149 matches found
HiveV5_file_decryptor
HiveV5 文件解密器 PoC 简介 过去几个月的工作对于揭示 Hive v5-5.2 的恶意文件加密机制是必要的。 工作分为两部分： 1. 密钥流解密 2. 使用解密后的密钥流进行文件解密 我要感谢伟大的 @rivitna 在这几个月的工作中给予的支持、交流和建议！ 请留意 rivitna 的 github，其中包含大量关于 Hive 勒索软件及其他内容的有用信息。 在本 readme 中，你将找到一些关于文件解密算法的信息，如需更完整地了解其工作原理，请参阅 PoC。 密钥流是加密后的明文。明文是一组 0xA00000 字节，并在其末尾附加了前 0x2FFF00 字节，总计...
CVE-2025-2539
POC - CVE-2025-2539 File Away 免责声明 ：本概念验证（POC）仅供教育和道德测试之用。在未获得双方事先同意的情况下，使用此工具攻击目标属于违法行为。最终用户有责任遵守所有适用的地方、州和联邦法律。开发者不承担任何责任，也不对因使用本程序造成的任何滥用或损害负责。 完整POC 快速开始 克隆仓库 首先，克隆仓库： root@kitploit: git clone https://github.com/d4rkh0rse/CVE-2025-2539.git 运行漏洞利用： root@kitploit: python CVE2025-2539.py...
TP-Link-TL-WR820N-CVE-2025-14175
🔐 CVE-2025-14175 SSH服务器中的弱算法支持 – TP-Link TL-WR820N 概述 本仓库记录了在 TP-Link TL-WR820N v2.80 路由器的 SSH服务器实现 中发现的一个安全漏洞。 该漏洞允许使用弱加密算法 ，可能暴露SSH流量的机密性。 该问题已被负责任地披露 ，由供应商修补 ，并被分配CVE-2025-14175 。 漏洞概述 产品 : TP-Link TL-WR820N v2.80 CVE ID : CVE-2025-14175 CWE : CWE-327 – 使用已损坏或有风险的加密算法 CVSS v4.0 : 6.0 中等 攻击向量 :...
CVE-2026-76133
The affected Ebyte product uses a deprecated hashing algorithm in an authentication-related operation. Under conditions where an attacker can manipulate or predict the authentication exchange, the weak construction may reduce the assurance provided by the authentication mechanism and facilitate...
EUVD-2026-68612
The affected Ebyte product uses a deprecated hashing algorithm in an authentication-related operation. Under conditions where an attacker can manipulate or predict the authentication exchange, the weak construction may reduce the assurance provided by the authentication mechanism and facilitate...
EulerOS Virtualization 2.13.0 : python-paramiko (EulerOS-SA-2026-3231)
According to the versions of the python-paramiko packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : In Paramiko through 4.0.0 before a448945, rsakey.py allows the SHA-1 algorithm.CVE-2026-44405 Tenable has extracted the...
EulerOS Virtualization 2.13.1 : python-paramiko (EulerOS-SA-2026-3191)
According to the versions of the python-paramiko packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : In Paramiko through 4.0.0 before a448945, rsakey.py allows the SHA-1 algorithm.CVE-2026-44405 Tenable has extracted the...
CVE-2026-77151 lin-snow Ech0 crypto.go MD5Encrypt risky encryption
A security flaw has been discovered in lin-snow Ech0 up to 5.4.1. Affected by this issue is the function MD5Encrypt of the file internal/util/crypto/crypto.go. Performing a manipulation results in risky cryptographic algorithm. Remote exploitation of the attack is possible. The complexity of an...
CVE-2026-9641
Crypt::PBKDF2 versions before 0.261630 for Perl have a weak default algorithm and number of iterations. The default algorithm is HMAC-SHA1, which should only be used for legacy systems. These versions default to using 1000 iterations. Depending on the chosen algorithm, 220,000 to 1,400,000...
CVE-2026-9641
CVE-2026-9641 affects Crypt::PBKDF2 for Perl prior to 0.261630. The vulnerability stems from a weak default configuration: using HMAC-SHA1 as the default algorithm and a default 1000 iterations, which is insufficient for modern password hashing. The impact, per sources, could involve reduced resi...
CVE-2026-49000
An insecure password scheme refers to vulnerabilities arising from improper selection of encryption algorithms, inadequate key management, or flawed code implementation, which may lead to data leakage or tampering, such as hard-coded keys or the use of weak encryption algorithms...
EUVD-2026-31423
Use of a weak password encoding algorithm in STER software allows the value of the password to be guessed after analyzing how passwords with known values are encoded. This issue was fixed in version 9.5...
CVE-2021-31646
Gestsup before 3.2.10 allows account takeover through the password recovery functionality remote. The affected component is the file forgotpwd.php - it uses a weak algorithm for the generation of password recovery tokens the PHP uniqueid function, allowing a brute force attack...
CVE-2021-22307
There is a weak algorithm vulnerability in Mate 3010.0.0.203C00E201R7P2. The protection is insufficient for the modules that should be protected. Local attackers can exploit this vulnerability to affect the integrity of certain module...
CVE-2025-14175 Weak Algorithm Support in SSH Server on TL-WR820N
A vulnerability in the SSH server of TP-Link TL-WR820N v2.80 allows the use of a weak cryptographic algorithm, enabling an adjacent attacker to intercept and decrypt SSH traffic. Exploitation may expose sensitive information and compromise confidentiality...
EUVD-2020-12636
Malware in sbrugna...
EUVD-2014-9076
Malware in sbrugna...
EUVD-2016-6891
Malware in sbrugna...