meshtastic-cve-2025-52464-poc

Meshtastic CVE-2025-52464 概念実証 概要 このプロジェクトは、Meshtastic ファームウェア バージョン 2.5.0 から 2.6.10 に影響を与える脆弱性 CVE-2025-52464 を実証する、ソフトウェアのみの概念実証です。 この実装は、脆弱なファームウェアの暗号動作を再現し、重複した鍵や低エントロピーの暗号鍵によって攻撃者が暗号化されたダイレクトメッセージ（DM）を復号できる仕組みを示します。また、ファームウェア バージョン 2.6.11...

CVE-2021-31798

The effective key space used to encrypt the cache in CyberArk Credential Provider prior to 12.1 has low entropy, and under certain conditions a local malicious user can obtain the plaintext of cache files...

RHEL 6 : krb5 (RHSA-2010:0925)

The remote Redhat Enterprise Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2010:0925 advisory. Kerberos is a network authentication system which allows clients and servers to authenticate to each other using symmetric encryption and a...

krb5: krb5 may accept authdata checksums with low-entropy derived keys (MITKRB5-SA-2010-007)

MIT Kerberos 5 aka krb5 1.8.x through 1.8.3 does not reject RC4 key-derivation checksums, which might allow remote authenticated users to forge a 1 AD-SIGNEDPATH or 2 AD-KDC-ISSUED signature, and possibly gain privileges, by leveraging the small key space that results from certain one-byte...