Lucene search
+L

13355 matches found

Circl
Circl
added 2025/03/30 8:36 p.m.11 views

CVE-2025-2954

creationtimestamp| type| source ---|---|--- 2025-03-30 20:36:07+00:00| seen| https://t.me/cvedetector/21516 2025-03-31 13:31:19+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/9644...

5.5CVSS4AI score0.00161EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
added 2025/03/30 6:36 p.m.13 views

CVE-2025-2920

A vulnerability was found in Netis WF-2404 1.1.124EN. It has been rated as problematic. This issue affects some unknown processing of the file /еtc/passwd. The manipulation leads to use of weak hash. It is possible to launch the attack on the physical device. The complexity of an attack is rather...

2CVSS6.7AI score0.00131EPSS
SaveExploits0References1
NVD
NVD
added 2025/03/28 6:15 p.m.10 views

CVE-2025-2920

A vulnerability was found in Netis WF-2404 1.1.124EN. It has been rated as problematic. This issue affects some unknown processing of the file /еtc/passwd. The manipulation leads to use of weak hash. It is possible to launch the attack on the physical device. The complexity of an attack is rather...

2CVSS0.00131EPSS
SaveExploits0References4
CVE
CVE
added 2025/03/28 6:00 p.m.57 views

CVE-2025-2920

CVE-2025-2920 affects Netis WF-2404 (firmware 1.1.124EN). The issue involves processing of the file /etc/passwd leading to use of a weak hash. Impact is described as low confidentiality impact with local, physical access required; attack complexity is high and exploitation is difficult. Public di...

2CVSS6.6AI score0.00131EPSS
SaveExploits0References4
Vulnrichment
Vulnrichment
added 2025/03/28 6:00 p.m.14 views

CVE-2025-2920 Netis WF-2404 passwd weak hash

A vulnerability was found in Netis WF-2404 1.1.124EN. It has been rated as problematic. This issue affects some unknown processing of the file /еtc/passwd. The manipulation leads to use of weak hash. It is possible to launch the attack on the physical device. The complexity of an attack is rather...

2CVSS6.6AI score0.00131EPSS
SaveExploits0References4
Cvelist
Cvelist
added 2025/03/28 6:00 p.m.34 views

CVE-2025-2920 Netis WF-2404 passwd weak hash

A vulnerability was found in Netis WF-2404 1.1.124EN. It has been rated as problematic. This issue affects some unknown processing of the file /еtc/passwd. The manipulation leads to use of weak hash. It is possible to launch the attack on the physical device. The complexity of an attack is rather...

2CVSS0.00131EPSS
SaveExploits0References4
Veracode
Veracode
added 2025/03/28 10:50 a.m.23 views

MD5 Hash Collisions

sagemaker is vulnerable to MD5 Hash Collisions. The vulnerability is due to weak hashing in workflow identification due to the reuse of results from different configurations that produce the same MD5 hash, potentially leading to unintended workflow replacements and integrity issues...

5.9CVSS7AI score0.00255EPSS
SaveExploits0References4Affected Software1
CNNVD
CNNVD
added 2025/03/28 12:00 a.m.12 views

Netis Systems WF-2404 安全漏洞

The Netis Systems WF-2404 is a wireless router from Netis Systems. A security vulnerability exists in the Netis Systems WF-2404 version 1.1.124EN, which stems from weak hash usage and requires physical device access...

2CVSS4.1AI score0.00131EPSS
SaveExploits0References5
GithubExploit
GithubExploit
added 2025/03/27 2:36 p.m.314 views

Exploit for Exposure of Sensitive Information to an Unauthorized Actor in Microsoft

CVE-2025-24071 / CVE-2025-24054 PoC Edit: MICROSOFT HAS BEE...

6.5CVSS7.8AI score0.58909EPSS
SaveExploits36
BDU FSTEC
BDU FSTEC
added 2025/03/27 12:00 a.m.8 views

The vulnerability of the sock_map component in the Linux operating system’s kernel allows a hacker to cause a service failure.

The vulnerability of the sockhashfree function in the sockmap component of the Linux kernel is related to improper locking mechanisms. Exploiting this vulnerability could allow an attacker to cause a service failure...

5.5CVSS6.6AI score0.00231EPSS
SaveExploits0References19Affected Software9
BDU FSTEC
BDU FSTEC
added 2025/03/27 12:00 a.m.9 views

The vulnerability of the Hash Handler component in the 389-ds-base package allows a hacker to trigger a service failure.

