Lucene search
+L

12 matches found

Kitploit
Kitploit
•added 2026/10/07 5:15 a.m.•9 views

StealthCrypter

💀StealthCrypter💀 📜 Descripción StealthCrypter es una herramienta de cifrado potente y fácil de usar que te ayuda a proteger tus archivos y directorios sensibles usando cifrado AES-256. Ya sea que necesites resguardar documentos personales o asegurar datos confidenciales, CryptShield garantiza que...

6.4AI score
SaveExploits0References1
Snyk
Snyk
•added 2026/08/17 6:15 p.m.•16 views

Use of Hard-coded Credentials

Overview openssl-encrypt is an A package for secure file encryption and decryption based on modern ciphers using heavy-compute-load chaining of hashing and KDF to generate strong encryption password based on users provided password to ensure secure encryption of files Affected versions of this...

8.7CVSS5.8AI score0.00509EPSS
SaveExploits0References2
NVD
NVD
•added 2026/08/17 11:16 a.m.•12 views

CVE-2026-74892

opensslencrypt versions before 1.4.0 contain a hardcoded default secret key in the standalone telemetry server configuration that is used for API key hashing. Attackers who know this default value can predict or forge API key hashes to compromise telemetry API authentication...

8.7CVSS0.00509EPSS
SaveExploits0References2
OSV
OSV
•added 2026/08/17 11:16 a.m.•10 views

PYSEC-2026-3746

opensslencrypt versions before 1.4.0 contain a hardcoded default secret key in the standalone telemetry server configuration that is used for API key hashing. Attackers who know this default value can predict or forge API key hashes to compromise telemetry API authentication...

8.7CVSS5.9AI score0.00509EPSS
SaveExploits0References2
EUVD
EUVD
•added 2026/08/17 11:04 a.m.•20 views

EUVD-2026-60111

opensslencrypt versions before 1.4.0 contain a hardcoded default secret key in the standalone telemetry server configuration that is used for API key hashing. Attackers who know this default value can predict or forge API key hashes to compromise telemetry API authentication...

8.7CVSS5.4AI score0.00509EPSS
SaveExploits0References2
CVE
CVE
•added 2026/08/17 11:04 a.m.•75 views

CVE-2026-74892

The openssl_encrypt package (versions before 1.4.0) ships a hardcoded default secret key in its standalone telemetry server configuration, used for API key hashing. Attackers who know this key can forge API key hashes to bypass telemetry API authentication. CVSS 3.1 rates this HIGH (7.5) due to r...

8.7CVSS5.8AI score0.00509EPSS
SaveExploits0References2Affected Software1
OSV
OSV
•added 2026/08/17 11:04 a.m.•18 views

CVE-2026-74892 openssl_encrypt before 1.4.0 Hardcoded Secret Key

opensslencrypt versions before 1.4.0 contain a hardcoded default secret key in the standalone telemetry server configuration that is used for API key hashing. Attackers who know this default value can predict or forge API key hashes to compromise telemetry API authentication...

8.7CVSS5.5AI score
SaveExploits0References4
Cvelist
Cvelist
•added 2026/08/17 11:04 a.m.•50 views

CVE-2026-74892 openssl_encrypt before 1.4.0 Hardcoded Secret Key

opensslencrypt versions before 1.4.0 contain a hardcoded default secret key in the standalone telemetry server configuration that is used for API key hashing. Attackers who know this default value can predict or forge API key hashes to compromise telemetry API authentication...

8.7CVSS0.00509EPSS
SaveExploits0References2
attackerkb
attackerkb
•added 2026/08/17 11:04 a.m.•41 views

CVE-2026-74892

opensslencrypt versions before 1.4.0 contain a hardcoded default secret key in the standalone telemetry server configuration that is used for API key hashing. Attackers who know this default value can predict or forge API key hashes to compromise telemetry API authentication...

8.7CVSS5.4AI score0.00509EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/08/17 12:00 a.m.•4 views

CVE-2026-74892: Use of Hard-coded Credentials

opensslencrypt versions before 1.4.0 contain a hardcoded default secret key in the standalone telemetry server configuration that is used for API key hashing. Attackers who know this default value can predict or forge API key hashes to compromise telemetry API authentication...

8.7CVSS5.8AI score0.00509EPSS
SaveExploits0References4
UbuntuCve
UbuntuCve
•added 2026/06/25 10:17 p.m.•16 views

CVE-2026-8720

wcBlake2bHmacFinal and wcBlake2sHmacFinal discard the message when the key length exceeds the block size, producing a MAC that is independent of the input. When the supplied key is longer than the BLAKE2 block size the key-hashing branch reinitialized the running hash state, discarding the...

7.5CVSS6.1AI score0.00158EPSS
SaveExploits0References4
OSV
OSV
•added 2026/06/15 5:24 p.m.•25 views

GHSA-39PV-4J6C-2G6V @angular/common: Weak 32-Bit Cache Key Hashing in `HttpTransferCache` Leading to Cross-Request Data Leakage and State Poisoning

Angular's HttpTransferCache caches HTTP requests made during Server-Side Rendering SSR so that they can be reused during client-side hydration. This avoids repeating the same HTTP requests on the client. The cached responses are stored in TransferState using a cache key generated by hashing reque...

8.8CVSS5.8AI score0.00127EPSS
SaveExploits0References5
Rows per page
Query Builder