CVE-2019-5420

CVE-2019-5420 Rails CVE-2019-5420 के लिए शोषण समस्या Rails v5.2.2 तक, जब विकास मोड में सत्रों को सुरक्षित किया जाता है, तो एप्लिकेशन कुंजी को एप्लिकेशन के नाम से प्राप्त करता है।...

CVE-2019-5420

CVE-2019-5420 يمكن أن تسمح ثغرة أمنية للمهاجم بتخمين الرمز السري لوضع التطوير المُنشأ تلقائيًا. في Ruby-on-Rails عند تشغيله في وضع التطوير. في وضع التطوير، يمكن للمهاجم تخمين المفتاح المستخدم لتأمين الجلسات. فك التشفير: توليد المفتاح: يستخدم Rails 3 بيئات development,test,production، وعندما يستخد...

CVE-2019-5420

CVE-2019-5420 Ruby-on-Rails तीन अलग-अलग वातावरण प्रदान करता है जिनमें यह चल सकता है: विकास development, परीक्षण test और उत्पादन production। स्पष्ट रूप से, आपको विकास या परीक्षण में चलने वाले कोड को इंटरनेट पर उपलब्ध नहीं कराना चाहिए, लेकिन ऐसा हमेशा की तरह होता है उदाहरण के लिए स्टेजिंग वातावरण...

bluffs

BLUFFS مقدمة يحتوي هذا المستودع على الكود المتعلق بـ BLUFFS: Bluetooth Forward and Future Secrecy Attacks and Defenses. ملخص الورقة البحثية بلوتوث هي تقنية منتشرة للاتصالات اللاسلكية. مليارات من الأجهزة تستخدمها في تطبيقات حساسة ولتبادل البيانات الخاصة. يعتمد أمان بلوتوث على معيار بلوتوث وآليتي...

GIUDA

GIUDA احصل على TGS نيابة عن مستخدم آخر دون كلمة مرور السيناريو: أنت مسؤول محلي Local Administrator ويوجد مستخدم مسجّل دخول تريد انتحال صفته! السلسلة: يسمح لك امتياز SeTcbPrivilege بقراءة تخزين LSA، واستخراج مفتاح الجلسة SESSION KEY من TGT، وتزوير طلب للحصول على TGS؛ يجب عليك استخدام LUID بدلاً من...

CVE-2026-52723

ePA 3.x Integration implements the authorization workflow and writes Medical Information Objects to Germany's electronic patient record. Prior to 1.3.0, ePA 3.x Integration performs VAU server certificate validation in app/vau/VAUProtokoll.py without anchoring the signedvauserverpubkeys and...

CVE-2026-23933

In Zabbix 7.4, the frontend session signing key was erroneously written to the database seed. When SAML authentication and guest users are both enabled, this key can be extracted and used to forge valid session cookies, enabling unauthorized access. CVSS 4.0 scores this HIGH (7.7). The Zabbix tic...

CVE-2026-72044

A flaw was found in ksmbd in the Linux kernel. A stack buffer overflow vulnerability exists in the multichannel session-key copy mechanism. A remote attacker can exploit this by supplying a crafted session key larger than the intended buffer size during a binding session setup. This can lead to a...

CVE-2025-15629

A cryptographic weakness exists in the Omada adoption protocol where session encryption keys used to protect communications between controllers and managed devices may be predictable due to insufficient entropy in session key generation. An attacker who successfully intercepts adoption-related...

CVE-2025-15629

The CVE-2025-15629 entry concerns the TP-Link Omada Adoption Protocol. A cryptographic weakness exists where session encryption keys used to protect communications between Omada controllers and managed devices may be predictable due to insufficient entropy in session key generation. The consequen...

Exposure of Sensitive Information Through Metadata

Overview Affected versions of this package are vulnerable to Exposure of Sensitive Information Through Metadata via CFB quick-check decryption oracle in the getDataStream method of PGPSymmetricKeyEncryptedData, reached through PGPPBEEncryptedData, PGPSessionKeyEncryptedData, and...

Exposure of Sensitive Information Through Metadata

Overview Affected versions of this package are vulnerable to Exposure of Sensitive Information Through Metadata via CFB quick-check decryption oracle in the getDataStream method of PGPSymmetricKeyEncryptedData, reached through PGPPBEEncryptedData, PGPSessionKeyEncryptedData, and...

DEBIAN-CVE-2026-59640

In Bouncy Castle for Java before 1.85, OpenPGP CFB quick-check oracle active on symmetric/session-key paths. This issue also affects Bouncy Castle for Java LTS before 2.73.12, and Bouncy Castle for Java FIPS BC-FJA before bcpg-fips 1.0.13 1.0.X series, 2.0.13 2.0.X series and 2.1.13 2.1.X series...

CVE-2026-59640

In Bouncy Castle for Java before 1.85, OpenPGP CFB quick-check oracle active on symmetric/session-key paths. This issue also affects Bouncy Castle for Java LTS before 2.73.12, and Bouncy Castle for Java FIPS BC-FJA before bcpg-fips 1.0.13 1.0.X series, 2.0.13 2.0.X series and 2.1.13 2.1.X series...

UBUNTU-CVE-2026-59640

In Bouncy Castle for Java before 1.85, OpenPGP CFB quick-check oracle active on symmetric/session-key paths. This issue also affects Bouncy Castle for Java LTS before 2.73.12, and Bouncy Castle for Java FIPS BC-FJA before bcpg-fips 1.0.13 1.0.X series, 2.0.13 2.0.X series and 2.1.13 2.1.X series...

CVE-2026-59640

CVE-2026-59640 affects Bouncy Castle for Java prior to 1.85, including the LTS release prior to 2.73.12 and BC-FJA (FIPS) before bcpg-fips 1.0.13 (1.0.x), 2.0.13 (2.0.x), and 2.1.13 (2.1.x). The issue is described as an OpenPGP CFB quick-check oracle that is active on symmetric/session-key paths....

CVE-2026-59640 OpenPGP CFB quick-check oracle active on symmetric/session-key paths

In Bouncy Castle for Java before 1.85, OpenPGP CFB quick-check oracle active on symmetric/session-key paths. This issue also affects Bouncy Castle for Java LTS before 2.73.12, and Bouncy Castle for Java FIPS BC-FJA before bcpg-fips 1.0.13 1.0.X series, 2.0.13 2.0.X series and 2.1.13 2.1.X series...

CVE-2026-64389

A flaw was found in the Linux kernel's ksmbd component. A remote attacker could exploit a vulnerability in the NTLMv2 authentication process to modify a session key even when authentication fails. This bypasses security checks and could potentially lead to unauthorized access or session hijacking...

SUSE CVE-2026-64389

In the Linux kernel, the following vulnerability has been resolved: ksmbd: validate NTLMv2 response before updating session key ksmbdauthntlmv2 derives the NTLMv2 session key into sess-sesskey before it verifies the NTLMv2 response. ksmbddecodentlmsspauthblob then continues into KEYXCH even when...

CVE-2026-64389

In the Linux kernel, the following vulnerability has been resolved: ksmbd: validate NTLMv2 response before updating session key ksmbdauthntlmv2 derives the NTLMv2 session key into sess-sesskey before it verifies the NTLMv2 response. ksmbddecodentlmsspauthblob then continues into KEYXCH even when...