CVE-2023-45182

CVE-2023-45182 IBM i Access Client Solutions 1.1.9.4 - 취약한 비밀번호 암호화 타임라인 취약점 공급업체에 보고: 22.09.2023 수정된 1.1.9.4 버전 출시: 08.12.2023 공개 공개: 15.12.2023 설명 IBM i Access Client Solutions는 사용자 비밀번호를 저장하기 위해 AES 알고리즘을 사용하지만, 16바이트 암호화 키는 정적 문자열Thanatos과 다른 정적 문자열Behemoth과 사용자 이름, 사용자의 홈 폴더, OS예: Linux, 그리고...

hikvision_CVE-2017-7921_auth_bypass_config_decryptor

hikvisionCVE-2017-7921authbypassconfigdecryptor 이 Python 파일은 CVE-2017-7921에 취약한 hikvision 카메라에서 사용하는 configurationFile을 복호화합니다. https://www.checkpoint.com/defense/advisories/public/2017/cpai-2017-0876.html/ 설명 Hikvision IP 카메라 인증 우회CVE-2017-7921 기본적으로 위 CVE에 취약한 hikvision 카메라는 URL에 인수로 간단한 base64...

Hikvision-CVE-2017-7921-decryptor

hikvisionCVE-2017-7921authbypassconfigdecryptor 이 파이썬 파일은 CVE-2017-7921에 취약한 hikvision 카메라에서 사용하는 configurationFile을 복호화합니다. https://www.checkpoint.com/defense/advisories/public/2017/cpai-2017-0876.html/ 설명 Hikvision IP 카메라 인증 우회 CVE-2017-7921 기본적으로 위에 나열된 CVE에 취약한 hikvision 카메라는 URL에 인수로 제공된 간단한...

hikvision_CVE-2017-7921_auth_bypass_config_decryptor

hikvisionCVE-2017-7921authbypassconfigdecryptor 이 파이썬 파일은 CVE-2017-7921에 취약한 hikvision 카메라에서 사용되는 configurationFile을 복호화합니다. https://www.checkpoint.com/defense/advisories/public/2017/cpai-2017-0876.html/ Description Hikvision IP 카메라 인증 우회 CVE-2017-7921 기본적으로, 위에 나열된 CVE에 취약한 hikvision 카메라는 URL에 인...

CVE-2026-28326

SolarWinds Access Rights Manager was reported to be affected by an unauthenticated remote code execution vulnerability. The issue stems from a hardcoded static key...

CVE-2026-28326

SolarWinds Access Rights Manager (ARM) is affected by an unauthenticated remote code execution vulnerability caused by a hardcoded static key . The CVSS v3.1 score is 8.8 (HIGH) , with an adjacent network attack vector, no required privileges, and no user interaction. Impact is High across confid...

CVE-2026-28326 SolarWinds Access Rights Manager Unauthenticated Remote Code Execution Vulnerability

SolarWinds Access Rights Manager was reported to be affected by an unauthenticated remote code execution vulnerability. The issue stems from a hardcoded static key...

EUVD-2026-82317

SolarWinds Access Rights Manager was reported to be affected by an unauthenticated remote code execution vulnerability. The issue stems from a hardcoded static key...

CVE-2026-28326 SolarWinds Access Rights Manager Unauthenticated Remote Code Execution Vulnerability

SolarWinds Access Rights Manager was reported to be affected by an unauthenticated remote code execution vulnerability. The issue stems from a hardcoded static key...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: openrisc: Fix jumplabel smp syncing The original commit, 8c30b0018f9d “openrisc: Add jump label support”, copied from arm64 and did not properly account for how icache invalidation operates on remote cores in OpenRISC. On OpenRIS...

UBUNTU-CVE-2026-72154

In the Linux kernel, the following vulnerability has been resolved: openrisc: Fix jumplabel smp syncing The original commit 8c30b0018f9d "openrisc: Add jump label support" copies from arm64 and does not properly consider how icache invalidation on remote cores works in OpenRISC. On OpenRISC remot...

CVE-2026-72154 openrisc: Fix jump_label smp syncing

In the Linux kernel, the following vulnerability has been resolved: openrisc: Fix jumplabel smp syncing The original commit 8c30b0018f9d "openrisc: Add jump label support" copies from arm64 and does not properly consider how icache invalidation on remote cores works in OpenRISC. On OpenRISC remot...

CVE-2026-68185

In the Linux kernel, the following vulnerability has been resolved: LoongArch: Move jumplabelinit before parseearlyparam When enabling both CONFIGMEMALLOCPROFILING=y and CONFIGMEMALLOCPROFILINGENABLEDBYDEFAULT=y, then diabling memory profiling by adding the boot parameter 'sysctl.vm.memprofiling=...

CVE-2026-68185

In the Linux kernel, the following vulnerability has been resolved: LoongArch: Move jumplabelinit before parseearlyparam When enabling both CONFIGMEMALLOCPROFILING=y and CONFIGMEMALLOCPROFILINGENABLEDBYDEFAULT=y, then diabling memory profiling by adding the boot parameter 'sysctl.vm.memprofiling=...

EUVD-2026-52637

The product firmware contains an embedded, static RSA private key utilized by the Lighttpd web server for TLS termination. Exposure of this private key allows malicious actors to breach the confidentiality and integrity of HTTPS communications, enabling traffic decryption and server spoofing...

Improper Input Validation

Overview Affected versions of this package are vulnerable to Improper Input Validation in the calculateAgreementpub, message method of the DHAgreement class, which raises the peer-supplied message to the power of the local static private key x without any range or subgroup-membership check, while...

CSL 1010 M2M 3G WiFi Module 2.2.1.4 (Router.cfg) Weak XOR Encryption

Summary The CSL 1010 M2M 3G WiFi Module is a portable 3G/LTE router that stores its configuration in a backup file Router.cfg. Description The device protects its configuration file Router.cfg with a weak/insecure obfuscation single-byte XOR cipher using a static key 0xEC instead of real...

SUSE CVE-2026-64508

In the Linux kernel, the following vulnerability has been resolved: bpf: Support for hardening against JIT spraying The BPF JIT allocator packs many small programs into larger executable allocations and reuses space within those allocations as programs are loaded and freed. When fresh code is...

CVE-2026-64508

In the Linux kernel, the following vulnerability has been resolved: bpf: Support for hardening against JIT spraying The BPF JIT allocator packs many small programs into larger executable allocations and reuses space within those allocations as programs are loaded and freed. When fresh code is...

CVE-2026-64508 bpf: Support for hardening against JIT spraying

In the Linux kernel, the following vulnerability has been resolved: bpf: Support for hardening against JIT spraying The BPF JIT allocator packs many small programs into larger executable allocations and reuses space within those allocations as programs are loaded and freed. When fresh code is...