EUVD-2021-19365

Malware in sbrugna...

EUVD-2012-1373

Malware in sbrugna...

EUVD-2019-6033

Malware in sbrugna...

EUVD-2019-4115

Malware in sbrugna...

EUVD-2024-47157

Malicious code in bioql PyPI...

EUVD-2023-43919

Malicious code in bioql PyPI...

EUVD-2025-16151

Malicious code in bioql PyPI...

EUVD-2022-29899

Malicious code in bioql PyPI...

EUVD-2022-29900

Malicious code in bioql PyPI...

EUVD-2022-0127

Malicious code in bioql PyPI...

EUVD-2024-19368

Malicious code in bioql PyPI...

EUVD-2023-3072

Malicious code in bioql PyPI...

EUVD-2024-0999

Malicious code in bioql PyPI...

PT-2025-40366

Name of the Vulnerable Software and Affected Versions AndSoft e-TMS version 25.03 Description The software uses the MD5 hash algorithm to encrypt passwords. MD5 is considered a cryptographically weak hash algorithm and is susceptible to collision attacks, potentially exposing user credentials...

Use of Weak Hash

Overview Affected versions of this package are vulnerable to Use of Weak Hash like the Md5 hash. An attacker can bypass file integrity verification by generating files with colliding MD5 hashes and distributing malicious content that passes integrity checks. Remediation Upgrade...

CVE-2025-55053

CVE-2025-55053 is a CWE-328 weak-hash issue. Connected sources indicate Baicells devices (NOVA430e/430i, NOVA436Q, NEUTRINO430, NOVA846) are affected, with the vulnerability stemming from weak hashing that could bypass security features. There is no explicit product/version-specific fix details i...

Linux Distros Unpatched Vulnerability : CVE-2025-38079

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - crypto: algifhash - fix double free in hashaccept If accept2 is called on socket type algifhash with MSGMORE flag set and cryptoahashimport fails, sk2 is freed...

CVE-2025-5922

Access to TSplus Remote Access Admin Tool is restricted to administrators unless "Disable UAC" option is enabled and requires a PIN code. In versions below v18.40.6.17 the PIN's hash is stored in a system registry accessible to regular users, making it possible to perform a brute-force attack usi...

CVE-2025-7789

A vulnerability was found in Xuxueli xxl-job up to 3.1.1 and classified as problematic. Affected by this issue is the function makeToken of the file src/main/java/com/xxl/job/admin/controller/IndexController.java of the component Token Generation. The manipulation leads to password hash with...

The vulnerability of the md5 function in the package manager pnpm allows a hacker to compromise data integrity.

The vulnerability of the md5 function in the package manager pnpm relates to the use of a reversible one-way hash function. Exploiting this vulnerability could allow an attacker to compromise the integrity of data...