CVE-2014-8275_openssl_g2.5

OpenSSL 1.0.1g 7 Apr 2014 Copyright c 1998-2011 The OpenSSL Project Copyright c 1995-1998 Eric A. Young, Tim J. Hudson All rights reserved. DESCRIPTION The OpenSSL Project is a collaborative effort to develop a robust, commercial-grade, fully featured, and Open Source toolkit implementing the...

cart

CaRT نقل مضغوط عبر RC4 تُستخدم صيغة ملف CaRT لتخزين/نقل البرمجيات الخبيثة والبيانات الوصفية المرتبطة بها. وهي تعطّل البرمجية الخبيثة بحيث لا يمكن تنفيذها وتشفرها بحيث لا يمكن لبرنامج مكافحة الفيروسات تصنيف ملف CaRT كبرمجية خبيثة. المزايا سريع: CaRT بنفس سرعة ضغط ملف بث متدفق: يستخدم CaRT zlib وRC...

CVE-2014-0224

OPENSSL CVE-2014-0224 MITM exploit demo. Author : @bluerust Blog : http://hi.baidu.com/bluerust/item/bf2ab031bbadcf09cfb9fe41 Ver : 1.1 Desc : Only for openssl 1.0.1, only tested for cipher RC4-SHA. a. server openssl sserver -debug -accept 443 -cert server.crt -certform PEM -key server.key -ciphe...

EmbedPayloadInPng

EmbedPayloadInPng قم بتضمين حمولة داخل ملف PNG عن طريق تقسيم الحمولة عبر أقسام IDAT متعددة. يتم تشفير كل قسم بشكل فردي باستخدام مفتاح خاص به بطول 16 بايت مع خوارزمية تشفير RC4. روابط سريعة الصفحة الرئيسية لـ Maldev Academy المنهج الدراسي لـ Maldev Academy أسعار Maldev Academy التنفيذ يتكون هذا...

cve-2026-39031-lansweeper-lsrunase2-lsencrypt2

CVE-2026-39031: Lansweeper lsrunase 2.0 / lsencrypt 2.0 Password Recovery Summary Lansweeper lsrunase 2.0 and lsencrypt 2.0 use a reversible password encryption scheme based on RC4. The RC4 key is derived from an 8-character prefix that is stored in cleartext with the encrypted password and fixed...

CVE-2022-33679

CVE-2022-33679 مبني على https://googleprojectzero.blogspot.com/2022/10/rc4-is-still-considered-harmful.html الاستخدام root@kitploit: usage: CVE-2022-33079.py -h -ts -debug -dc-ip ip address target serverName مثال...

MicrocodeDecryptor

إخلاء مسؤولية جميع المعلومات مقدمة لأغراض تعليمية فقط. اتبع هذه التعليمات على مسؤوليتك الخاصة. لا يتحمل المؤلفون ولا جهة عملهم أي مسؤولية عن أي ضرر أو خسارة مباشرة أو تبعية تنشأ عن أي شخص أو منظمة تتصرف أو تمتنع عن التصرف بناءً على المعلومات الواردة في هذه الصفحة. Description في بداية عام 2020،...

No Privileges, No Lockout, No Trace: Kerberoasting with SPN Misconfigurations

No Privileges, No Lockout, No Trace: Kerberoasting with SPN Misconfigurations By Maulik Maheta and Henry Bernabe · August 27, 2026 Executive Summary Active Directory misconfigurations are vulnerabilities that attackers can exploit before defenders notice them. This blog exposes a stealthier...

Malicious code in tset_racie (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 73385958282f9bf88c54065467759596364447d221f34f4c349adb1a849c4871 [email protected] ships a single 45KB obfuscator.io-style payload as its main entry index.js. The file consists of a 551-entry RC4-encrypted string...

Astra Linux – Vulnerability in Samba

Windows Kerberos RC4-HMAC Elevation of Privilege Vulnerability...

Malicious code in rc4-secure (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b7bcd1dcd28ea36c95e97448601f2414f34d53eabfc5452ec2471a316ebed97b The package presents itself as an RC4 encryption library but contains a hidden dropper reachable from its public API. RC4Cipher.encrypt invokes...

MINI-RC4Q-QPG8-7H5J

Bulletin has no description...

Malicious code in webautomation_js (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 854e679284d7396f5ac4f7248839fa3704a2c72bcec08c100267b5980cd2a0d5 index.js is packed with an obfuscator.io RC4 string-array plus self-defending debugger-check wrapper. The only exported function appends a...

Malicious code in @wololasod/tiny-id (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b3ca8617b237bb3d8fd7d14aa18554118397e7b7faaea2e87cdd8433fef7a8f The package advertises itself as a tiny ID generator but its main entry dist/index.cjs contains an obfuscator.io + RC4 string-array VM that, on...

CVE-2026-22093

The EVbee Service Android app uses TLS encrypted communication HTTPS, but does not validate the certificate provided by the server. This allows an attacker on the network path between the app and EVbee server to intercept and manipulate the communication between the app and server. The traffic is...

CVE-2026-22093 Adversary-in-the-Middle (AitM) attack vulnerability in EVbee Service app

The EVbee Service Android app uses TLS encrypted communication HTTPS, but does not validate the certificate provided by the server. This allows an attacker on the network path between the app and EVbee server to intercept and manipulate the communication between the app and server. The traffic is...

CVE-2026-22093

CVE-2026-22093 affects EVbee Service app (v1.4.101.00). The issue arises because the Android app performs TLS/HTTPS communication but does not validate the server certificate, enabling a man‑in‑the‑middle attacker on the network path to intercept and manipulate traffic. Additionally, the app is d...

CVE-2026-22093 Adversary-in-the-Middle (AitM) attack vulnerability in EVbee Service app

The EVbee Service Android app uses TLS encrypted communication HTTPS, but does not validate the certificate provided by the server. This allows an attacker on the network path between the app and EVbee server to intercept and manipulate the communication between the app and server. The traffic is...

FTP Fetch, Windows x64 Command Shell, Bind TCP Stager (RC4 Stage Encryption, Metasm)

Fetch and execute an x64 payload from an FTP server. Spawn a piped command shell Windows x64 staged. Connect back to the attacker Module Options...

FTP Fetch, Bind TCP Stager (RC4 Stage Encryption, Metasm)

Fetch and execute an x64 payload from an FTP server. Connect back to the attacker Module Options This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework module MetasploitModule include Msf::Payload::Adapter::Fetch::FTP includ...