tenda Technology Co., Ltd. Product: NVR4H network video recorder hardware version CH3V2.1 Firmware: V27.5.58.6 Class: CWE-321 — Use of Hard-coded Cryptographic Key Overview The NVR4H firmware stores an ECDSA key pair ...

CVE-2025-56801

CVE-2025-56801 AES-CFB IV Generation Vulnerability in Reolink Desktop Application 1. Overview Name : Reolink Desktop Application Version : 8.18.12 Vendor : Reolink CWE : CWE-1204: Generation of Weak Initialization Vector IV, CWE-321: Use of Hard-coded Cryptographic Key CVSS : 5.1 MEDIUM Vector...

CVE-2026-102812

The TP-Link RE305 V3 and Archer C7 V5 routers are affected by a hard-coded cryptographic key vulnerability in the firmware configuration-management component. Specifically, a fixed AES-128 key and initialization vector (IV) are embedded in the user-configuration backup mechanism. An attacker who ...

CVE-2026-102812 Hardcoded AES-128 Key and Fixed IV in Configuration Backup Encryption in TP-Link RE305 and Archer C7

A hard-coded cryptographic key vulnerability exists in the user-configuration backup mechanism of TP-Link RE305 V3 and Archer C7 V5. A fixed AES-128 key and initialization vector are embedded in the firmware configuration-management component. An attacker who obtains an affected configuration...

CVE-2026-101034

An attacker who obtained the hardcoded key could decrypt domain/service account passwords, task run-as credentials, and sysprep passwords stored in or transmitted by GSS Deployment Server installation...

CVE-2026-101034

The Symantec GSS 3.3 RU11 Deployment Server is affected by a vulnerability involving a hardcoded key . An attacker who obtains this key can decrypt domain/service account passwords , task run-as credentials , and sysprep passwords that are stored in or transmitted by the GSS Deployment Server ins...

CVE-2026-101034 Security Advisory for offline recovery of Symantec GSS 3.3 RU11 stored domain credentials

An attacker who obtained the hardcoded key could decrypt domain/service account passwords, task run-as credentials, and sysprep passwords stored in or transmitted by GSS Deployment Server installation...

EUVD-2026-110619

An attacker who obtained the hardcoded key could decrypt domain/service account passwords, task run-as credentials, and sysprep passwords stored in or transmitted by GSS Deployment Server installation...

PT-2026-125884

An attacker who obtained the hardcoded key could decrypt domain/service account passwords, task run-as credentials, and sysprep passwords stored in or transmitted by GSS Deployment Server installation...

CVE-2026-112345 TTLock Android App < 9.8.260718 Hardcoded BLE Pairing Key Exposure

TTLock Android application before v9.8.260718 and associated smart-lock firmware contain a hardcoded static AES key vulnerability that allows an attacker within Bluetooth range to decrypt the per-pairing session key transmitted during BLE pairing. Attackers can observe the pairing exchange, recov...