| Titel | Shinrays Games Goods Triple - Cat Goods Sort(cats.goods.sort.sorting.games) 1.200 Exposed Cryptographic Key and IV |
|---|
| Beschreibung | In the Android application cats.goods.sort.sorting.games version 1.200 containing the class com.jh.utils.jRwTX , a hardcoded AES key and IV were discovered. Attackers can extract these static strings through reverse engineering and use them to decrypt server responses, potentially gaining access to sensitive information such as AppsFlyer attribution data. |
|---|
| Quelle | ⚠️ https://www.notion.so/Exposed-Cryptographic-Key-and-IV-in-cats-goods-sort-sorting-games-3262de3f97fb801499ebc3dfd56e232e?source=copy_link |
|---|
| Benutzer | fxizenta (UID 28116) |
|---|
| Einreichung | 17.03.2026 13:21 (vor 20 Tagen) |
|---|
| Moderieren | 02.04.2026 13:46 (16 days later) |
|---|
| Status | Akzeptiert |
|---|
| VulDB Eintrag | 354856 [Shinrays Games Goods Triple App bis 1.200 cats.goods.sort.sorting.games jRwTX.java AES_IV/AES_PASSWORD schwache Verschlüsselung] |
|---|
| Punkte | 15 |
|---|