The vulnerability of the SSH server on the ROSA KOBALT operating system lies in the use of weak encryption algorithms such as RC4 and Blowfish. This allows attackers to circumvent cryptographic security measures.

The vulnerability of the SSH server on the ROS KOBALT operating system is related to the use of weak encryption algorithms such as RC4 and Blowfish. Exploiting this vulnerability allows a remote attacker to circumvent the cryptographic security measures...

AD Starter Scan - Weak Kerberos encryption

Binary data adsikerberosenc.nbin...

IBM QRadar SIEM Information Disclosure Vulnerability (CNVD-2021-55184)

IBM QRadar SIEM is a solution from IBM America that leverages security intelligence to protect assets and information from advanced threats. The solution provides oversight of the entire scope of the IT architecture, generates detailed reports on data access and user activity, etc. IBM QRadar SIE...

IBM QRadar SIEM 加密问题漏洞

IBM QRadar SIEM is a solution from IBM America that leverages security intelligence to protect assets and information from advanced threats. The solution provides oversight of the entire scope of the IT architecture, generates detailed reports on data access and user activity, etc. IBM QRadar SIE...

Argus Surveillance DVR 4.0 - Weak Password Encryption

Exploit Title: Argus Surveillance DVR 4.0 - Weak Password Encryption Exploit Author: Salman Asad @deathflash1411 a.k.a LeoBreaker Date: 12.07.2021 Version: Argus Surveillance DVR 4.0 Tested on: Windows 7 x86 Build 7601 & Windows 10 Reference: https://deathflash1411.github.io/blog/dvr4-hash-crack...

IBM Security Access Manager 加密问题漏洞

IBM Security Access Manager is a product for information security management applications from IBM, USA. The product enables access management control through integrated devices for web, mobile and cloud computing. IBM Security Access Manager Docker suffers from a cryptographic issue vulnerabilit...

The vulnerability of the microprogramming software in SICK Visionary-S CX hardware-based machine vision systems lies in the insufficient encryption strength, allowing attackers to compromise protected information and carry out “insider attacks”.

The vulnerability of the microprogramming software in SICK Visionary-S CX hardware-based vision systems is related to insufficient encryption strength. Exploiting this vulnerability could allow a malicious actor to disclose protected information and carry out “insider attacks”...

IBM Security Guardium Data Encryption Information Disclosure Vulnerability (CNVD-2022-05125)

IBM Security Guardium Data Encryption is a software for securing sensitive data within organizations from IBM, U.S.A. A security vulnerability exists in IBM Security Guardium Data Encryption, which stems from the use of weaker than expected encryption algorithms for data encryption, which could b...

Ruby 加密问题漏洞

Ruby is a cross-platform, object-oriented, dynamically typed programming language from the individual developer, Yukihiro Matsumoto. Ruby suffers from a cryptographic issue vulnerability that arises from a networked system or product that does not properly use the relevant cryptographic algorithm...

IBM Security Guardium Data Encryption加密问题漏洞

IBM Security Guardium Data Encryption is a software for securing sensitive data within organizations from IBM, U.S.A. A security vulnerability exists in IBM Security Guardium Data Encryption, which stems from the use of weaker than expected encryption algorithms for data encryption, which could b...

CVE-2021-32496

SICK Visionary-S CX up version 5.21.2.29154R are vulnerable to an Inadequate Encryption Strength vulnerability concerning the internal SSH interface solely used by SICK for recovering returned devices. The use of weak ciphers make it easier for an attacker to break the security that protects...

The vulnerability of implementations of algorithms such as WPA, WPA2, and WPA3—standards for IEEE 802.11 communication—allows attackers to compromise the integrity of protected information.

The vulnerability of implementations of WPA, WPA2, and WPA3—standards for IEEE 802.11 communication—is related to insufficient encryption robustness. Exploiting this vulnerability can allow a malicious actor to compromise the integrity of the protected information...

Envato WoWonder 安全特征问题漏洞

Envato WoWonder is an application from the Australian company Envato. It provides a PHP social networking script. WoWonder suffers from a security signature issue vulnerability that stems from a weak encryption algorithm in recovery.php in WoWonder 3.0.4. An attacker can exploit this vulnerabilit...

Inadequate Encryption Strength

Primetek Primefaces 5.x is vulnerable to a weak encryption flaw resulting in remote code execution...

GHSA-J239-4GQG-5J54 Inadequate Encryption Strength

Primetek Primefaces 5.x is vulnerable to a weak encryption flaw resulting in remote code execution...

IBM Security Guardium Weak Encryption Algorithm Vulnerability

IBM Security Guardium is a suite of platforms from IBM in the United States that provide data protection capabilities. The platform includes features such as custom UI, report management and streamlined audit process building. A weak cryptographic algorithm vulnerability exists in IBM Security...

CVE-2020-18220

Weak Encoding for Password in DoraCMS v2.1.1 and earlier allows attackers to obtain sensitive information as it does not use a random salt or IV for its AES-CBC encryption, causes password encrypted for users to be susceptible to dictionary attacks...

CVE-2021-27457

A vulnerability has been found in multiple revisions of Emerson Rosemount X-STREAM Gas Analyzer. The affected products utilize a weak encryption algorithm for storage of sensitive data, which may allow an attacker to more easily obtain credentials used for access...

Design/Logic Flaw

A vulnerability has been found in multiple revisions of Emerson Rosemount X-STREAM Gas Analyzer. The affected products utilize a weak encryption algorithm for storage of sensitive data, which may allow an attacker to more easily obtain credentials used for access...

CVE-2021-27457

CVE-2021-27457 affects Emerson Rosemount X-STREAM Gas Analyzer (X-STREAM enhanced XEGP, XEGK, XEFD, XEXF—all revisions). The root cause is inadequate encryption strength used to store sensitive data, which could allow an attacker to obtain credentials. ICSA/CISA report CVSSv3.1 base score 7.5 (hi...