Lucene search
+L

10 matches found

NVD
NVD
•added 2026/09/08 6:21 p.m.•9 views

CVE-2026-86670

A flaw has been found in aircheng-org iWebShop-5 up to 5.15. This impacts an unknown function of the file controllers/admin.php of the component Authentication Storage. Executing a manipulation of the argument Password can lead to password hash with insufficient computational effort. It is possib...

6.3CVSS0.00383EPSS
SaveExploits0References6
Vulnrichment
Vulnrichment
•added 2026/09/08 5:30 p.m.•10 views

CVE-2026-86670 aircheng-org iWebShop-5 Authentication Storage admin.php weak password hash

A flaw has been found in aircheng-org iWebShop-5 up to 5.15. This impacts an unknown function of the file controllers/admin.php of the component Authentication Storage. Executing a manipulation of the argument Password can lead to password hash with insufficient computational effort. It is possib...

6.3CVSS4.3AI score0.00383EPSS
SaveExploits0References6
OSV
OSV
•added 2026/09/08 5:30 p.m.•9 views

CVE-2026-86670 aircheng-org iWebShop-5 Authentication Storage admin.php weak password hash

A flaw has been found in aircheng-org iWebShop-5 up to 5.15. This impacts an unknown function of the file controllers/admin.php of the component Authentication Storage. Executing a manipulation of the argument Password can lead to password hash with insufficient computational effort. It is possib...

6.3CVSS4.4AI score
SaveExploits0References8
Cvelist
Cvelist
•added 2026/09/08 5:30 p.m.•40 views

CVE-2026-86670 aircheng-org iWebShop-5 Authentication Storage admin.php weak password hash

A flaw has been found in aircheng-org iWebShop-5 up to 5.15. This impacts an unknown function of the file controllers/admin.php of the component Authentication Storage. Executing a manipulation of the argument Password can lead to password hash with insufficient computational effort. It is possib...

6.3CVSS0.00383EPSS
SaveExploits0References6
EUVD
EUVD
•added 2026/09/08 5:30 p.m.•10 views

EUVD-2026-73927

A flaw has been found in aircheng-org iWebShop-5 up to 5.15. This impacts an unknown function of the file controllers/admin.php of the component Authentication Storage. Executing a manipulation of the argument Password can lead to password hash with insufficient computational effort. It is possib...

6.3CVSS4.3AI score0.00383EPSS
SaveExploits0References6
CVE
CVE
•added 2026/09/08 5:30 p.m.•15 views

CVE-2026-86670

aircheng-org iWebShop-5 versions up to 5.15 contain a vulnerability in the Authentication Storage component within the file controllers/admin.php . Manipulating the Password argument can result in a password hash with insufficient computational effort , effectively weakening credential protection...

6.3CVSS4.3AI score0.00383EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
•added 2026/09/08 12:00 a.m.•59 views

PT-2026-88154

A flaw has been found in aircheng-org iWebShop-5 up to 5.15. This impacts an unknown function of the file controllers/admin.php of the component Authentication Storage. Executing a manipulation of the argument Password can lead to password hash with insufficient computational effort. It is possib...

6.3CVSS4.3AI score0.00383EPSS
SaveExploits0References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/08 12:00 a.m.•2 views

CVE-2026-86670: Use of Password Hash With Insufficient Computational Effort

A flaw has been found in aircheng-org iWebShop-5 up to 5.15. This impacts an unknown function of the file controllers/admin.php of the component Authentication Storage. Executing a manipulation of the argument Password can lead to password hash with insufficient computational effort. It is possib...

6.3CVSS4.3AI score0.00383EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2026/03/23 12:00 a.m.•20 views

Nexxt Solutions Nebula 300+ 安全漏洞

The Nexxt Solutions Nebula 300+ is a wireless router produced by the American company Nexxt Solutions. Versions of the Nebula 300+ prior to 12.01.01.37 contain security vulnerabilities. These vulnerabilities stem from improper storage of authentication materials, which could lead to the creation ...

9.8CVSS5.8AI score0.00457EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2024/01/03 7:15 p.m.•10 views

CVE-2023-5879 Aladdin Connect Android Application Insecure Storage

Users’ product account authentication data was stored in clear text in The Genie Company Aladdin Connect Mobile Application Version 5.65 Build 2075 and below on Android Devices. This allows the attacker, with access to the android device, to potentially retrieve users' clear text authentication...

6.9AI score0.00419EPSS
SaveExploits0References1
Rows per page
Query Builder