The vulnerability of the Hash Handler component in the 389-ds-base package is related to insufficient password hashing. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...

5.7CVSS6.6AI score0.00578EPSS
SaveExploits0References11Affected Software10
Circl
Circl
added 2025/03/26 10:25 p.m.12 views

CVE-2025-20227

creationtimestamp| type| source ---|---|--- 2025-03-26 22:25:37+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/8998 2025-03-26 23:56:00+00:00| seen| https://t.me/cvedetector/21239...

4.3CVSS4.8AI score0.00413EPSS
SaveExploits0References2
RustSec
RustSec
added 2025/03/26 12:00 p.m.87 views

Potential out-of-bounds read with a malformed ELF file and the HashTable API.

Affected versions of this crate only validated the index argument of HashTable::getbucket and HashTable::getchain against the input-controlled bucketcount and chaincount fields, but not against the size of the ELF section. As a result, a malformed ELF file could trigger out-of-bounds reads in a...

7AI score
SaveExploits0Affected Software1
NVD
NVD
added 2025/03/26 11:15 a.m.17 views

CVE-2025-27552

DBIx::Class::EncodedColumn use the rand function, which is not cryptographically secure to salt password hashes. This vulnerability is associated with program files Crypt/Eksblowfish/Bcrypt.pm. This issue affects DBIx::Class::EncodedColumn until 0.00032...

4CVSS0.00116EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2025/03/26 11:08 a.m.21 views

CVE-2025-27552 DBIx::Class::EncodedColumn until 0.00032 for Perl uses insecure rand() function for salting password hashes in Crypt/Eksblowfish/Bcrypt.pm

DBIx::Class::EncodedColumn use the rand function, which is not cryptographically secure to salt password hashes. This vulnerability is associated with program files Crypt/Eksblowfish/Bcrypt.pm. This issue affects DBIx::Class::EncodedColumn until 0.00032...

0.00116EPSS
SaveExploits0References2
CVE
CVE
added 2025/03/26 11:08 a.m.68 views

CVE-2025-27552

CVE-2025-27552 affects the Perl DBIx::Class::EncodedColumn component, where the salting of password hashes uses the non-cryptographically secure rand() function in Crypt/Eksblowfish/Bcrypt.pm. The issue impacts DBIx::Class::EncodedColumn up to version 0.00032. According to the connected documents...

4CVSS7.3AI score0.00116EPSS
SaveExploits0References2
AlpineLinux
AlpineLinux
added 2025/03/25 10:15 a.m.8 views

CVE-2025-2757

A vulnerability classified as critical was found in Open Asset Import Library Assimp 5.4.3. This vulnerability affects the function AIMD5PARSESTRINGINQUOTATION of the file code/AssetLib/MD5/MD5Parser.cpp of the component MD5 File Handler. The manipulation of the argument data leads to heap-based...

8.8CVSS7.5AI score0.00531EPSS
SaveExploits1References5
OSV
OSV
added 2025/03/25 10:15 a.m.3 views

DEBIAN-CVE-2025-2757

A vulnerability classified as critical was found in Open Asset Import Library Assimp 5.4.3. This vulnerability affects the function AIMD5PARSESTRINGINQUOTATION of the file code/AssetLib/MD5/MD5Parser.cpp of the component MD5 File Handler. The manipulation of the argument data leads to heap-based...

8.8CVSS6.6AI score0.00531EPSS
SaveExploits1References1
OSSF Malicious Packages
OSSF Malicious Packages
added 2025/03/24 8:08 a.m.9 views

Malicious code in f2d5cfdc642c3d5 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 ea846c355b07f5a44c9e9add5eccd50fcf359359f6fdc49de3f7b696697b87c2 During installation, the code either exfiltrate some information about the system or download and execute remote code --- Category: MALICIOUS - The campaign ha...

7.5AI score
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/03/22 1:24 p.m.34 views

CVE-2025-0508

A vulnerability in the SageMaker Workflow component of aws/sagemaker-python-sdk allows for the possibility of MD5 hash collisions in all versions. This can lead to workflows being inadvertently replaced due to the reuse of results from different configurations that produce the same MD5 hash. This...

5.9CVSS7.2AI score0.00255EPSS
SaveExploits0References1
Rows per page
Query Builder