CVE-2019-5420

CVE-2019-5420 Эксплойт для Rails CVE-2019-5420 Проблема До Rails v5.2.2 при защите сессий в режиме разработки приложение извлекает ключ из названия приложения...

CVE-2019-5420

CVE-2019-5420 Уязвимость может позволить злоумышленнику угадать автоматически сгенерированный секретный токен режима разработки. Ruby-on-Rails при работе в режиме разработки. В режиме разработки злоумышленник может угадать ключ, используемый для защиты сессий. Расшифровка: Генерация ключа: Rails...

GIUDA

GIUDA 다른 사용자를 대신하여 비밀번호 없이 TGS를 획득합니다 시나리오: 당신은 로컬 관리자이고, 가장하려는 로그온된 사용자가 있습니다! 체인: SeTcbPrivilege를 사용하면 LSA 저장소를 읽고 TGT에서 SESSION KEY를 추출한 후 TGS를 요청하는 위조 요청을 만들 수 있습니다. 사용자 이름 대신 LUID를 사용해야 합니다. 목표: Kerberos TGS로 로컬 관리자에서 도메인 관리자로 필수: 로컬 관리자와 로그온된또는 연결이 끊긴 도메인 관리자가 필요합니다. 이 가이드에서 도메인 관리자 사용자는...

CVE-2019-5420

CVE-2019-5420 Ruby-on-Rails предлагает три различные среды, в которых он может работать: разработка, тестирование и продакшен. Разумеется, код, работающий в среде разработки или тестирования, не должен быть доступен в интернете, но как всегда это происходит например, в staging-средах. Ruby-on-Rai...

bluffs

BLUFFS 소개 이 저장소는 BLUFFS: Bluetooth Forward and Future Secrecy Attacks and Defenses에 관련된 코드를 포함합니다. 논문 초록 Bluetooth는 무선 통신을 위한 보편적인 기술입니다. 수십억 개의 장치가 민감한 애플리케이션에서 이를 사용하고 사적인 데이터를 교환합니다. Bluetooth의 보안은 Bluetooth 표준과 페어링 및 세션 설정이라는 두 가지 보안 메커니즘에 의존합니다. 표준 자체를 포함한 이전 연구 중 이러한 메커니즘의 미래 및 순방향 비밀성futur...

CVE-2026-103442 MergeAccount PHP object injection via session-key substitution

External control of system or configuration setting vulnerability in The Wikimedia Foundation MediaWiki CentralAuth extension allows Code Injection. This issue affects MediaWiki CentralAuth extension: 1.46, 1.45, and 1.43...

CVE-2026-100534

OpenClaw versions before 2026.8.1 contain an authorization bypass vulnerability in webhook TaskFlow cancellation that allows attackers to cancel unrelated sessions. An attacker with a webhook route secret can supply an arbitrary child session key to cancel ACP or subagent work outside the route's...

CVE-2026-100534 OpenClaw before 2026.8.1 Session Cancellation Authorization Bypass

OpenClaw versions before 2026.8.1 contain an authorization bypass vulnerability in webhook TaskFlow cancellation that allows attackers to cancel unrelated sessions. An attacker with a webhook route secret can supply an arbitrary child session key to cancel ACP or subagent work outside the route's...

CVE-2026-100534 OpenClaw before 2026.8.1 Session Cancellation Authorization Bypass

OpenClaw versions before 2026.8.1 contain an authorization bypass vulnerability in webhook TaskFlow cancellation that allows attackers to cancel unrelated sessions. An attacker with a webhook route secret can supply an arbitrary child session key to cancel ACP or subagent work outside the route's...

Unity Linux 20.1060e / 20.1070e Security Update: wpa_supplicant (UTSA-2021-001733)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2021-001733 advisory. The implementations of EAP-PWD in wpasupplicant EAP Peer, when built against a crypto library missing explicit validation on imported elements, do not validate the...

PT-2026-89109

Name of the Vulnerable Software and Affected Versions MaxSite CMS versions prior to 109.7 Description The software contains a hardcoded session encryption key within the application/config/config.php file that remains unchanged after installation. This allows unauthenticated attackers to forge...

EUVD-2026-70819

A hard-coded cryptographic key vulnerability exists in the web module of TP-Link Archer AX55 v4. A LAN attacker who captures an HTTP login session may use the known shared RSA private key to decrypt the administrator password; the weakened AES session key further reduces the effort required to...

PT-2026-81014

RansomLook created its Flask session-signing key without explicitly restricting the file permissions. The secret key file was created using the process's default permissions and umask, resulting in permissions such as 0644 under a common 022 umask. Consequently, other local users able to access t...

CVE-2026-52723

ePA 3.x Integration implements the authorization workflow and writes Medical Information Objects to Germany's electronic patient record. Prior to 1.3.0, ePA 3.x Integration performs VAU server certificate validation in app/vau/VAUProtokoll.py without anchoring the signedvauserverpubkeys and...

CVE-2026-23933

In Zabbix 7.4 , a cryptographic key used for signing Frontend sessions was erroneously written to the database seed. This vulnerability specifically impacts deployments utilizing both SAML authentication and guest users , where the key can be used to forge valid session cookies, potentially leadi...

CVE-2026-72044

A flaw was found in ksmbd in the Linux kernel. A stack buffer overflow vulnerability exists in the multichannel session-key copy mechanism. A remote attacker can exploit this by supplying a crafted session key larger than the intended buffer size during a binding session setup. This can lead to a...

CVE-2025-15629

A cryptographic weakness exists in the Omada adoption protocol where session encryption keys used to protect communications between controllers and managed devices may be predictable due to insufficient entropy in session key generation. An attacker who successfully intercepts adoption-related...

CVE-2025-15629

The CVE-2025-15629 entry concerns the TP-Link Omada Adoption Protocol. A cryptographic weakness exists where session encryption keys used to protect communications between Omada controllers and managed devices may be predictable due to insufficient entropy in session key generation. The consequen...

Exposure of Sensitive Information Through Metadata

Overview Affected versions of this package are vulnerable to Exposure of Sensitive Information Through Metadata via CFB quick-check decryption oracle in the getDataStream method of PGPSymmetricKeyEncryptedData, reached through PGPPBEEncryptedData, PGPSessionKeyEncryptedData, and...

Exposure of Sensitive Information Through Metadata

Overview Affected versions of this package are vulnerable to Exposure of Sensitive Information Through Metadata via CFB quick-check decryption oracle in the getDataStream method of PGPSymmetricKeyEncryptedData, reached through PGPPBEEncryptedData, PGPSessionKeyEncryptedData, and...