CVE-2014-8275_openssl_g2.5

OpenSSL 1.0.1g 7 Apr 2014 Copyright c 1998-2011 The OpenSSL Project Copyright c 1995-1998 Eric A. Young, Tim J. Hudson All rights reserved. DESCRIPTION Le projet OpenSSL est un effort collaboratif visant à développer une boîte à outils robuste, de qualité commerciale, complète et open source...

cart

CaRT сжатый транспорт на базе RC4 Формат файла CaRT используется для хранения/передачи вредоносного ПО и связанных с ним метаданных. Он обезвреживает вредоносное ПО, чтобы его нельзя было запустить, и шифрует его, чтобы антивирусное ПО не могло пометить файл CaRT как вредоносное ПО. Преимущества...

CVE-2014-0224

OPENSSL CVE-2014-0224 Démonstration d'exploit MITM. Auteur : @bluerust Blog : http://hi.baidu.com/bluerust/item/bf2ab031bbadcf09cfb9fe41 Ver : 1.1 Desc : Uniquement pour openssl 1.0.1, uniquement testé pour le chiffrement RC4-SHA. a. serveur openssl sserver -debug -accept 443 -cert server.crt...

EmbedPayloadInPng

EmbedPayloadInPng Intégrer une charge utile dans un fichier PNG en la répartissant sur plusieurs sections IDAT. Chaque section est chiffrée individuellement avec sa propre clé de 16 octets à l'aide de l'algorithme de chiffrement RC4. Liens rapides Accueil Maldev Academy Programme Maldev Academy...

cve-2026-39031-lansweeper-lsrunase2-lsencrypt2

CVE-2026-39031 : Récupération de mot de passe Lansweeper lsrunase 2.0 / lsencrypt 2.0 Résumé Les outils lsrunase 2.0 et lsencrypt 2.0 de Lansweeper utilisent un schéma de chiffrement de mot de passe réversible basé sur RC4. La clé RC4 est dérivée d'un préfixe de 8 caractères stocké en clair avec ...

CVE-2022-33679

CVE-2022-33679 مبني على https://googleprojectzero.blogspot.com/2022/10/rc4-is-still-considered-harmful.html الاستخدام root@kitploit: usage: CVE-2022-33079.py -h -ts -debug -dc-ip ip address target serverName مثال...

MicrocodeDecryptor

Отказ от ответственности Вся информация предоставлена исключительно в образовательных целях. Следуйте этим инструкциям на свой страх и риск. Ни авторы, ни их работодатель не несут ответственности за любой прямой или косвенный ущерб или убытки, возникшие в результате действий или бездействия любог...

No Privileges, No Lockout, No Trace: Kerberoasting with SPN Misconfigurations

No Privileges, No Lockout, No Trace: Kerberoasting with SPN Misconfigurations By Maulik Maheta and Henry Bernabe · August 27, 2026 Executive Summary Active Directory misconfigurations are vulnerabilities that attackers can exploit before defenders notice them. This blog exposes a stealthier...

Malicious code in tset_racie (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 73385958282f9bf88c54065467759596364447d221f34f4c349adb1a849c4871 [email protected] ships a single 45KB obfuscator.io-style payload as its main entry index.js. The file consists of a 551-entry RC4-encrypted string...

Astra Linux – Vulnerability in Samba

Windows Kerberos RC4-HMAC Elevation of Privilege Vulnerability...

Malicious code in rc4-secure (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b7bcd1dcd28ea36c95e97448601f2414f34d53eabfc5452ec2471a316ebed97b The package presents itself as an RC4 encryption library but contains a hidden dropper reachable from its public API. RC4Cipher.encrypt invokes...

MINI-RC4Q-QPG8-7H5J

Bulletin has no description...

Malicious code in webautomation_js (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 854e679284d7396f5ac4f7248839fa3704a2c72bcec08c100267b5980cd2a0d5 index.js is packed with an obfuscator.io RC4 string-array plus self-defending debugger-check wrapper. The only exported function appends a...

Malicious code in @wololasod/tiny-id (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b3ca8617b237bb3d8fd7d14aa18554118397e7b7faaea2e87cdd8433fef7a8f The package advertises itself as a tiny ID generator but its main entry dist/index.cjs contains an obfuscator.io + RC4 string-array VM that, on...

CVE-2026-22093

The EVbee Service Android app uses TLS encrypted communication HTTPS, but does not validate the certificate provided by the server. This allows an attacker on the network path between the app and EVbee server to intercept and manipulate the communication between the app and server. The traffic is...

CVE-2026-22093 Adversary-in-the-Middle (AitM) attack vulnerability in EVbee Service app

The EVbee Service Android app uses TLS encrypted communication HTTPS, but does not validate the certificate provided by the server. This allows an attacker on the network path between the app and EVbee server to intercept and manipulate the communication between the app and server. The traffic is...

CVE-2026-22093

CVE-2026-22093 affects EVbee Service app (v1.4.101.00). The issue arises because the Android app performs TLS/HTTPS communication but does not validate the server certificate, enabling a man‑in‑the‑middle attacker on the network path to intercept and manipulate traffic. Additionally, the app is d...

CVE-2026-22093 Adversary-in-the-Middle (AitM) attack vulnerability in EVbee Service app

The EVbee Service Android app uses TLS encrypted communication HTTPS, but does not validate the certificate provided by the server. This allows an attacker on the network path between the app and EVbee server to intercept and manipulate the communication between the app and server. The traffic is...

FTP Fetch, Windows x64 Command Shell, Bind TCP Stager (RC4 Stage Encryption, Metasm)

Fetch and execute an x64 payload from an FTP server. Spawn a piped command shell Windows x64 staged. Connect back to the attacker Module Options...

FTP Fetch, Reverse TCP Stager (RC4 Stage Encryption, Metasm)

Fetch and execute an x86 payload from an FTP server. Connect back to the attacker Module Options This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework module MetasploitModule include Msf::Payload::Adapter::Fetch::FTP includ...