Lucene search
+L

26 matches found

Kitploit
Kitploit
•added 2026/09/28 10:59 p.m.•17 views

MurMurHash

MurMurHash Esta pequeña herramienta sirve para calcular un valor MurmurHash de un favicon para cazar sitios web de phishing en la plataforma Shodan. ¿Qué es MurMurHash? MurmurHash es una función hash no criptográfica adecuada para búsquedas basadas en hash de propósito general. El nombre proviene...

6.1AI score
SaveExploits0
AstraLinux
AstraLinux
•added 2026/09/14 12:01 p.m.•10 views

Astra Linux – Vulnerability in jq

jq is a command-line JSON processor. Before commit 0c7d133c3c7e37c00b6d46b658a02244fdd3c784, jq used MurmurHash3 with a hardcoded, publicly visible seed 0x432A9843 for all JSON object hash table operations. This allowed attackers to precompute key collisions offline. By providing a crafted JSON...

7.5CVSS6.6AI score0.00593EPSS
SaveExploits0References2
F5 Networks
F5 Networks
•added 2026/08/26 4:38 p.m.•9 views

K000163111: jq vulnerability CVE-2026-40164

Security Advisory Description jq is a command-line JSON processor. Before commit 0c7d133c3c7e37c00b6d46b658a02244fdd3c784, jq used MurmurHash3 with a hardcoded, publicly visible seed 0x432A9843 for all JSON object hash table operations, which allowed an attacker to precompute key collisions...

7.5CVSS6.1AI score0.00593EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
•added 2026/04/23 12:00 a.m.•12 views

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: jq (UTSA-2026-014272)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-014272 advisory. jq is a command-line JSON processor. Before commit 0c7d133c3c7e37c00b6d46b658a02244fdd3c784, jq used MurmurHash3 with a hardcoded, publicly visible seed 0x432A9843 f...

7.5CVSS6.9AI score0.00593EPSS
SaveExploits0References4
SUSE CVE
SUSE CVE
•added 2026/04/14 11:25 p.m.•15 views

SUSE CVE-2026-40164

jq is a command-line JSON processor. Before commit 0c7d133c3c7e37c00b6d46b658a02244fdd3c784, jq used MurmurHash3 with a hardcoded, publicly visible seed 0x432A9843 for all JSON object hash table operations, which allowed an attacker to precompute key collisions offline. By supplying a crafted JSO...

5.5CVSS5.8AI score0.00593EPSS
SaveExploits0References15
OSV
OSV
•added 2026/04/14 12:16 a.m.•10 views

AZL-82934 CVE-2026-40164 affecting package jq for versions less than 1.7.1-5

jq is a command-line JSON processor. Before commit 0c7d133c3c7e37c00b6d46b658a02244fdd3c784, jq used MurmurHash3 with a hardcoded, publicly visible seed 0x432A9843 for all JSON object hash table operations, which allowed an attacker to precompute key collisions offline. By supplying a crafted JSO...

7.5CVSS6.6AI score0.00593EPSS
SaveExploits0References1
OSV
OSV
•added 2026/04/14 12:16 a.m.•7 views

ALPINE-CVE-2026-40164

jq is a command-line JSON processor. Before commit 0c7d133c3c7e37c00b6d46b658a02244fdd3c784, jq used MurmurHash3 with a hardcoded, publicly visible seed 0x432A9843 for all JSON object hash table operations, which allowed an attacker to precompute key collisions offline. By supplying a crafted JSO...

7.5CVSS6.4AI score0.00593EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2026/04/14 12:00 a.m.•21 views

jq 安全漏洞

jq is a lightweight and flexible command-line JSON processor developed by jqlang. There is a security vulnerability in jq, which stems from the use of the MurmurHash3 algorithm that relies on hard-coded public seeds. This vulnerability could allow attackers to exploit the system by providing...

7.5CVSS5.8AI score0.00593EPSS
SaveExploits0References2
OSV
OSV
•added 2026/04/13 11:40 p.m.•12 views

CVE-2026-40164 jq: Algorithmic complexity DoS via hardcoded MurmurHash3 seed

jq is a command-line JSON processor. Before commit 0c7d133c3c7e37c00b6d46b658a02244fdd3c784, jq used MurmurHash3 with a hardcoded, publicly visible seed 0x432A9843 for all JSON object hash table operations, which allowed an attacker to precompute key collisions offline. By supplying a crafted JSO...

