SMS4_Decrypt

SMS4Decrypt 0x01 소개 SMS4 알고리즘은 국내에서 널리 사용되는 WAPI 무선 네트워크 표준에서 사용되는 암호화 알고리즘으로, 32라운드의 반복 비균형 Feistel 구조의 블록 암호화 알고리즘이며, 키 길이와 블록 길이는 모두 128입니다. SMS4 알고리즘의 암호화 및 복호화 과정에서 사용되는 알고리즘은 완전히 동일하며, 유일한 차이점은 복호화 키가 암호화 키를 역순으로 변환하여 얻어진다는 점입니다. https://baike.baidu.com/item/SMS4%E7%AE%97%E6%B3%95/16858974...

staging: rtl8723bs: fix OOB reads in rtw_get_sec_ie(), rtw_get_wapi_ie(), and rtw_get_wps_attr()

...

CVE-2026-64441

The CVE-2026-64441 fix applies to the Linux kernel staging rtl8723bs code and addresses out-of-bounds reads in three IE/attribute parsers: rtw_get_sec_ie(), rtw_get_wapi_ie(), and rtw_get_wps_attr(). The patch adds cnt+2 bounds checks before loop bodies in rtw_get_sec_ie() and rtw_get_wapi_ie(), ...

EUVD-2026-48785

In the Linux kernel, the following vulnerability has been resolved: staging: rtl8723bs: fix OOB reads in rtwgetsecie, rtwgetwapiie, and rtwgetwpsattr Three IE/attribute parsing functions have missing bounds checks. rtwgetsecie and rtwgetwapiie iterate over a raw IE buffer without verifying that t...

CVE-2026-64441 staging: rtl8723bs: fix OOB reads in rtw_get_sec_ie(), rtw_get_wapi_ie(), and rtw_get_wps_attr()

In the Linux kernel, the following vulnerability has been resolved: staging: rtl8723bs: fix OOB reads in rtwgetsecie, rtwgetwapiie, and rtwgetwpsattr Three IE/attribute parsing functions have missing bounds checks. rtwgetsecie and rtwgetwapiie iterate over a raw IE buffer without verifying that t...

EUVD-2021-17233

Malware in sbrugna...

EUVD-2022-37009

Malicious code in bioql PyPI...

CVE-2022-33973

Improper access control in the IntelR WAPI Security software for Windows 10/11 before version 22.2150.0.1 may allow an authenticated user to potentially enable information disclosure via local access...

CVE-2021-30302

Improper authentication of EAP WAPI EAPOL frames from unauthenticated user can lead to information disclosure in Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wired...

CVE-2025-26202: Improper Neutralization of Input During Web Page Generation

Cross-Site Scripting XSS vulnerability exists in the WPA/WAPI Passphrase field of the Wireless Security settings 2.4GHz & 5GHz bands in DZS Router Web Interface. An authenticated attacker can inject malicious JavaScript into the passphrase field, which is stored and later executed when an...

PT-2025-9632

Name of the Vulnerable Software and Affected Versions DZS Router Web Interface affected versions not specified Description A Cross-Site Scripting XSS issue exists in the WPA/WAPI Passphrase field of the Wireless Security settings for both 2.4GHz and 5GHz bands. An authenticated attacker can injec...

CVE-2022-33973

Improper access control in the IntelR WAPI Security software for Windows 10/11 before version 22.2150.0.1 may allow an authenticated user to potentially enable information disclosure via local access...

Improper access control

Improper access control in the IntelR WAPI Security software for Windows 10/11 before version 22.2150.0.1 may allow an authenticated user to potentially enable information disclosure via local access...

CVE-2022-33973

Improper access control in the IntelR WAPI Security software for Windows 10/11 before version 22.2150.0.1 may allow an authenticated user to potentially enable information disclosure via local access...

CVE-2022-33973

Improper access control in the IntelR WAPI Security software for Windows 10/11 before version 22.2150.0.1 may allow an authenticated user to potentially enable information disclosure via local access...

CVE-2022-33973

The CVE-2022-33973 issue affects Intel WAPI Security software for Windows 10/11 prior to 22.2150.0.1. The root cause is improper access control that may permit an authenticated user to enable information disclosure via local access. The connected documents corroborate the affected product/version...

CVE-2022-33973: Insecure Storage of Sensitive Information

Improper access control in the IntelR WAPI Security software for Windows 10/11 before version 22.2150.0.1 may allow an authenticated user to potentially enable information disclosure via local access...

Intel® WAPI Security Software Advisory

Summary: A potential security vulnerability in the Intel® WLAN Authentication and Privacy Infrastructure WAPI Security software for Windows 10/11 may allow information disclosure. Intel is releasing software updates to mitigate this potential vulnerability. Vulnerability Details: CVEID:...

CVE-2021-30302

Improper authentication of EAP WAPI EAPOL frames from unauthenticated user can lead to information disclosure in Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wired...

Authentication flaw

Improper authentication of EAP WAPI EAPOL frames from unauthenticated user can lead to information disclosure in Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wired...