Lucene search
+L

9 matches found

Vulnrichment
Vulnrichment
•added 2026/10/06 8:37 a.m.•9 views

CVE-2026-95105 Cloak AES-CTR cipher lacks ciphertext authentication, allowing chosen-plaintext forgery by bit flipping

Reliance on Obfuscation or Encryption of Security-Relevant Inputs without Integrity Checking vulnerability in danielberkompas cloak allows an attacker with write access to stored ciphertext to make it decrypt to a chosen value via bit flipping. Cloak.Ciphers.AES.CTR encrypts with AES-256 in CTR...

8.2CVSS5.9AI score0.00115EPSS
SaveExploits0References3
EUVD
EUVD
•added 2026/10/06 8:37 a.m.•8 views

EUVD-2026-93090

Reliance on Obfuscation or Encryption of Security-Relevant Inputs without Integrity Checking vulnerability in danielberkompas cloak allows an attacker with write access to stored ciphertext to make it decrypt to a chosen value via bit flipping. Cloak.Ciphers.AES.CTR encrypts with AES-256 in CTR...

8.2CVSS5.9AI score0.00115EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/10/06 12:00 a.m.•7 views

PT-2026-106490

Reliance on Obfuscation or Encryption of Security-Relevant Inputs without Integrity Checking vulnerability in danielberkompas cloak allows an attacker with write access to stored ciphertext to make it decrypt to a chosen value via bit flipping. Cloak.Ciphers.AES.CTR encrypts with AES-256 in CTR...

8.2CVSS5.9AI score0.00115EPSS
SaveExploits0References4
Mend
Mend
•added 2025/05/29 6:00 p.m.•4 views

CVE-2025-5323

A vulnerability, which was classified as problematic, has been found in fossasia open-event-server 1.19.1. This issue affects the function sendemailchangeuseremail of the file /fossasia/open-event-server/blob/development/app/api/helpers/mail.py of the component Mail Verification Handler. The...

6.3CVSS0.00135EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/05/29 12:00 a.m.•5 views

CVE-2025-5323: Reliance on Obfuscation or Encryption of Security-Relevant Inputs without Integrity Checking

A vulnerability, which was classified as problematic, has been found in fossasia open-event-server 1.19.1. This issue affects the function sendemailchangeuseremail of the file /fossasia/open-event-server/blob/development/app/api/helpers/mail.py of the component Mail Verification Handler. The...

6.3CVSS4.6AI score0.00135EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/12/06 12:00 a.m.•3 views

CVE-2024-10772: Reliance on Obfuscation or Encryption of Security-Relevant Inputs without Integrity Checking

Since the firmware update is not validated, an attacker can install modified firmware on the device. This has a high impact on the availabilty, integrity and confidentiality up to the complete compromise of the device...

8.8CVSS5.6AI score0.00344EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/06/17 12:00 a.m.•4 views

CVE-2024-36279: Reliance on Obfuscation or Encryption of Security-Relevant Inputs without Integrity Checking

Reliance on obfuscation or encryption of security-relevant inputs without integrity checking issue exists in "FreeFrom - the nostr client" App versions prior to 1.3.5 for Android and iOS. If this vulnerability is exploited, the content of direct messages DMs between users may be manipulated by a...

5.3CVSS5.9AI score0.00144EPSS
SaveExploits0References1
CNVD
CNVD
•added 2021/12/29 12:00 a.m.•56 views

VideoOffice Arbitrary File Download and Execution Vulnerability

VideoOffice is Internet video conferencing. VideoOffice suffers from an arbitrary file download and execution vulnerability that stems from a lack of support for integrity checking. No detailed vulnerability details are available at this time...

9.8CVSS9.7AI score0.00689EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/09/27 12:00 a.m.•3 views

CVE-2021-3818: Reliance on Cookies without Validation and Integrity Checking

grav is vulnerable to Reliance on Cookies without Validation and Integrity Checking...

6.3CVSS5.7AI score0.02452EPSS
SaveExploits1References3
Rows per page
Query Builder