685 matches found
WebLogic-Shiro-shell
Compartir técnica de deserialización de Java Los aspectos cubiertos en esta presentación son los siguientes: 1. Conceptos básicos de serialización y deserialización de Java 2. ¿Por qué se generan vulnerabilidades durante la deserialización? 3. Reflexión de Java 4. ysoserial...
nfc-ic-keys-dict
nfc-ic-keys-dict 2021-05-31 nfcPro.exe early version download http://www.nsccn.com/web/soft/win/20210531/nfcPro.exe keys for ic: 1D14130D1A0B/000000000000 How to detect the type of an iC card: Google Play Store = MIFARE Classic Tool = Tools = Show Tag Info root@kitploit: UID: xxxxx 4 byte RF...
ecologyExp.jar
ecologyExp.jar Lectura del archivo de configuración de la base de datos de Weaver OA java -jar ecologyExp.jar http://127.0.0.1 Código fuente package com.test; import org.apache.http.HttpEntity; import org.apache.http.client.methods.CloseableHttpResponse; import...
publiccms_decrypt
publiccmsdecrypt https://github.com/sanluan/PublicCMS publiccms-core-V4.0.202004.a.jar!/com/publiccms/common/constants/CommonConstants.class publiccms-common-V4.0.202004.a.jar!/com/publiccms/common/tools/VerificationUtils.class com.publiccms.common.tools.VerificationUtils...
CVE-2016-4437
Herramienta de vulnerabilidad shiro-1.2.4 Descifra el valor de rememberMe y exporta el archivo class correspondiente Modo de uso xk-mt-rememberMe解码.py Explicación de ejecución: tras ejecutarlo, primero ingresa la clave o presiona Enter para usar la clave predeterminada ‘kPH+bIxk5D2deZiIxcaaaA==’,...
CVE-2016-4437
CVE-2016-4437 POC en Python para explotar la vulnerabilidad de deserialización CVE-2016-4437 de Apache Shiro debido a una clave de cifrado codificada Ejemplo de uso: ./CVE-2016-4437.py -c nslookup -u https://example.com/ -i ecsepnkqtxlishpynfdge01543e4vmx7v.oast.fun Consulte los comentarios y el...
CVE-2026-86555
The ZTE SmartLife application has a hardcoded key. The key used to decrypt account server information is stored in plaintext in the code. Once the key is obtained, the server information can be decrypted, thus exposing it...
CVE-2026-86555
The ZTE SmartLife mobile application contains a hardcoded key used to decrypt account server information. The key is stored in plaintext within the application code, so an attacker with access to the binary can extract it and decrypt the protected server configuration data. The CVSS v3.1 score is...
EUVD-2026-83717
The ZTE SmartLife application has a hardcoded key. The key used to decrypt account server information is stored in plaintext in the code. Once the key is obtained, the server information can be decrypted, thus exposing it...
CVE-2026-86555 Hardcoded Key Vulnerability in ZTE SmartLife APP
The ZTE SmartLife application has a hardcoded key. The key used to decrypt account server information is stored in plaintext in the code. Once the key is obtained, the server information can be decrypted, thus exposing it...
CVE-2020-9289
Decrypt FortiManager configuration secrets CVE-2020-9289 CVE-2020-9289 and CVE-2019-6693 are related to the same default and hardcoded key. The only differences on the decryption routine implemented in FortiManager/FortiAnalyzer are: The IV handling all the 16 bytes are provided before the...
EyesOfNetwork - Hardcoded API Key
An issue was discovered in EyesOfNetwork 5.3. The installation uses the same API key hardcoded as EONAPIKEY in include/apifunctions.php for API version 2.4.2 by default for all installations, hence allowing an attacker to calculate/guess the admin access token. id: CVE-2020-8657 info: name:...
SSCMS_Decrypt
sscms（siteserver cms） database decrypt Introducción: SSCMS se basa en .NET Core y permite poner en marcha una plataforma web completa, de alto rendimiento, a gran escala y fácil de mantener, con el menor coste, la menor inversión de personal y en el menor tiempo posible. Dirección del proyecto:...
redash-reset
redash-reset Esto utilizará una clave REDASHSECRETKEY predeterminada de c292a0a3aa32397cdb050e233733900f, lo que permite restablecer la contraseña del ID de usuario, pero necesitará conocer la dirección de correo electrónico asociada a él. Información...
CVE-2026-54767
WeGIA , a web manager for charitable institutions, is affected by a critical (CVSS 9.1) vulnerability prior to version 3.8.5 . The file deletar_socios.php exposes an unauthenticated GET endpoint where the chave parameter is validated only against a hardcoded chave_correta value embedded in the pu...
CVE-2026-54767 WeGIA: Hardcoded Secret Key Backdoor — Mass Data Destruction via deletar_socios.php
WeGIA is a web manager for charitable institutions. Prior to 3.8.5, web/html/socio/sistema/controller/deletarsocios.php exposes an unauthenticated GET endpoint whose chave parameter is checked only against a hardcoded chavecorreta value embedded in the public source repository. A remote attacker...
CVE-2026-54767 WeGIA: Hardcoded Secret Key Backdoor — Mass Data Destruction via deletar_socios.php
WeGIA is a web manager for charitable institutions. Prior to 3.8.5, web/html/socio/sistema/controller/deletarsocios.php exposes an unauthenticated GET endpoint whose chave parameter is checked only against a hardcoded chavecorreta value embedded in the public source repository. A remote attacker...
CVE-2025-56801
CVE-2025-56801 Vulnerabilidad de generación de IV AES-CFB en la aplicación de escritorio de Reolink 1. Resumen Nombre : Aplicación de escritorio de Reolink Versión : 8.18.12 Vendedor : Reolink CWE : CWE-1204: Generación de vector de inicialización IV débil, CWE-321: Uso de clave criptográfica...