EUVD-2024-0081

Malicious code in bioql PyPI...

CVE-2023-49883

IBM Transformation Extender Advanced 10.0.1 does not require that users should have strong passwords by default, which makes it easier for attackers to compromise user accounts...

CVE-2025-59745

Vulnerability in the cryptographic algorithm of AndSoft's e-TMS v25.03, which uses MD5 to encrypt passwords. MD5 is a cryptographically vulnerable hash algorithm and is no longer considered secure for storing or transmitting passwords. It is vulnerable to collision attacks and can be easily crack...

CVE-2025-59745 Multiple vulnerabilities in AndSoft's e-TMS

Vulnerability in the cryptographic algorithm of AndSoft's e-TMS v25.03, which uses MD5 to encrypt passwords. MD5 is a cryptographically vulnerable hash algorithm and is no longer considered secure for storing or transmitting passwords. It is vulnerable to collision attacks and can be easily crack...

offensiveinterview

It is an offensive tool for penetration testing and red teaming. The repository contains a collection of interview questions to screen offensive red team/pentest candidates, categorized into open-ended, knowledge-based, and scenario-based questions. The questions cover various topics such as...

An Earth-Shattering Kaboom: Bringing a Physical ICS Penetration Testing Environment to Life (Part 2)

Program Vulnerabilities and Manual Assessment This is the second in a three-part series on building and using a testing bench for Industrial Control Systems ICS. In this series, we will build a physical test bench, review program logic to find flaws, perform manual exploitation of commonly used I...

CVE-2025-46660

An issue was discovered in 4C Strategies Exonaut 21.6. Passwords, stored in the database, are hashed without a salt...

CVE-2025-46389

CWE-620: Unverified Password Change...

CVE-2025-46660

The CVE-2025-46660 entry concerns 4C Strategies Exonaut 21.6, where passwords stored in the database are hashed without a salt. Affected component: Exonaut 21.6 (password storage). Root cause: unsalted password hashing. Impact: as documented, this vulnerability could weaken password storage, thou...

PT-2025-32211 · 4C Strategies · Exonaut

Name of the Vulnerable Software and Affected Versions: 4C Strategies Exonaut version 21.6 Description: Passwords stored in the database are hashed without a salt. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability...

PT-2025-31882 · Unknown · Trilium Notes

Name of the Vulnerable Software and Affected Versions: Trilium Notes versions prior to 0.97.0 Description: Trilium Notes is a cross-platform hierarchical note taking application. A brute-force protection bypass in the initial sync seed retrieval endpoint allows unauthenticated attackers to guess...

CVE-2025-44958

RUCKUS Network Director RND before 4.5 stores passwords in a recoverable format...

CVE-2025-44958

RUCKUS Network Director RND before 4.5 stores passwords in a recoverable format...

CVE-2025-44958

RUCKUS Network Director RND before 4.5 stores passwords in a recoverable format...

CVE-2025-44958

CVE-2025-44958 affects RUCKUS Network Director (RND) versions prior to 4.5, which stores passwords in a recoverable format. The vulnerability cluster (CVE-2025-44958, plus related CVEs) includes authentication bypass and potential RCE paths in RND/vSZ components, with CERT/CC noting no fixes yet....

CVE-2025-30125

An issue was discovered on Marbella KR8s Dashcam FF 2.0.8 devices. All dashcams were shipped with the same default credentials of 12345678, which creates an insecure-by-default condition. For users who change their passwords, it's limited to 8 characters. These short passwords can be cracked in 8...

PT-2025-31106 · Marbella · Marbella Kr8S Dashcam Ff

Name of the Vulnerable Software and Affected Versions: Marbella KR8s Dashcam FF version 2.0.8 Description: Marbella KR8s Dashcam FF 2.0.8 devices are shipped with default credentials of 12345678, creating an insecure-by-default condition. Passwords can be limited to 8 characters, which can be...

CVE-2025-30125

An issue was discovered on Marbella KR8s Dashcam FF 2.0.8 devices. All dashcams were shipped with the same default credentials of 12345678, which creates an insecure-by-default condition. For users who change their passwords, it's limited to 8 characters. These short passwords can be cracked in 8...

CVE-2025-0252

HCL IEM is affected by a password in cleartext vulnerability. Sensitive information is transmitted without adequate protection, potentially exposing it to unauthorized access during transit...

CVE-2025-7357 Plaintext Storage of a Password in LITEON IC48A and IC80A EV Chargers

LITEON IC48A firmware versions prior to 01.00.19r and LITEON IC80A firmware versions prior to 01.01.12e store FTP-server-access-credentials in cleartext in their system logs...