Search Vulnerabilities

CWE-326 in BOSH allows a local attacker to steal Basic-auth credentials or redirect UAA token requests via MITM

electerm's encrypt method not safe enough

Note Mark: JWT Secret Weakness allows Full Account Takeover via token forgery

fast-jwt: Empty HMAC secret accepted via async key resolver - JWT auth bypass

Meari weak XOR obfuscation

ELBA5 5.8.0 Remote Code Execution via Database Access

Encryption vulnerable to brute-force decryption in GoAnywhere MFT

Use of weak cryptographic key in TP-Link Archer C7

OrangeHRM Uses AES-ECB for Sensitive Data Encryption Enables Pattern Disclosure

AVideo has an unauthenticated decrypt oracle leaking any ciphertext

AVideo has a PGP 2FA Bypass via Cryptographically Broken 512-bit RSA Key Generation in LoginControl Plugin

IBM Security QRadar EDR Software has multiple vulnerabilities

Jervis has a Salt for PBKDF2 derived from password

Obsolete Encryption Algorithm Used in NW AS Java UME User Mapping

Sprecher Automation: SPRECON-E series prone to weak encryption of update files

Forward Secrecy Violation in WolfSSL TLS 1.3

Non-Compliant TLS Configuration

Apache Spark, Apache Spark: RPC encryption defaults to unauthenticated AES-CTR mode, enabling man-in-the-middle ciphertext modification attacks

.NET, .NET Framework, and Visual Studio Information Disclosure Vulnerability

Inadequate encryption strength issue exists in SS1 Ver