Threats tagged 'ghsa-9363-c6w4-4xc7'

1 threat

Threats tagged 'ghsa-9363-c6w4-4xc7'
Severity	CVSS	Signals	Threat	Source	Published	Score and star
High	8.7	EPSS 0.5%	CVE-2026-111612netdisk-fast-download · Use of Hard-coded Cryptographic Key High8.7EPSS 0.5%2026-10-16CVE Database V5CVE-2026-111612 netdisk-fast-download through 0.4.8 contains an information disclosure vulnerability that allows unauthenticated attackers to retrieve donated netdisk credentials via the /v2/randomAuth endpoint in ParserApi. Attackers can repeatedly call the endpoint and decrypt the encryptedAuth blob using the hard-coded AES key nfd_auth_key2026 to recover other users' cloud-drive cookies, tokens, or passwords. EPSS 0.5%Vulnerability qaiu #ghsa-9363-c6w4-4xc7	CVE Database V5	2026-10-16

Showing 1–1 of 1 result