630 matches found
hassh
"HASSH" - SSHクライアントおよびサーバーのプロファイリング手法。 注記：このCorelightリポジトリは、元のリポジトリがメンテナンスされていないSalesforceからの要請に応じて、積極的にメンテナンスできるように作成されました。 "HASSH" は、特定のSSHクライアントおよびサーバー実装を識別するために使用できるネットワークフィンガープリンティング標準です。フィンガープリントは、MD5フィンガープリントの形式で簡単に保存、検索、共有できます。 HASSHでできること：...
CVE-2022-45599
CVE-2022-45599 CVE URL:| https://vulners.com/cve/CVE-2022-45599 ---|--- 報告者:| TanYeeTat 製品:| Aztech WMB250AC ワイヤレスメッシュルーター 影響を受けるファームウェア:| 2020年リリース topaz-linux.lzma.img ファームウェアのダウンロード:| クローズドソース 製品マニュアル: https://kylaconnect.com/download-center/ 脆弱性は、2022年6月7日に [email protected] 経由で Aztech...
WordPress Redux Framework <=4.2.11 - Information Disclosure
WordPress Redux Framework plugin through 4.2.11 is susceptible to information disclosure. The plugin registers several unique AJAX actions available to unauthenticated users in the includes function in redux-core/class-redux-core.php. These are predictable, given that they are based on an md5 has...
CVE-2017-14262
SamsungNVRvul CVE-2017-14262 xfuturesec Co., Ltd 首先，获取 'admin' 账户的 MD5 哈希密码。 发送： GET http://192.168.1.14/cgi-bin/main-cgi?json="cmd":201,"szUserNameQry":"admin","szUserName":"","u32UserLoginHandle":0 HTTP/1.1 Host: 192.168.1.14 User-Agent: Mozilla/5.0 Windows NT 6.3; WOW64; rv:55.0 Gecko/20100101...
CVE-2019-9053
CVE-2019-9053 Daniele Scanu 的 SQL 注入漏洞利用代码改进版 已应用以下更改： 新增时间控制变量 -t 或 --time，允许用户延长 SQL 注入的计时（在主机间网络连接存在数据包传输延迟时有用） 添加网络异常处理：在数据包/连接/响应丢失时重试（原版 Python 会抛出异常，需要重新开始） 在获取哈希/盐值时无需使用完整字典，因为其以十六进制表示，因此使用精简字典 0123456789abcdef 以加快速度 Python3 要求 hashlib.md5 参数必须编码，因此哈希查找函数已相应重写 尽情使用吧！...
hassh
"HASSH" - SSH 클라이언트 및 서버용 프로파일링 방법. "HASSH"는 특정 클라이언트 및 서버 SSH 구현을 식별하는 데 사용할 수 있는 네트워크 지문 표준입니다. 지문은 MD5 지문 형태로 쉽게 저장, 검색 및 공유할 수 있습니다. HASSH는 2018년 Salesforce에서 발명되었습니다. 그러나 이 프로젝트는 더 이상 Salesforce에서 적극적으로 유지 관리되지 않습니다. 원래 제작자 Ben Reardon은 Corelight에서 활성 포크를 유지 관리하고 있습니다. HASSH가 도움이 되는 사항: 잘 통제...
CVE-2021-3831
PHP Exploit CVE-2021-3831 スクリプト 概要 このPHPスクリプトは、特定のMD5ハッシュを生成し、HTTPリクエストを送信して対象ウェブサイトとやり取りすることで、潜在的な脆弱性を悪用するように設計されています。教育目的を意図しており、脆弱性のテストを行う明示的な許可がある環境でのみ使用する必要があります。 特徴 動的ターゲット入力: スクリプトはコマンドライン引数としてターゲットURLを受け取り、柔軟な使用を可能にします。 安全なHTTPリクエスト: HTTPリクエストを行うためにcURLを利用し、堅牢なエラーハンドリングとセキュリティを提供します。...
