badssl.com

テストサブドメインのリストについては、badssl.com をご覧ください。以下を含みます： self-signed.badssl.com expired.badssl.com mixed.badssl.com rc4.badssl.com hsts.badssl.com サーバー設定 標準のUbuntu VM、badssl.com. および .badssl.com. のDNS AレコードをVMにポイントしています。 テストと開発 1. Dockerをインストールする手順に従ってください。 2. 次のコマンドを実行してbadsslリポジトリをクローンします：git clone...

CRIME-poc

CRIME-poc CRIME攻撃 : Juliano Rizzo氏とThai Duong氏によって発見された圧縮オラクル攻撃 CVE-2012-4929;...

CVE-2014-8275_openssl_g2.5

OpenSSL 1.0.1g 7 Apr 2014 Copyright c 1998-2011 The OpenSSL Project Copyright c 1995-1998 Eric A. Young, Tim J. Hudson All rights reserved. 説明 OpenSSLプロジェクトは、Secure Sockets Layer SSL v2/v3 および Transport Layer Security TLS v1...

RiskySPN

RiskySPNs RiskySPNsは、SPN Service Principal Name に関連付けられたアカウントを検出および悪用することに焦点を当てたPowerShellスクリプトのコレクションです。このモジュールは、ブルーチームが潜在的に危険なSPNを特定するのに役立つ一方、レッドチームがKerberosとActive Directoryを活用して権限を昇格させるのにも役立ちます。 詳細情報：http://www.cyberark.com/blog/service-accounts-weakest-link-chain/ 使用方法 モジュールのインストール...

cve-2026-39031-lansweeper-lsrunase2-lsencrypt2

CVE-2026-39031：Lansweeper lsrunase 2.0 / lsencrypt 2.0 密码恢复 摘要 Lansweeper lsrunase 2.0 和 lsencrypt 2.0 使用基于 RC4 的可逆密码加密方案。RC4 密钥由存储为明文并与加密密码及二进制文件中嵌入的固定密钥材料一起的 8 字符前缀派生而来。 任何拥有由任一工具生成的加密密码字符串的人都可以离线恢复明文密码。恢复过程无需暴力破解：从加密值中分割出明文前缀，重建密钥缓冲区，计算一次 SHA-1 摘要，并解密一个 RC4 密文。 此问题被分配为 CVE-2026-39031。公开的 CVE 和...

CVE-2026-22093 Adversary-in-the-Middle (AitM) attack vulnerability in EVbee Service app

The EVbee Service Android app uses TLS encrypted communication HTTPS, but does not validate the certificate provided by the server. This allows an attacker on the network path between the app and EVbee server to intercept and manipulate the communication between the app and server. The traffic is...

EulerOS Virtualization 2.10.1 : krb5 (EulerOS-SA-2026-1124)

According to the versions of the krb5 packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : A vulnerability in the MIT Kerberos implementation allows GSSAPI-protected messages using RC4-HMAC-MD5 to be spoofed due to weaknesse...

EUVD-2015-2890

Malware in sbrugna...

EUVD-2014-2744

Malware in sbrugna...

EUVD-2016-5739

Malware in sbrugna...

CVE-2020-11615

NVIDIA DGX servers, all BMC firmware versions prior to 3.38.30, contain a vulnerability in the AMI BMC firmware in which it uses a hard-coded RC4 cipher key, which may lead to information disclosure...

CVE-2007-6043

The CryptGenRandom function in Microsoft Windows 2000 generates predictable values, which makes it easier for context-dependent attackers to reduce the effectiveness of cryptographic mechanisms, as demonstrated by attacks on 1 forward security and 2 backward security, related to use of eight...

Security Bulletin: Vulnerability in RC4 stream cipher affects IBM i (CVE-2015-2808)

Summary The RC4 “Bar Mitzvah” Attack for SSL/TLS affects IBM i Vulnerability Details CVEID: CVE-2015-2808 DESCRIPTION: The RC4 algorithm, as used in the TLS protocol and SSL protocol, could allow a remote attacker to obtain sensitive information. An attacker could exploit this vulnerability to...

PT-2023-5882 · Mbed Tls +3 · Mbed Tls +3

Name of the Vulnerable Software and Affected Versions: Mbed TLS versions 2.x before 2.28.5 Mbed TLS versions 3.x before 3.5.0 Description: The issue is related to errors in handling encryption in DTLS connections, specifically when using zero encryption or RC4 cipher. This can allow a remote...

Security Bulletin: Vulnerability in RC4 stream cipher affects IBM BladeCenter Switches (CVE-2015-2808)

Summary The RC4 "Bar Mitzvah" Attack for SSL/TLS affects IBM BladeCenter Switches. Vulnerability Details Summary The RC4 "Bar Mitzvah" Attack for SSL/TLS affects IBM BladeCenter Switches. Vulnerability Details CVE-ID: CVE-2015-2808 Description: The RC4 algorithm, as used in the TLS protocol and S...

Security Bulletin: Vulnerability in RC4 stream cipher affects the IBM FlashSystem models 840 and 900 (CVE-2015-2808)

Summary The RC4 “Bar Mitzvah” Attack for SSL/TLS affects the IBM® FlashSystem™ 840 and IBM FlashSystem 900. Vulnerability Details CVEID: CVE-2015-2808 DESCRIPTION: The RC4 algorithm, as used in the TLS protocol and SSL protocol, could allow a remote attacker to obtain sensitive information. An...

November 17, 2022—KB5021654 (OS Build 14393.5502) Out-of-band

None None...

November 17, 2022—KB5021656 (OS Build 20348.1251) Out-of-band

None None...

Security Bulletin: Vulnerability in RC4 stream cipher affects Operations Analytics Predictive Insights (CVE-2015-2808)

Abstract The RC4 “Bar Mitzvah” Attack for SSL/TLS affects Operations Analytics Predictive Insights which is consuming WebSphere Application Server 8.5.5.1 Content Vulnerability Details CVEID: CVE-2015-2808 DESCRIPTION: The RC4 algorithm, as used in the TLS protocol and SSL protocol, could allow a...

Security Bulletin: Vulnerability in RC4 stream cipher affects DS8000 (CVE-2015-2808)

Summary The RC4 “Bar Mitzvah” Attack for SSL/TLS affects DS8000 Vulnerability Details CVEID: CVE-2015-2808 DESCRIPTION: The RC4 algorithm, as used in the TLS protocol and SSL protocol, could allow a remote attacker to obtain sensitive information. An attacker could exploit this vulnerability to...