hashcat

hashcat hashcat is the world's fastest and most advanced password recovery utility, supporting five unique modes of attack for over 300 highly-optimized hashing algorithms. hashcat currently supports CPUs, GPUs, and other hardware accelerators on Linux, Windows, and macOS, and has facilities to...

JKS-private-key-cracker-hashcat

JKS 私钥破解器 - JKS 棺材上的钉子 Java Key Store JKS 是 Java 在文件中存储一个或多个用于非对称加密的加密私钥和公钥的方式。虽然存在多种密钥库格式，但 Java 和 Android 仍然默认使用 JKS 文件格式。JKS 是 Java 密钥库的文件格式之一，但令人困惑的是，JKS 也被用作通用 Java 密钥库 API 的缩写。本项目包含有关 JKS 文件格式安全机制以及如何破解私钥密码保护的信息。由于 JKS 的非同寻常的设计，所开发的实现可以忽略密钥库密码，直接破解私钥密码。由于它忽略了密钥库密码，此实现可以攻击所有 JKS...

EUVD-2006-6590

Malware in sbrugna...

EUVD-2017-1358

Malware in sbrugna...

EUVD-2020-1477

Malware in sbrugna...

CVE-2025-9785

The CVE concerns PaperCut Print Deploy (NG/MF integration) where using self‑signed or private CA certificates, without proper trust store configuration, can allow man‑in‑the‑middle attacks between clients and the server. The documentation gap on SSL configuration is cited as a contributing factor...

CVE-2025-9785 Misconfigured certificate validation with self-signed certificates for Print Deploy

PaperCut Print Deploy is an optional component that integrates with PaperCut NG/MF which simplifies printer deployment and management. When the component is deployed to an environment, the customer has an option to configure the system to use a self-signed certificate. If the customer does not...

CVE-2020-26234

Opencast before versions 8.9 and 7.9 disables HTTPS hostname verification of its HTTP client used for a large portion of Opencast's HTTP requests. Hostname verification is an important part when using HTTPS to ensure that the presented certificate is valid for the host. Disabling it can allow for...

CVE-2020-26234

Opencast before versions 8.9 and 7.9 disables HTTPS hostname verification of its HTTP client used for a large portion of Opencast's HTTP requests. Hostname verification is an important part when using HTTPS to ensure that the presented certificate is valid for the host. Disabling it can allow for...

CVE-2020-26234

Opencast before versions 8.9 and 7.9 disables HTTPS hostname verification of its HTTP client used for a large portion of Opencast's HTTP requests. Hostname verification is an important part when using HTTPS to ensure that the presented certificate is valid for the host. Disabling it can allow for...

Disabled Hostname Verification in Opencast

Opencast before version 8.9 and 7.9 disables HTTPS hostname verification of its HTTP client used for a large portion of Opencast's HTTP requests. Hostname verification is an important part when using HTTPS to ensure that the presented certificate is valid for the host. Disabling it can allow for...

CVE-2020-26234 Disabled Hostname Verification in OpenCast

Opencast before versions 8.9 and 7.9 disables HTTPS hostname verification of its HTTP client used for a large portion of Opencast's HTTP requests. Hostname verification is an important part when using HTTPS to ensure that the presented certificate is valid for the host. Disabling it can allow for...

Cross site scripting

Oracle, GlassFish Server Open Source Edition 3.0.1 build 22 is vulnerable to Java Key Store Password Disclosure vulnerability, that makes it possible to provide an unauthenticated attacker plain text password of administrative user and grant access to the web-based administration interface...

CVE-2017-1000030

Removed by vendor...

CVE-2017-1000030

CVE-2017-1000030 affects Oracle GlassFish Server Open Source Edition 3.0.1 (build 22). The vulnerability is described as a Java Key Store Password Disclosure that allows an unauthenticated attacker to obtain the plaintext password of an administrative user and gain access to the web-based admin i...

CVE-2006-6607

The Java Key Store JKS for WebSphere Application Server WAS for IBM Tivoli Identity Manager ITIM 4.6 places the JKS password in a -Djavax.net.ssl.trustStorePassword command line argument, which allows local users to obtain the password by listing the process or using other methods...

CVE-2006-6607

The Java Key Store JKS for WebSphere Application Server WAS for IBM Tivoli Identity Manager ITIM 4.6 places the JKS password in a -Djavax.net.ssl.trustStorePassword command line argument, which allows local users to obtain the password by listing the process or using other methods...