EUVD-2006-0211

Malware in sbrugna...

EUVD-2010-3762

Malware in sbrugna...

EUVD-2020-18793

Malware in sbrugna...

EUVD-2018-8071

Malware in sbrugna...

EUVD-2010-0041

Malware in sbrugna...

EUVD-2000-0740

Malware in sbrugna...

EUVD-2023-12609

Malicious code in bioql PyPI...

EUVD-2023-35449

Malicious code in bioql PyPI...

EUVD-2022-36774

Malicious code in bioql PyPI...

EUVD-2024-1127

Malicious code in bioql PyPI...

EUVD-2024-31701

Malicious code in bioql PyPI...

EUVD-2022-4011

Malicious code in bioql PyPI...

EUVD-2022-34574

Malicious code in bioql PyPI...

EUVD-2022-33613

Malicious code in bioql PyPI...

Linux Distros Unpatched Vulnerability : CVE-2023-0567

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In PHP 8.0.X before 8.0.28, 8.1.X before 8.1.16 and 8.2.X before 8.2.3, passwordverify function may accept some invalid Blowfish hashes as valid. If such invali...

BIT-LIBPHP-2024-3096 PHP function password_verify can erroneously return true when argument contains NUL

In PHP version 8.1. before 8.1.28, 8.2. before 8.2.18, 8.3. before 8.3.5, if a password stored with passwordhash starts with a null byte \x00, testing a blank string as the password via passwordverify will incorrectly return true...

BIT-LIBPHP-2023-0567 password_verify() always returns true for some invalid hashes

In PHP 8.0.X before 8.0.28, 8.1.X before 8.1.16 and 8.2.X before 8.2.3, passwordverify function may accept some invalid Blowfish hashes as valid. If such invalid hash ever ends up in the password database, it may lead to an application allowing any password for this entry as valid...

PT-2025-28025 · Netalertx · Netalertx

Name of the Vulnerable Software and Affected Versions: NetAlertX versions prior to 25.6.7 Description: NetAlertX is a network, presence scanner, and alert framework. A vulnerability in the authentication logic allows users to bypass password verification using SHA-256 magic hashes due to a loose...

CVE-2024-30257

1Panel is an open source Linux server operation and maintenance management panel. The password verification in the source code uses the != symbol instead hmac.Equal. This may lead to a timing attack vulnerability. This vulnerability is fixed in 1.10.3-lts...

CVE-2022-33735

There is a password verification vulnerability in WS7200-10 11.0.2.13. Attackers on the LAN may use brute force cracking to obtain passwords, which may cause sensitive system information to be disclosed...