7.5CVSS7AI score
SaveExploits0References34
Vulnrichment
Vulnrichment
•added 2026/04/13 11:40 p.m.•9 views

CVE-2026-40164 jq: Algorithmic complexity DoS via hardcoded MurmurHash3 seed

jq is a command-line JSON processor. Before commit 0c7d133c3c7e37c00b6d46b658a02244fdd3c784, jq used MurmurHash3 with a hardcoded, publicly visible seed 0x432A9843 for all JSON object hash table operations, which allowed an attacker to precompute key collisions offline. By supplying a crafted JSO...

7.5CVSS5.8AI score0.00593EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2026/04/13 11:40 p.m.•72 views

CVE-2026-40164 jq: Algorithmic complexity DoS via hardcoded MurmurHash3 seed

jq is a command-line JSON processor. Before commit 0c7d133c3c7e37c00b6d46b658a02244fdd3c784, jq used MurmurHash3 with a hardcoded, publicly visible seed 0x432A9843 for all JSON object hash table operations, which allowed an attacker to precompute key collisions offline. By supplying a crafted JSO...

7.5CVSS0.00593EPSS
SaveExploits0References2
AlpineLinux
AlpineLinux
•added 2026/04/13 11:40 p.m.•27 views

CVE-2026-40164

jq is a command-line JSON processor. Before commit 0c7d133c3c7e37c00b6d46b658a02244fdd3c784, jq used MurmurHash3 with a hardcoded, publicly visible seed 0x432A9843 for all JSON object hash table operations, which allowed an attacker to precompute key collisions offline. By supplying a crafted JSO...

7.5CVSS5.8AI score0.00593EPSS
SaveExploits0
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/04/13 12:00 a.m.•2 views

CVE-2026-40164: Use of Weak Hash

jq is a command-line JSON processor. Before commit 0c7d133c3c7e37c00b6d46b658a02244fdd3c784, jq used MurmurHash3 with a hardcoded, publicly visible seed 0x432A9843 for all JSON object hash table operations, which allowed an attacker to precompute key collisions offline. By supplying a crafted JSO...

7.5CVSS5.8AI score0.00593EPSS
SaveExploits0References4
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•13 views

EUVD-2012-5291

Malware in sbrugna...

5CVSS6.3AI score0.01941EPSS
SaveExploits1References7
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•18 views

EUVD-2012-5292

Malware in sbrugna...

5CVSS6.1AI score0.02289EPSS
SaveExploits0References9
SUSE CVE
SUSE CVE
•added 2023/02/15 5:43 a.m.•12 views

SUSE CVE-2012-5373

Oracle Java SE 7 and earlier, and OpenJDK 7 and earlier, computes hash values without properly restricting the ability to trigger hash collisions predictably, which allows context-dependent attackers to cause a denial of service CPU consumption via crafted input to an application that maintains a...

5CVSS6.5AI score0.02289EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
•added 2023/02/15 5:43 a.m.•14 views

SUSE CVE-2012-5372

Rubinius computes hash values without properly restricting the ability to trigger hash collisions predictably, which allows context-dependent attackers to cause a denial of service CPU consumption via crafted input to an application that maintains a hash table, as demonstrated by a universal...

5CVSS6.5AI score0.01941EPSS
SaveExploits1References3
NVD
NVD
•added 2012/11/28 1:03 p.m.•34 views

CVE-2012-5372

Rubinius computes hash values without properly restricting the ability to trigger hash collisions predictably, which allows context-dependent attackers to cause a denial of service CPU consumption via crafted input to an application that maintains a hash table, as demonstrated by a universal...

5CVSS6.3AI score0.01941EPSS
SaveExploits1References5
UbuntuCve
UbuntuCve
•added 2012/11/28 1:03 p.m.•40 views

CVE-2012-5373

Oracle Java SE 7 and earlier, and OpenJDK 7 and earlier, computes hash values without properly restricting the ability to trigger hash collisions predictably, which allows context-dependent attackers to cause a denial of service CPU consumption via crafted input to an application that maintains a...

5CVSS5.9AI score0.02289EPSS
SaveExploits0References9
Prion
Prion
•added 2012/11/28 1:03 p.m.•29 views

Buffer overflow

Oracle Java SE 7 and earlier, and OpenJDK 7 and earlier, computes hash values without properly restricting the ability to trigger hash collisions predictably, which allows context-dependent attackers to cause a denial of service CPU consumption via crafted input to an application that maintains a...

5CVSS6.2AI score0.0317EPSS
SaveExploits1References7Affected Software3
Rows per page
Query Builder