RAU_crypto

RAUcrypto 针对 Telerik UI for ASP.NET AJAX 的合并利用。 文件上传漏洞 CVE-2017-11317 和 CVE-2017-11357 - 将自动上传文件 .NET 反序列化漏洞 CVE-2019-18935 现在支持测试目标能否从攻击者托管的 SMB 服务中拉取远程载荷。使用 Burp Collaborator 和/或 Responder 来协助测试必要前提条件是否满足。 为了成功利用，通常需要一个包含硬编码密钥的版本，或者需要知道密钥，例如通过泄露 web.config 的内容。该利用工具还支持对用于...

CVE_2019_18935

RAUcrypto 针对 Telerik UI for ASP.NET AJAX 的组合利用工具。 CVE-2017-11317 和 CVE-2017-11357 的文件上传 - 自动上传文件 CVE-2019-18935 的 .NET 反序列化 利用通常需要包含硬编码密钥的版本，或者需要知道密钥（例如能获取到 web.config 的内容）。该工具也支持直接解密和加密用于 Telerik.Web.UI.WebResource.axd?type=rau 的 rauPostData 数据。 要求 python = 3.6 并安装 pycryptodome...

CVE-2025-15545

CVE-2025-15545 Información Fabricante: TP-Link Sitio web del fabricante: TP-Link Modelo: Archer RE605X Versión de hardware: RE605X v3.0 Versión de firmware: RE605XEUV31.1.5 Build 20240905 Dirección de descarga del firmware: TP-Link Una cadena de vulnerabilidades — incluyendo el uso de claves...

CVE-2024-25277

CVE-2024-25277 在 MW45APT02.0002 上发现 资源和 PoC 此仓库收录了在分析及发现 CVE-2024-25277 过程中收集的脚本和 PoC。 更多关于该发现的信息请查阅：https://blog.maentechie.com/bypass-rate-limiting-in-tcl-mw45ad-to-achieve-privileges-escalation 发现的问题摘要 速率限制绕过 硬编码令牌和密钥 弱加密 权限提升...

EUVD-2025-210675

In affected TP-Link Aginet devices, use of hardcoded cryptographic keys embedded in the firmware to protect sensitive configuration data may allow an attacker who has access to device storage to recover the keys and decrypt stored data. Successful exploitation may allow access to decrypted...

CVE-2025-30239 Sensitive Data Exposure due to Hardcoded Cryptographic Keys in Multiple TP-Link Aginet Devices

In affected TP-Link Aginet devices, use of hardcoded cryptographic keys embedded in the firmware to protect sensitive configuration data may allow an attacker who has access to device storage to recover the keys and decrypt stored data. Successful exploitation may allow access to decrypted...

CVE-2025-30239

CVE-2025-30239 affects TP-Link Aginet devices where hardcoded cryptographic keys in firmware can be recovered from device storage, enabling decryption of stored data and access to sensitive configuration information (including credentials). Exploitation details and fixes are not provided in the a...

PT-2026-69993

Name of the Vulnerable Software and Affected Versions TP-Link Aginet affected versions not specified Description Certain devices use hardcoded cryptographic keys embedded in the firmware to protect sensitive configuration data. An attacker with access to the device storage can recover these keys ...

CVE-2025-15627 Hardcoded Cryptographic Keys in TP-Link Omada Adoption Protocol Authentication

A cryptographic weakness exists in the Omada adoption protocol. The protocol relies on hard-coded cryptographic keys to establish trust and protect authentication exchanges between controllers and managed devices during device adoption. An attacker may be able to impersonate trusted controllers o...

MAL-2026-10610 Malicious code in proxy-check-ii (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a736498f3f882a4ba79f793dc893883db41d8cb5a74ecfe0c66dace9cc477a20 The wheel is advertised as 'proxy-check-ii' with a one-line summary of 'packaged command for running the bundled qsshd executable' and no README,...

CVE-2026-9220

Setracker2 Android Companion App com.tgelec.setracker versions 3.1.5 and prior encrypts requests between the watch and its backend with static hardcoded AES keys and initialization vectors. This allows an attacker to decrypt Setracker2 watch traffic...

CVE-2026-9220 Setracker2 Children's Smartwatch Ecosystem Use of hard-coded cryptographic key

Setracker2 Android Companion App com.tgelec.setracker versions 3.1.5 and prior encrypts requests between the watch and its backend with static hardcoded AES keys and initialization vectors. This allows an attacker to decrypt Setracker2 watch traffic...

Malicious code in @briskforge/envcheck (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 09dba573f5d6cb00b09562870f2148b3e539786f5d801f2a263338301d759313 The package advertises itself as a tiny environment-variable validator but ships lib/preflight.js, a heavily obfuscated obfuscator.io string-array...

GL.iNet多款产品 加密问题漏洞

GL.iNet MT3000 and other products are developed by GL.iNet Corporation. The GL.iNet MT3000 is a portable router that uses the Wi-Fi 6 protocol. The GL.iNet AX1800 is a wireless router. The GL.iNet A1300 is a Wi-Fi 5 travel router. Several of GL.iNet’s products have encryption vulnerabilities, whi...

CVE-2026-11347

The linqi application contains hardcoded cryptographic keys. Additionally, the application uses a weak algorithm with a limited ASCII charset to dynamically generate Initialization Vectors IVs for AES/CBC encryption, making known-plaintext attacks feasible. An attacker with local access can...

CVE-2026-8876

Version 3.0.7 of the Securly Chrome Extension contains hardcoded, plaintext AES passphrases in securly.min.js. These keys decrypt crisis alert keyword data and intervention site data...

CVE-2026-42518

This vulnerability exists in e-Sushrut due to disclosure of sensitive information and hardcoded AES encryption keys in client-side JavaScript. An unauthenticated remote attacker could exploit this vulnerability by accessing the client-side code to extract sensitive information and cryptographic...

CVE-2026-11347

The linqi application contains hardcoded cryptographic keys. Additionally, the application uses a weak algorithm with a limited ASCII charset to dynamically generate Initialization Vectors IVs for AES/CBC encryption, making known-plaintext attacks feasible. An attacker with local access can...

CVE-2026-11347

The linqi application contains hardcoded cryptographic keys. Additionally, the application uses a weak algorithm with a limited ASCII charset to dynamically generate Initialization Vectors IVs for AES/CBC encryption, making known-plaintext attacks feasible. An attacker with local access can...

CVE-2026-11347 Hardcoded Cryptographic Keys and Weak IV Generation in linqi

The linqi application contains hardcoded cryptographic keys. Additionally, the application uses a weak algorithm with a limited ASCII charset to dynamically generate Initialization Vectors IVs for AES/CBC encryption, making known-plaintext attacks feasible. An attacker with local access can...