cve-2026-39031-lansweeper-lsrunase2-lsencrypt2

CVE-2026-39031: Восстановление паролей Lansweeper lsrunase 2.0 / lsencrypt 2.0 Краткое описание Lansweeper lsrunase 2.0 и lsencrypt 2.0 используют обратимую схему шифрования паролей на основе RC4. Ключ RC4 формируется из 8-символьного префикса, который хранится в открытом виде вместе с...

CVE-2026-7874 Weak Cryptographic Key Derivation Exposed All Stored Credentials

IBM Langflow OSS 1.0.0 through 1.10.0 Langflow could allow disclosure of all stored credentials due to the use of a weak and reversible key derivation mechanism for encryption at rest...

CVE-2025-57796

Explorance Blue versions prior to 8.14.12 use reversible symmetric encryption with a hardcoded static key to protect sensitive data, including user passwords and system configurations. This approach allows stored values to be decrypted offline if the encrypted data are obtained...

CVE-2025-57796

Explorance Blue versions prior to 8.14.12 use reversible symmetric encryption with a hardcoded static key to protect sensitive data, including user passwords and system configurations. This approach allows stored values to be decrypted offline if the encrypted data are obtained...

CVE-2025-57796

Explorance Blue versions prior to 8.14.12 use reversible symmetric encryption with a hardcoded static key to protect sensitive data, including user passwords and system configurations. This approach allows stored values to be decrypted offline if the encrypted data are obtained...

CVE-2025-57796

Explorance Blue versions prior to 8.14.12 are vulnerable to the decryption of sensitive data due to the use of reversible symmetric encryption with a hardcoded static key . This security flaw affects the protection of sensitive information, specifically including user passwords and system configu...

CVE-2025-57796 Use of a hardcoded static key to protect sensitive data in Explorance Blue

Explorance Blue versions prior to 8.14.12 use reversible symmetric encryption with a hardcoded static key to protect sensitive data, including user passwords and system configurations. This approach allows stored values to be decrypted offline if the encrypted data are obtained...

CVE-2025-57796 Use of a hardcoded static key to protect sensitive data in Explorance Blue

Explorance Blue versions prior to 8.14.12 use reversible symmetric encryption with a hardcoded static key to protect sensitive data, including user passwords and system configurations. This approach allows stored values to be decrypted offline if the encrypted data are obtained...

Explorance Blue security vulnerabilities

Explorance Blue is a learning experience management software developed by the Canadian company Explorance. Versions of Explorance Blue prior to 8.14.12 contained security vulnerabilities. These vulnerabilities stemmed from the use of reversible symmetric encryption with hardcoded static keys to...

PT-2026-5175

Explorance Blue versions prior to 8.14.12 use reversible symmetric encryption with a hardcoded static key to protect sensitive data, including user passwords and system configurations. This approach allows stored values to be decrypted offline if the encrypted data are obtained...

CVE-2025-65841

Aquarius Desktop 3.0.069 for macOS is vulnerable to account takeover because it stores user authentication credentials in a local file (~/Library/Application Support/Aquarius/aquarius.settings) using a weak obfuscation scheme . The password protection relies on predictable byte-substitution that ...

EUVD-2019-15297

Malware in sbrugna...

EUVD-2015-7978

Malware in sbrugna...

EUVD-2017-14034

Malware in sbrugna...

EUVD-2025-10902

Malicious code in bioql PyPI...

EUVD-2024-32129

Malicious code in bioql PyPI...

EUVD-2022-39321

Malicious code in bioql PyPI...

CVE-2024-3543

Use of reversible password encryption algorithm allows attackers to decrypt passwords. Sensitive information can be easily unencrypted by the attacker, stolen credentials can be used for arbitrary actions to corrupt the system...

CVE-2022-36617

Arq Backup 7.19.5.0 and below stores backup encryption passwords using reversible encryption. This issue allows attackers with administrative privileges to recover cleartext passwords...

CVE-2025-22372

Insufficiently Protected Credentials vulnerability in SicommNet BASEC on SaaS allows Password Recovery. Passwords are either stored in plain text using reversible encryption, allowing an attacker with sufficient privileges to extract plain text passwords easily. This issue affects BASEC: from 14...