AntiWeb_testing-Suite
ICS/OT AntiWeb: 测试套件 介绍 在运行于Anti-Web服务器（最高版本3.8.7）上的ICS/OT相关Web应用程序中发现了一个漏洞。已识别的漏洞影响工业过程自动化和电信行业的多个知名制造商。这些设备已有两个类似且古老的CVE（CVE-2010-4730 和 CVE-2010-4733），在报告后获得了第三个CVE（2017-9097），随后供应商立即发布了补丁。紧接着其他补丁也相继发布。 为了大致了解这些设备的暴露程度，我们利用Shodan上索引的主机，发现潜在易受攻击的设备略多于800台。...
CVE-2026-70557 diboot-core Authenticated Arbitrary Field Read via loadRelatedData Discloses Password Hashes and Salts
diboot-core's POST /common/load-related-data endpoint resolves caller-supplied field names to any @TableField column of any entity and returns those values for all rows, with no field or entity allowlist. The only guard, relatedDataSecurityCheck, returns true unconditionally, so any authenticated...
GHSA-JH6H-V6MP-H22V milvus: RBAC grantee-id uses truncated MD5 (64-bit), enabling privilege-binding collisions and cross-role privilege forgery
A vulnerability has been found in milvus-io milvus up to 2.6.13. This vulnerability affects unknown code of the file internal/metastore/kv/rootcoord/kvcatalog.go of the component Grantee ID Hash Handler. The manipulation leads to use of weak hash. The attack needs to be performed locally. The...
CVE-2026-42155 Magento LTS: Weak API Session ID — Predictable MD5 of Time-Derived Inputs
Magento Long Term Support LTS is an unofficial, community-driven project provides an alternative to the Magento Community Edition e-commerce platform with a high level of backward compatibility. Prior to 20.18.0, the XML-RPC / SOAP API session ID is generated using an outdated, time-based...
GHSA-2CWR-GCF9-PVXR Magento LTS has Weak API Session ID — Predictable MD5 of Time-Derived Inputs
Affected Version: OpenMage LTS ≤ 20.16.0 confirmed on 20.16.0 Affected File: https://github.com/OpenMage/magento-lts/blob/main/app/code/core/Mage/Api/Model/Session.php – start method Summary The XML-RPC / SOAP API session ID is generated using an outdated, time-based construction rather than a...
CVE-2026-7103
A vulnerability was determined in code-projects Chat System 1.0. Affected is an unknown function of the file updateuser.php of the component MD5 Hash Handler. This manipulation of the argument Password causes use of weak hash. The attack is possible to be carried out remotely. The attack's...
EUVD-2026-24137
FreeScout is a free self-hosted help desk and shared mailbox. Prior to version 1.8.213, an unauthenticated attacker can access diagnostic and system tools that should be restricted to administrators. The /system/cron endpoint relies on a static MD5 hash derived from the APPKEY, which is exposed i...
PT-2026-33992
FreeScout is a free self-hosted help desk and shared mailbox. Prior to version 1.8.213, an unauthenticated attacker can access diagnostic and system tools that should be restricted to administrators. The /system/cron endpoint relies on a static MD5 hash derived from the APP KEY, which is exposed ...
CVE-2026-23958
Dataease is an open source data visualization analysis tool. Prior to version 2.10.19, DataEase uses the MD5 hash of the user’s password as the JWT signing secret. This deterministic secret derivation allows an attacker to brute-force the admin’s password by exploiting unmonitored API endpoints...
CVE-2020-10539
An issue was discovered in Epikur before 20.1.1. The Epikur server contains the checkPasswort function that, upon user login, checks the submitted password against the user password's MD5 hash stored in the database. It is also compared to a second MD5 hash, which is the same for every user aka a...
CVE-1999-0900
Buffer overflow in rpc.yppasswdd allows a local user to gain privileges via MD5 hash generation...
CVE-2019-7666
Prima Systems FlexAir, Versions 2.3.38 and prior. The application allows improper authentication using the MD5 hash value of the password, which may allow an attacker with access to the database to login as admin without decrypting the password...