99 matches found
PT-2026-64090
A flaw has been found in LMCache up to 0.4.6. This affects the function hex hash to int16 of the file lmcache/integration/vllm/utils.py of the component KV Cache Handler. Executing a manipulation can lead to use of weak hash. The attack needs to be launched locally. The attack requires a high lev...
CVE-2026-48009 Shopware: Admin Account Takeover via User Recovery Hash Exposure
Shopware is an open commerce platform. Prior to 6.6.10.18 and 6.7.10.1, a low-privilege admin user with userrecovery:read ACL can take over any admin account by triggering POST /api/action/user/user-recovery, reading the password recovery hash through POST /api/search/user-recovery, and using PAT...
CVE-2026-14630
A vulnerability has been found in ForceInjection AI-fundermentals 2.0/3.0. Affected by this vulnerability is the function getconversationhistory of the file 08agenticsystem/memory/langchain/code/smartcustomerservice.py of the component Memory Recall Handler. The manipulation leads to use of weak...
PT-2026-53898
Name of the Vulnerable Software and Affected Versions PostgreSQL Anonymizer versions prior to 3.1.2 Description Unprivileged masked users can repeatedly call the anon.hash function to collect seed and hash output pairs. This allows for an offline brute-force attack to deduce the salt...
Tridium Niagara Use of Password Hash With Insufficient Computational Effort (CVE-2025-3937)
Use of Password Hash With Insufficient Computational Effort vulnerability in Tridium Niagara Framework on Windows, Linux, QNX, Tridium Niagara Enterprise Security on Windows, Linux, QNX allows Cryptanalysis. This issue affects Niagara Framework: before 4.14.2, before 4.15.1, before 4.10.11; Niaga...
Use of Weak Hash
Overview Affected versions of this package are vulnerable to Use of Weak Hash in the chunker.go process of the Qdrant Backend. An attacker can compromise data integrity or availability by exploiting the use of a weak hash algorithm in remote scenarios with low privileges and high attack complexit...
CVE-2026-11329
A vulnerability has been found in onnx onnx-mlir up to 0.5.0.0. Affected by this issue is the function generatehashkey of the file src/Runtime/python/torchonnxmlir/src/torchonnxmlir/backend.py of the component Placeholder Node Cache Handler. Such manipulation leads to use of weak hash. An attack...
EUVD-2026-34828
A weakness has been identified in thedotmack claude-mem up to 11.0.1. The affected element is the function computeObservationContentHash of the file src/services/sqlite/observations/store.ts of the component Observation Content Hash Handler. This manipulation causes use of weak hash. The attack c...
CVE-2026-10803
MLflow up to 3.10.0 contains a flaw in mlflow.data.digest_utils (Digest Computation) where manipulation leads to use of a weak hash. This affects the Digest Utils function in the Dataset Digest Computation component and enables a local attack. The reported exploitability is high in complexity wit...
Use of Weak Hash
Overview gradio is a Python library for easily interacting with trained machine learning models Affected versions of this package are vulnerable to Use of Weak Hash via the saveaudiotocache function of the Audio Cache Key Handler component. Different audio outputs with identical samples therefore...
PT-2026-46251
Name of the Vulnerable Software and Affected Versions LMCache versions prior to 0.4.7 Description A flaw in the KV Cache Handler component affects the hex hash to int16 function within the lmcache/integration/vllm/utils.py file. A local attacker can perform a manipulation that leads to the use of...
The vulnerability of the SICK DL100 laser sensor lies in the use of a reversible one-way hash function, which allows a intruder to influence the integrity of the device.
The vulnerability of the SICK DL100 laser sensor lies in the use of a reversible one-way hash function. Exploiting this vulnerability allows an attacker to remotely influence the integrity of the device by obtaining the password...
CVE-2025-66511
Nextcloud Calendar is a calendar app for Nextcloud. Prior to 6.0.3, the Calendar app generates participant tokens for meeting proposals using a hash function, allowing an attacker to compute valid participant tokens, which allowed them to request details and submit dates in meeting proposals. The...
Use of password hash with insufficient computational effort vulnerability in BUFFALO Wi-Fi router "WSR-1800AX4 series"
Overview Wi-Fi router "WSR-1800AX4 series" provided by BUFFALO INC. contains the following vulnerability. Use of password hash with insufficient computational effort CWE-916 - CVE-2025-46413 Kazuaki Chikamori and Takayuki Tatekawa of National Institute of Technology, Kochi College reported this...
CVE-2025-47776
Mantis Bug Tracker MantisBT is an open source issue tracker. Due to incorrect use of loose == instead of strict === comparison in the authentication code in versions 2.27.1 and below.PHP type juggling will cause certain MD5 hashes matching scientific notation to be interpreted as numbers. Instanc...
EUVD-2011-3154
Malware in sbrugna...
EUVD-2020-16108
Malware in sbrugna...
EUVD-2013-5301
Malware in sbrugna...