122 matches found
Decrypt-passwords-for-Huawei-routers-and-switches-CVE-2012-4960
解密华为路由器和交换机的密码/CVE-2012-4960 在多个华为产品中,密码采用DES加密算法,但其加密强度不足,因此可能被破解。该漏洞已被分配通用漏洞与暴露(CVE)编号:CVE-2012-4960。 要求 安装 Python 安装 pycryptodome 已知受影响的产品/CVE-2012-4960 CX200/CX300 CX600 NE5000E MA5200G NE40E/80E ATN NE40/NE80 NE20E-X6 NE20 ME60 ACU WLAN AC 6605 S9300 S7700 S2300/S3300/S5300...
CVE-2022-37177
CVE-2022-37177 - HireVue-Broken-Or-Risky-Cryptographic-Algorithm 当访问 HireVue 为面试提供的面试邀请链接时,你会被引导到一个条款页面,在开始录制并计时的面试过程之前,你需要先同意这些条款。这个初始 HTTP 响应中包含了面试过程中会被问到的面试问题,这些问题使用栅栏密码(rail fence cipher)进行编码。这种编码很容易被解密,因此在实际开始面试之前就能获得所有面试问题。如果你不同意条款,面试就不会开始,所以你可以随意反复访问该链接然后离开,直到你同意开始面试为止。HireVue...
CVE-2026-14663
Cleartext storage in PostgreSQL pgcrypto disabled ciphers allows a user to recover cleartext, via direct observation of the faulty ciphertext. The OpenSSL version and OpenSSL configuration determine the disabled ciphers. If the application accepts encrypted data as input, decryption will succeed...
EUVD-2026-9008
An attacker may exploit the use of weak CBC-based cipher suites in the device’s SSH service to potentially observe or manipulate parts of the encrypted SSH communication, if they are able to intercept or interact with the network traffic...
CVE-2026-1626
An attacker may exploit the use of weak CBC-based cipher suites in the device’s SSH service to potentially observe or manipulate parts of the encrypted SSH communication, if they are able to intercept or interact with the network traffic...
CVE-2026-1626
An attacker may exploit the use of weak CBC-based cipher suites in the device’s SSH service to potentially observe or manipulate parts of the encrypted SSH communication, if they are able to intercept or interact with the network traffic...
CVE-2026-1626
An attacker may exploit the use of weak CBC-based cipher suites in the device’s SSH service to potentially observe or manipulate parts of the encrypted SSH communication, if they are able to intercept or interact with the network traffic...
CVE-2026-1626
The vulnerability CVE-2026-1626 affects SICK LMS1000 and SICK MRS1000 devices, where the SSH service may accept weak CBC-based cipher suites. This could allow an attacker with network access to observe or manipulate portions of SSH communications. Red Hat and other sources corroborate a CBC-relat...
PT-2026-22320
An attacker may exploit the use of weak CBC-based cipher suites in the device’s SSH service to potentially observe or manipulate parts of the encrypted SSH communication, if they are able to intercept or interact with the network traffic...
CVE-2022-27581
Use of a Broken or Risky Cryptographic Algorithm in SICK RFU61x firmware version...
EUVD-2006-1001
Malware in sbrugna...
EUVD-2014-0658
Malware in sbrugna...
EUVD-2021-24699
Malware in sbrugna...
EUVD-2014-0878
Malware in sbrugna...
EUVD-2022-49615
Malicious code in bioql PyPI...
EUVD-2023-31746
Malicious code in bioql PyPI...
EUVD-2022-49616
Malicious code in bioql PyPI...
Siemens多款产品 加密问题漏洞
Siemens RUGGEDCOM i800 and others are a switch from Siemens Germany. An encryption vulnerability exists in various Siemens products that stems from support for the TLSECDHEECDSAWITHAES128CBCSHA256 cipher suite, which is vulnerable to timing attacks, and could lead to a communication compromise. T...
CVE-2022-46832
Use of a Broken or Risky Cryptographic Algorithm in SICK RFU62x firmware version 2.21 allows a low-privileged remote attacker to decrypt the encrypted data if the user requested weak cipher suites to be used for encryption via the SSH interface. The patch and installation procedure for the firmwa...