EUVD-2022-3742

Malicious code in bioql PyPI...

EUVD-2022-39829

Malicious code in bioql PyPI...

EUVD-2025-5561

Malicious code in bioql PyPI...

EUVD-2025-15845

Malicious code in bioql PyPI...

EUVD-2023-54493

Malicious code in bioql PyPI...

CVE-2023-49883

IBM Transformation Extender Advanced 10.0.1 does not require that users should have strong passwords by default, which makes it easier for attackers to compromise user accounts...

CVE-2025-59745

Vulnerability in the cryptographic algorithm of AndSoft's e-TMS v25.03, which uses MD5 to encrypt passwords. MD5 is a cryptographically vulnerable hash algorithm and is no longer considered secure for storing or transmitting passwords. It is vulnerable to collision attacks and can be easily crack...

CVE-2025-59745 Multiple vulnerabilities in AndSoft's e-TMS

Vulnerability in the cryptographic algorithm of AndSoft's e-TMS v25.03, which uses MD5 to encrypt passwords. MD5 is a cryptographically vulnerable hash algorithm and is no longer considered secure for storing or transmitting passwords. It is vulnerable to collision attacks and can be easily crack...

offensiveinterview

It is an offensive tool for penetration testing and red teaming. The repository contains a collection of interview questions to screen offensive red team/pentest candidates, categorized into open-ended, knowledge-based, and scenario-based questions. The questions cover various topics such as...

An Earth-Shattering Kaboom: Bringing a Physical ICS Penetration Testing Environment to Life (Part 2)

Program Vulnerabilities and Manual Assessment This is the second in a three-part series on building and using a testing bench for Industrial Control Systems ICS. In this series, we will build a physical test bench, review program logic to find flaws, perform manual exploitation of commonly used I...

CVE-2025-46660

An issue was discovered in 4C Strategies Exonaut 21.6. Passwords, stored in the database, are hashed without a salt...

CVE-2025-46389

CWE-620: Unverified Password Change...

CVE-2025-46660

A security vulnerability exists in 4C Strategies Exonaut version 21.6 , a training and readiness management platform. The issue stems from the insecure storage of sensitive information , specifically that passwords stored in the database are hashed without a salt (CWE-922). This weakness can faci...

PT-2025-32211

Name of the Vulnerable Software and Affected Versions 4C Strategies Exonaut version 21.6 Description Passwords stored in the database are hashed without a salt. Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability...

PT-2025-31882 · Unknown · Trilium Notes

Name of the Vulnerable Software and Affected Versions: Trilium Notes versions prior to 0.97.0 Description: Trilium Notes is a cross-platform hierarchical note taking application. A brute-force protection bypass in the initial sync seed retrieval endpoint allows unauthenticated attackers to guess...

CVE-2025-44958

RUCKUS Network Director RND before 4.5 stores passwords in a recoverable format...

CVE-2025-44958

RUCKUS Network Director RND before 4.5 stores passwords in a recoverable format...

CVE-2025-44958

RUCKUS Network Director RND before 4.5 stores passwords in a recoverable format...

CVE-2025-44958

CVE-2025-44958 affects RUCKUS Network Director (RND) versions prior to 4.5, which stores passwords in a recoverable format. The vulnerability cluster (CVE-2025-44958, plus related CVEs) includes authentication bypass and potential RCE paths in RND/vSZ components, with CERT/CC noting no fixes yet....

CVE-2025-30125

An issue was discovered on Marbella KR8s Dashcam FF 2.0.8 devices. All dashcams were shipped with the same default credentials of 12345678, which creates an insecure-by-default condition. For users who change their passwords, it's limited to 8 characters. These short passwords can be cracked in 8...