9 matches found
StealthCrypter
πStealthCrypterπ π μ€λͺ StealthCrypterλ κ°λ ₯νκ³ μ¬μ©νκΈ° μ¬μ΄ μνΈν λꡬλ‘, AES-256 μνΈν λ₯Ό μ¬μ©νμ¬ λ―Όκ°ν νμΌκ³Ό λλ ν 리λ₯Ό 보νΈν©λλ€. κ°μΈ λ¬Έμλ₯Ό μμ νκ² λ³΄κ΄νκ±°λ κΈ°λ° λ°μ΄ν°λ₯Ό 보νΈν΄μΌ νλ κ²½μ°, CryptShieldλ νμΌμ΄ λΉκ³΅κ°λ‘ μ μ§λκ³ λ³μ‘°λμ§ μλλ‘ λ³΄μ₯ν©λλ€. π κΈ°λ₯ β AES-256 μνΈν β μ΅λ 보μμ μν μ κ³ νμ€ μνΈν. β λνν CLI β λͺ λ Ήμ€ μΈμκ° νμ μμ; ν둬ννΈλ₯Ό λ°λΌκ°κΈ°λ§ νλ©΄ λ©λλ€. β νμΌ λλ λλ ν 리 μνΈν λ° λ³΅νΈν β μ¬λ¬...
CVE-2026-74892
opensslencrypt versions before 1.4.0 contain a hardcoded default secret key in the standalone telemetry server configuration that is used for API key hashing. Attackers who know this default value can predict or forge API key hashes to compromise telemetry API authentication...
CVE-2026-74892
The openssl_encrypt package (versions before 1.4.0) ships a hardcoded default secret key in its standalone telemetry server configuration, used for API key hashing. Attackers who know this key can forge API key hashes to bypass telemetry API authentication. CVSS 3.1 rates this HIGH (7.5) due to r...
EUVD-2026-60111
opensslencrypt versions before 1.4.0 contain a hardcoded default secret key in the standalone telemetry server configuration that is used for API key hashing. Attackers who know this default value can predict or forge API key hashes to compromise telemetry API authentication...
CVE-2026-74892 openssl_encrypt before 1.4.0 Hardcoded Secret Key
opensslencrypt versions before 1.4.0 contain a hardcoded default secret key in the standalone telemetry server configuration that is used for API key hashing. Attackers who know this default value can predict or forge API key hashes to compromise telemetry API authentication...
CVE-2026-74892 openssl_encrypt before 1.4.0 Hardcoded Secret Key
opensslencrypt versions before 1.4.0 contain a hardcoded default secret key in the standalone telemetry server configuration that is used for API key hashing. Attackers who know this default value can predict or forge API key hashes to compromise telemetry API authentication...
CVE-2026-74892
opensslencrypt versions before 1.4.0 contain a hardcoded default secret key in the standalone telemetry server configuration that is used for API key hashing. Attackers who know this default value can predict or forge API key hashes to compromise telemetry API authentication...
CVE-2026-8720
wcBlake2bHmacFinal and wcBlake2sHmacFinal discard the message when the key length exceeds the block size, producing a MAC that is independent of the input. When the supplied key is longer than the BLAKE2 block size the key-hashing branch reinitialized the running hash state, discarding the...
GHSA-39PV-4J6C-2G6V @angular/common: Weak 32-Bit Cache Key Hashing in `HttpTransferCache` Leading to Cross-Request Data Leakage and State Poisoning
Angular's HttpTransferCache caches HTTP requests made during Server-Side Rendering SSR so that they can be reused during client-side hydration. This avoids repeating the same HTTP requests on the client. The cached responses are stored in TransferState using a cache key generated by hashing reque...