cve-2026-39031-lansweeper-lsrunase2-lsencrypt2

CVE-2026-39031: Lansweeper lsrunase 2.0 / lsencrypt 2.0 비밀번호 복구 요약 Lansweeper lsrunase 2.0 및 lsencrypt 2.0은 RC4 기반의 가역적인 비밀번호 암호화 방식을 사용합니다. RC4 키는 암호화된 비밀번호와 함께 평문으로 저장되는 8자리 접두어와 바이너리에 내장된 고정 키 자료로부터 파생됩니다. 두 도구 중 하나로 생성된 암호화된 비밀번호 문자열을 보유한 사람은 누구나 오프라인에서 평문 비밀번호를 복구할 수 있습니다. 복구 과정에는 무차별 대입이 필요...

CVE-2026-7874 Weak Cryptographic Key Derivation Exposed All Stored Credentials

IBM Langflow OSS 1.0.0 through 1.10.0 Langflow could allow disclosure of all stored credentials due to the use of a weak and reversible key derivation mechanism for encryption at rest...

CVE-2025-57796

Explorance Blue versions prior to 8.14.12 use reversible symmetric encryption with a hardcoded static key to protect sensitive data, including user passwords and system configurations. This approach allows stored values to be decrypted offline if the encrypted data are obtained...

CVE-2025-57796

Explorance Blue versions prior to 8.14.12 use reversible symmetric encryption with a hardcoded static key to protect sensitive data, including user passwords and system configurations. This approach allows stored values to be decrypted offline if the encrypted data are obtained...

CVE-2025-57796

Explorance Blue versions prior to 8.14.12 use reversible symmetric encryption with a hardcoded static key to protect sensitive data, including user passwords and system configurations. This approach allows stored values to be decrypted offline if the encrypted data are obtained...

CVE-2025-57796 Use of a hardcoded static key to protect sensitive data in Explorance Blue

Explorance Blue versions prior to 8.14.12 use reversible symmetric encryption with a hardcoded static key to protect sensitive data, including user passwords and system configurations. This approach allows stored values to be decrypted offline if the encrypted data are obtained...

CVE-2025-57796

Explorance Blue versions prior to 8.14.12 are vulnerable to the decryption of sensitive data due to the use of reversible symmetric encryption with a hardcoded static key . This security flaw affects the protection of sensitive information, specifically including user passwords and system configu...

CVE-2025-57796 Use of a hardcoded static key to protect sensitive data in Explorance Blue

Explorance Blue versions prior to 8.14.12 use reversible symmetric encryption with a hardcoded static key to protect sensitive data, including user passwords and system configurations. This approach allows stored values to be decrypted offline if the encrypted data are obtained...

Explorance Blue security vulnerabilities

Explorance Blue is a learning experience management software developed by the Canadian company Explorance. Versions of Explorance Blue prior to 8.14.12 contained security vulnerabilities. These vulnerabilities stemmed from the use of reversible symmetric encryption with hardcoded static keys to...

PT-2026-5175

Explorance Blue versions prior to 8.14.12 use reversible symmetric encryption with a hardcoded static key to protect sensitive data, including user passwords and system configurations. This approach allows stored values to be decrypted offline if the encrypted data are obtained...

CVE-2025-65841

Aquarius Desktop 3.0.069 for macOS is vulnerable to account takeover because it stores user authentication credentials in a local file (~/Library/Application Support/Aquarius/aquarius.settings) using a weak obfuscation scheme . The password protection relies on predictable byte-substitution that ...

EUVD-2015-7978

Malware in sbrugna...

EUVD-2019-15297

Malware in sbrugna...

EUVD-2017-14034

Malware in sbrugna...

EUVD-2024-32129

Malicious code in bioql PyPI...

EUVD-2025-10902

Malicious code in bioql PyPI...

EUVD-2022-39321

Malicious code in bioql PyPI...

CVE-2024-3543

Use of reversible password encryption algorithm allows attackers to decrypt passwords. Sensitive information can be easily unencrypted by the attacker, stolen credentials can be used for arbitrary actions to corrupt the system...

CVE-2022-36617

Arq Backup 7.19.5.0 and below stores backup encryption passwords using reversible encryption. This issue allows attackers with administrative privileges to recover cleartext passwords...

CVE-2025-22372

Insufficiently Protected Credentials vulnerability in SicommNet BASEC on SaaS allows Password Recovery. Passwords are either stored in plain text using reversible encryption, allowing an attacker with sufficient privileges to extract plain text passwords easily. This issue affects BASEC: from 14...