密码学缺陷

弱算法、可预测的随机数、缺失的证书校验，往往藏在 SDK 和移动端里，影响面却很大。

影响

解密或伪造敏感数据，在中间人位置窃听或篡改通信

观察点

加密数据可被离线破解，或伪造的签名被服务端接受

修复

使用经过审计的加密库与现代算法（AES-GCM、Ed25519），使用 CSPRNG，并强制开启证书校验。

弱点分布

• 密码学问题（通用）188
• 证书校验不当69
• 敏感信息明文传输45
• 中间人攻击33
• Unlabeled20
• Use of a Broken or Risky Cryptographic Algorithm14
• Missing Required Cryptographic Step11
• Weak Cryptography for Passwords11
• Missing Encryption of Sensitive Data10
• Improper Validation of Certificate with Host Mismatch8
• Inadequate Encryption Strength7
• Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)6
• Improper Check for Certificate Revocation5
• Use of Hard-coded Cryptographic Key5
• Use of Insufficiently Random Values5
• Reusing a Nonce, Key Pair in Encryption4
• Use of a Key Past its Expiration Date4
• 违反安全设计原则（按标题归类）4
• Improper Verification of Cryptographic Signature3
• Information Exposure Through Timing Discrepancy3
• Exploiting Incorrectly Configured SSL/TLS2
• Key Exchange without Entity Authentication2
• Improper Following of a Certificate's Chain of Trust1
• Improper Validation of Certificate Expiration1
• Reversible One-Way Hash1
• Unprotected Transport of Credentials1

共现类别

暂无共现数据。

高票报告

当前状态 463 份 · 全部 463 · 筛选赏金 $85,147

1. 809
   WannaCrypt “Killswitch”HackerOne · 2017-05-13 · 未评级
   $0Unlabeled
2. 376
   Reflected XSS and sensitive data exposure, including payment details, on lioncityrentals.com.sgUber · 2020-05-01 · 高危
   $4,000敏感信息明文传输
3. 238
   Infromation Disclosure To Use of Hard-coded Cryptographic KeyReddit · 2024-02-07 · 中危
   $0Use of Hard-coded Cryptographic Key
4. 215
   Password Reset Link Leaked In Refer Header In Request To Third Party SitesNord Security · — · 未评级
   $0敏感信息明文传输
5. 191
   Key Reinstallation Attacks: Breaking WPA2 by forcing nonce reuseInternet Bug Bounty · 2017-11-03 · 中危
   $0Reusing a Nonce, Key Pair in Encryption
6. 170
   Slack DTLS uses a private key that is in the public domain, which may lead to SRTP stream hijackSlack · 2020-03-12 · 高危
   $2,000Use of Hard-coded Cryptographic Key
7. 135
   Build fetches jars over HTTPPortSwigger Web Security · 2019-06-11 · 中危
   $1,000中间人攻击
8. 133
   Account takeover due to misconfigurationMattermost · 2021-09-17 · 低危
   $0Use of a Key Past its Expiration Date
9. 129
   [3DS][SSL] Improper certificate validation allows an attacker to perform MitM attacksNintendo · 2020-12-18 · 低危
   $0证书校验不当
10. 111
    connect.8x8.com/api/v1: JWT Algorithm Confusion Vulnerability8x8 · 2026-07-22 · 高危
    $1,337Improper Verification of Cryptographic Signature
11. 91
    Password and mail address stored unencrypted in memory - Rockstar Game LauncherRockstar Games · 2023-10-28 · 中危
    $750Missing Encryption of Sensitive Data
12. 89
    Cleartext Transmission of Sensitive Information Leads to administrator accessHelium · 2020-05-30 · 中危
    $0敏感信息明文传输
13. 87
    fetlife.com/signup_step_profile expose access_token of mapbox.comFetLife · 2023-11-01 · 中危
    $0敏感信息明文传输
14. 86
    elections.k8s.io uses weak session secret key, may place elections at riskKubernetes · 2025-09-20 · 高危
    $250密码学问题（通用）
15. 84
    Cleartext Transmission of password via EmailSheer · 2024-04-22 · 低危
    $200敏感信息明文传输
16. 81
    Invite tokens have Insufficient entropy in GHES Management ConsoleGitHub · 2024-01-13 · 中危
    $0Use of Insufficiently Random Values
17. 79
    Sensitive Info Leak - An Attacker Can Retrieve All the Users Mobile Numbers at https://website-api.production.curve.app/api/waitlist/usCurve · 2020-10-23 · 中危
    $0敏感信息明文传输
18. 78
    SMTP interaction theft via MITMPortSwigger Web Security · 2020-11-04 · 中危
    $0密码学问题（通用）
19. 76
    Grammarly Keyboard for Android "Authorization Code with PKCE" flow implementation vulnerability that allows account takeoverSuperhuman (formerly Grammarly) · 2020-07-24 · 中危
    $0Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)
20. 73
    SameSite restrictions are lifted, and SameSite:Strict cookie are being sent.Brave Software · 2025-10-15 · 高危
    $0证书校验不当
21. 71
    明確な認証不備および潜在的な中間者攻撃の可能性（Clear Authentication Deficiencies & Potential for Man-in-the-Middle Attacks）Sony · 2025-07-09 · 高危
    $0Key Exchange without Entity Authentication
22. 71
    Title: Deceptive Manipulation of HTTP to HTTPS with VPN in Burp SuitePortSwigger Web Security · 2023-10-31 · 中危
    $0敏感信息明文传输
23. 67
    Leakage of traffic in plaintext towards the IP address of VPN serverMozilla · 2024-11-08 · 低危
    $0敏感信息明文传输
24. 66
    HMAC signature verification omits endpoint and payload allowing request forgery on CoinMate APICoinMate.io · 2026-05-20 · 低危
    $0Missing Required Cryptographic Step
25. 58
    0 Click account takeover via timed requests to ███████forgot-password (single-packet attack)Mars · 2024-07-12 · 高危
    $0Use of a Broken or Risky Cryptographic Algorithm