Tridium Niagara Use of Password Hash With Insufficient Computational Effort (CVE-2025-3937)

Use of Password Hash With Insufficient Computational Effort vulnerability in Tridium Niagara Framework on Windows, Linux, QNX, Tridium Niagara Enterprise Security on Windows, Linux, QNX allows Cryptanalysis. This issue affects Niagara Framework: before 4.14.2, before 4.15.1, before 4.10.11; Niaga...

Use of password hash with insufficient computational effort vulnerability in BUFFALO Wi-Fi router "WSR-1800AX4 series"

Overview Wi-Fi router "WSR-1800AX4 series" provided by BUFFALO INC. contains the following vulnerability. Use of password hash with insufficient computational effort CWE-916 - CVE-2025-46413 Kazuaki Chikamori and Takayuki Tatekawa of National Institute of Technology, Kochi College reported this...

EUVD-2018-15455

Malware in sbrugna...

EUVD-2012-1373

Malware in sbrugna...

EUVD-2012-2551

Malware in sbrugna...

EUVD-2019-6033

Malware in sbrugna...

EUVD-2021-19365

Malware in sbrugna...

EUVD-2014-8084

Malware in sbrugna...

EUVD-2020-16108

Malware in sbrugna...

EUVD-2020-3837

Malware in sbrugna...

EUVD-2024-19368

Malicious code in bioql PyPI...

EUVD-2025-16151

Malicious code in bioql PyPI...

EUVD-2022-29900

Malicious code in bioql PyPI...

EUVD-2024-47157

Malicious code in bioql PyPI...

EUVD-2023-3072

Malicious code in bioql PyPI...

EUVD-2024-0999

Malicious code in bioql PyPI...

EUVD-2022-0127

Malicious code in bioql PyPI...

PT-2025-40366

Name of the Vulnerable Software and Affected Versions AndSoft e-TMS version 25.03 Description The software uses the MD5 hash algorithm to encrypt passwords. MD5 is considered a cryptographically weak hash algorithm and is susceptible to collision attacks, potentially exposing user credentials...

CVE-2025-7789

A vulnerability was found in Xuxueli xxl-job up to 3.1.1 and classified as problematic. Affected by this issue is the function makeToken of the file src/main/java/com/xxl/job/admin/controller/IndexController.java of the component Token Generation. The manipulation leads to password hash with...

CVE-2024-21754

A use of password hash with insufficient computational effort vulnerability CWE-916 affecting FortiOS version 7.4.3 and below, 7.2 all versions, 7.0 all versions, 6.4 all versions and FortiProxy version 7.4.2 and below, 7.2 all versions, 7.0 all versions, 2.0 all versions may allow a privileged...