| Titolo | Shinrays Games Goods Triple - Cat Goods Sort(cats.goods.sort.sorting.games) 1.200 Exposed Cryptographic Key and IV |
|---|
| Descrizione | In the Android application cats.goods.sort.sorting.games version 1.200 containing the class com.jh.utils.jRwTX , a hardcoded AES key and IV were discovered. Attackers can extract these static strings through reverse engineering and use them to decrypt server responses, potentially gaining access to sensitive information such as AppsFlyer attribution data. |
|---|
| Fonte | ⚠️ https://www.notion.so/Exposed-Cryptographic-Key-and-IV-in-cats-goods-sort-sorting-games-3262de3f97fb801499ebc3dfd56e232e?source=copy_link |
|---|
| Utente | fxizenta (UID 28116) |
|---|
| Sottomissione | 17/03/2026 13:21 (6 mesi fa) |
|---|
| Moderazione | 02/04/2026 13:46 (16 days later) |
|---|
| Stato | Accettato |
|---|
| Voce VulDB | 354856 [Shinrays Games Goods Triple App fino a 1.200 cats.goods.sort.sorting.games jRwTX.java AES_IV/AES_PASSWORD cifratura debole] |
|---|
| Punti | 15 |
|---|