149 matches found
CVE-2025-2539
POC - CVE-2025-2539 File Away 면책 고지 : 이 PoCProof of Concept는 교육 및 윤리적 테스트 목적으로만 제작되었습니다. 사전 상호 동의 없이 이 도구를 사용하여 대상을 공격하는 행위는 불법입니다. 모든 해당 지역, 주 및 연방 법률을 준수하는 것은 최종 사용자의 책임입니다. 개발자는 어떠한 책임도 지지 않으며, 이 프로그램으로 인한 오용이나 피해에 대해 책임을 지지 않습니다. 전체 POC 시작하기 저장소 복제하기 먼저 저장소를 복제합니다: root@kitploit: git clone...
HiveV5_file_decryptor
HiveV5 ファイル復号化ツール PoC はじめに この数か月間に行った作業は、Hive v5-5.2 の悪意のあるファイル暗号化メカニズムを明らかにするために必要なものでした。 この作業は2つの部分に分けられました。 1. キーストリーム復号化 2. 復号化されたキーストリームを使用したファイル復号化 この数か月の作業に対するサポート、対話、助言に対して、素晴らしい @rivitna に感謝いたします。 Hive ランサムウェアなどに関する有用な情報が満載の rivitna の GitHub もぜひご覧ください。 この README...
TP-Link-TL-WR820N-CVE-2025-14175
🔐 CVE-2025-14175 SSH 서버의 취약한 알고리즘 지원 – TP-Link TL-WR820N 개요 이 저장소는 TP-Link TL-WR820N v2.80 라우터의 SSH 서버 구현 에서 확인된 보안 취약점을 문서화합니다. 해당 취약점으로 인해 취약한 암호화 알고리즘 을 사용할 수 있어 SSH 트래픽의 기밀성이 노출될 가능성이 있었습니다. 이 문제는 책임 있는 방식으로 공개 되었고, 벤더에 의해 패치 되었으며, CVE-2025-14175 가 할당되었습니다. 취약점 요약 제품 : TP-Link TL-WR820N v2.80...
CVE-2026-76133
The affected Ebyte product uses a deprecated hashing algorithm in an authentication-related operation. Under conditions where an attacker can manipulate or predict the authentication exchange, the weak construction may reduce the assurance provided by the authentication mechanism and facilitate...
EUVD-2026-68612
The affected Ebyte product uses a deprecated hashing algorithm in an authentication-related operation. Under conditions where an attacker can manipulate or predict the authentication exchange, the weak construction may reduce the assurance provided by the authentication mechanism and facilitate...
EulerOS Virtualization 2.13.0 : python-paramiko (EulerOS-SA-2026-3231)
According to the versions of the python-paramiko packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : In Paramiko through 4.0.0 before a448945, rsakey.py allows the SHA-1 algorithm.CVE-2026-44405 Tenable has extracted the...
EulerOS Virtualization 2.13.1 : python-paramiko (EulerOS-SA-2026-3191)
According to the versions of the python-paramiko packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : In Paramiko through 4.0.0 before a448945, rsakey.py allows the SHA-1 algorithm.CVE-2026-44405 Tenable has extracted the...
CVE-2026-77151 lin-snow Ech0 crypto.go MD5Encrypt risky encryption
A security flaw has been discovered in lin-snow Ech0 up to 5.4.1. Affected by this issue is the function MD5Encrypt of the file internal/util/crypto/crypto.go. Performing a manipulation results in risky cryptographic algorithm. Remote exploitation of the attack is possible. The complexity of an...
CVE-2026-9641
Crypt::PBKDF2 versions before 0.261630 for Perl have a weak default algorithm and number of iterations. The default algorithm is HMAC-SHA1, which should only be used for legacy systems. These versions default to using 1000 iterations. Depending on the chosen algorithm, 220,000 to 1,400,000...
CVE-2026-9641
CVE-2026-9641 affects Crypt::PBKDF2 for Perl prior to 0.261630. The vulnerability stems from a weak default configuration: using HMAC-SHA1 as the default algorithm and a default 1000 iterations, which is insufficient for modern password hashing. The impact, per sources, could involve reduced resi...
CVE-2026-49000
An insecure password scheme refers to vulnerabilities arising from improper selection of encryption algorithms, inadequate key management, or flawed code implementation, which may lead to data leakage or tampering, such as hard-coded keys or the use of weak encryption algorithms...
EUVD-2026-31423
Use of a weak password encoding algorithm in STER software allows the value of the password to be guessed after analyzing how passwords with known values are encoded. This issue was fixed in version 9.5...
CVE-2021-31646
Gestsup before 3.2.10 allows account takeover through the password recovery functionality remote. The affected component is the file forgotpwd.php - it uses a weak algorithm for the generation of password recovery tokens the PHP uniqueid function, allowing a brute force attack...
CVE-2021-22307
There is a weak algorithm vulnerability in Mate 3010.0.0.203C00E201R7P2. The protection is insufficient for the modules that should be protected. Local attackers can exploit this vulnerability to affect the integrity of certain module...
CVE-2025-14175 Weak Algorithm Support in SSH Server on TL-WR820N
A vulnerability in the SSH server of TP-Link TL-WR820N v2.80 allows the use of a weak cryptographic algorithm, enabling an adjacent attacker to intercept and decrypt SSH traffic. Exploitation may expose sensitive information and compromise confidentiality...
EUVD-2014-9076
Malware in sbrugna...
EUVD-2020-12636
Malware in sbrugna...
EUVD-2014-5973
Malware in sbrugna...