Lucene search
+L

14 matches found

ATTACKERKB
ATTACKERKB
added 3 days ago4 views

CVE-2026-6656

Crypt::Password versions through 0.28 for Perl are susceptible to timing attacks. The checkpassword method uses the built-in eq operator. This allows discrepancies in timing to be used to guess the underlying hash...

5.2AI score0.00282EPSS
SaveExploits0References3
Cvelist
Cvelist
added 3 days ago35 views

CVE-2026-6656 Crypt::Password versions through 0.28 for Perl are susceptible to timing attacks

Crypt::Password versions through 0.28 for Perl are susceptible to timing attacks. The checkpassword method uses the built-in eq operator. This allows discrepancies in timing to be used to guess the underlying hash...

0.00282EPSS
SaveExploits0References2
EUVD
EUVD
added 2026/05/22 12:31 a.m.25 views

EUVD-2026-31353

Catalyst::Plugin::Authentication versions through 0.10024 for Perl is susceptible to timing attacks. These versions use Perl's built-in eq comparison. Discrepencies in timing could be used to guess the underlying hash or password...

5.8AI score0.00196EPSS
SaveExploits0References3
ATTACKERKB
ATTACKERKB
added 2026/05/21 9:7 p.m.15 views

CVE-2026-5091

Catalyst::Plugin::Authentication versions through 0.10024 for Perl is susceptible to timing attacks. These versions use Perl's built-in eq comparison. Discrepencies in timing could be used to guess the underlying hash or password...

5.8AI score0.00196EPSS
SaveExploits0References3
Debian CVE
Debian CVE
added 2026/05/21 9:7 p.m.10 views

CVE-2026-5091

Catalyst::Plugin::Authentication versions through 0.10024 for Perl is susceptible to timing attacks. These versions use Perl's built-in eq comparison. Discrepencies in timing could be used to guess the underlying hash or password...

5.1CVSS5.8AI score0.00196EPSS
SaveExploits0
Positive Technologies
Positive Technologies
added 2026/05/21 12:0 a.m.14 views

PT-2026-42551

Catalyst::Plugin::Authentication versions through 0.10024 for Perl is susceptible to timing attacks. These versions use Perl's built-in eq comparison. Discrepencies in timing could be used to guess the underlying hash or password...

5.1CVSS5.8AI score0.00196EPSS
SaveExploits0References5
NVD
NVD
added 2026/05/20 9:16 p.m.20 views

CVE-2026-47373

Crypt::SaltedHash versions through 0.09 for Perl is susceptible to timing attacks. These versions use Perl's built-in eq comparison. Discrepencies in timing could be used to guess the underlying hash...

7.5CVSS0.00393EPSS
SaveExploits0References3
EUVD
EUVD
added 2026/05/20 8:25 p.m.21 views

EUVD-2026-31196

Crypt::SaltedHash versions through 0.09 for Perl is susceptible to timing attacks. These versions use Perl's built-in eq comparison. Discrepencies in timing could be used to guess the underlying hash...

5.8AI score0.00393EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2026/05/20 8:25 p.m.41 views

CVE-2026-47373 Crypt::SaltedHash versions through 0.09 for Perl is susceptible to timing attacks

Crypt::SaltedHash versions through 0.09 for Perl is susceptible to timing attacks. These versions use Perl's built-in eq comparison. Discrepencies in timing could be used to guess the underlying hash...

0.00393EPSS
SaveExploits0References2
Debian CVE
Debian CVE
added 2026/05/20 8:25 p.m.12 views

CVE-2026-47373

Crypt::SaltedHash versions through 0.09 for Perl is susceptible to timing attacks. These versions use Perl's built-in eq comparison. Discrepencies in timing could be used to guess the underlying hash...

7.5CVSS5.8AI score0.00393EPSS
SaveExploits0
Positive Technologies
Positive Technologies
added 2026/05/20 12:0 a.m.14 views

PT-2026-42265

Name of the Vulnerable Software and Affected Versions Crypt::SaltedHash versions prior to 0.110.0 Description Crypt::SaltedHash for Perl is susceptible to timing attacks because it uses Perl's built-in eq comparison. Discrepancies in timing could be used to guess the underlying hash...

9.1CVSS5.8AI score0.00397EPSS
SaveExploits0References18
Exploit DB
Exploit DB
added 2020/10/20 12:0 a.m.760 views

Ultimate Project Manager CRM PRO Version 2.0.5 - SQLi (Authenticated)

Exploit Title: Ultimate Project Manager CRM PRO 2.0.5 - SQLi Credentials Leakage Date: 2020-16-09 Exploit Author: nag0mez Vendor Homepage: https://ultimatepro.codexcube.com/ Version: = 2.0.5 Tested on: Kali Linux 2020.2 The SQLi injection does not allow UNION payloads. However, we can guess...

7.4AI score
SaveExploits0
CNVD
CNVD
added 2019/12/31 12:0 a.m.6 views

Unspecified Vulnerability in Mellow Fish YetiShare (CNVD-2020-00226)

Mellow Fish YetiShare is a PHP-based file hosting web system script from Mellow Fish UK. A security vulnerability exists in the class.userpeer.php file in Mellow Fish YetiShare versions 3.5.2 through 4.5.3, which stems from the program using an insecure method to create a password reset hash. An...

9.1CVSS7AI score0.00767EPSS
SaveExploits1References1
securityvulns
securityvulns
added 2011/10/01 12:0 a.m.105 views

openEngine 2.0 'id' Blind SQL Injection vulnerability

Advisory: openEngine 2.0 'id' Blind SQL Injection vulnerability Advisory ID: SSCHADV2011-019 Author: Stefan Schurtz Affected Software: Successfully tested on openEngine 2.0 100226 Vendor URL: http://www.openengine.de/ Vendor Status: informed CVE-ID: - ========================== Vulnerability...

8.3AI score
SaveExploits0
Rows per page
Query Builder