CVE-2022-43117

Suggested description Sourcecodester Password Storage Application in PHP/OOP and MySQL 1.0 was discovered to contain multiple cross-site scripting XSS vulnerabilities via the Name, Username, Description and Site Feature parameters. Additional Information Proof Of Concept:...

aes256_passwd_store

aes256passwdstore This script securely encrypts or decrypts passwords on disk within a custom database file. It also features functionality to retrieve passwords from a previously generated database file. This script takes a master password from stdin/from memory, hashes the password using the...

pmanager

Pmanager Demo Description Store and retrieve your passwords from a secure offline database. Check if your passwords has leaked previously to prevent targeted password reuse attacks. Why develop another password manager ? This project was initially born from my desire to learn Rust. I was tired of...

Digisol-DG--GR1321-s-Password-Storage-in-Plaintext--CVE-2024-4232

Digisol-DG--GR1321-s-Password-Storage-in-Plaintext--CVE-2024-4232...

CVE-2023-45185

CVE-2023-45184 IBM i Access Client Solutions 1.1.9.4 - Remote code execution via insecure deserialisation. Timeline Vulnerability reported to vendor: 22.09.2023 New fixed 1.1.9.4 version released: 08.12.2023 Public disclosure: 15.12.2023 Description IBM i Access Client Solutions uses insecure...

CVE-2026-68933 Chartbrew: Unauthenticated Brute Force of Password-Protected Dashboards Due to Missing Rate Limit and Plaintext Password Storage

Chartbrew is an open-source web application that can connect directly to databases and APIs and use the data to create charts. Prior to 5.2.3, public dashboard passwords were stored in plaintext, accepted through a URL query parameter, and checked without effective attempt throttling. The...

CVE-2026-68933 Chartbrew: Unauthenticated Brute Force of Password-Protected Dashboards Due to Missing Rate Limit and Plaintext Password Storage

Chartbrew is an open-source web application that can connect directly to databases and APIs and use the data to create charts. Prior to 5.2.3, public dashboard passwords were stored in plaintext, accepted through a URL query parameter, and checked without effective attempt throttling. The...

CVE-2026-110104

A flaw was found in novel. The application stores user account passwords using unsalted Message Digest 5 MD5 hashes during registration rather than a modern, secure hashing algorithm. An attacker who obtains the database records or backup files can rapidly crack these hashes using brute-force...

CLEANSTART-2025-PI21590 LibreOffice supports the storage of passwords for web connections in the user’s configuration database

Security vulnerability affects the libreoffice package. LibreOffice supports the storage of passwords for web connections in the user’s configuration database...

CLEANSTART-2025-VT81518 LibreOffice supports the storage of passwords for web connections in the user’s configuration database

Security vulnerability affects the libreoffice package. LibreOffice supports the storage of passwords for web connections in the user’s configuration database...

CVE-2026-13576

CallBackery versions before 0.62.0 for Perl store user passwords as unsalted HMAC-SHA1 hashes. Passwords are hashed with hmacsha1sum from Mojo::Util with no key, a single fast SHA-1 HMAC. There is no salt, so equal passwords give equal hashes, and no work factor slows down guessing. An attacker w...

CVE-2025-30049

The CGM CLININET application stores user passwords as unsalted MD5 hashes. This issue was fixed in versions 2026.MS1 and 2026.MS3...

CVE-2025-30049

The CGM CLININET application is vulnerable to the use of unsalted MD5 password hashes , which provide insufficient computational effort for security. This flaw allows for potential credential compromise. The issue was addressed in versions 2026.MS1 and 2026.MS3 . No specific exploit details or in...

CVE-2025-30049 Use of Unsalted MD5 Password Hashes in CGM CLININET

The CGM CLININET application stores user passwords as unsalted MD5 hashes. This issue was fixed in versions 2026.MS1 and 2026.MS3...

EUVD-2025-211179

The CGM CLININET application stores user passwords as unsalted MD5 hashes. This issue was fixed in versions 2026.MS1 and 2026.MS3...

CVE-2025-30049 Use of Unsalted MD5 Password Hashes in CGM CLININET

The CGM CLININET application stores user passwords as unsalted MD5 hashes. This issue was fixed in versions 2026.MS1 and 2026.MS3...

PT-2026-121801

The CGM CLININET application stores user passwords as unsalted MD5 hashes. This issue was fixed in versions 2026.MS1 and 2026.MS3...

CVE-2025-30049: Use of Password Hash With Insufficient Computational Effort

The CGM CLININET application stores user passwords as unsalted MD5 hashes. This issue was fixed in versions 2026.MS1 and 2026.MS3...

Astra Linux – vulnerability in LibreOffice

LibreOffice supports storing passwords for web connections in the user’s configuration database. The stored passwords are encrypted using a single master key provided by the user. There was a flaw in LibreOffice wherein the required initialization vector for encryption was always the same, thereb...

EUVD-2026-95309

Jivejdon through 5.0 contains a weak password storage vulnerability that stores account passwords as unsalted MD5 digests via ToolsUtil.hash in AccountDaoSql. Attackers who obtain the user table through database access or SQL injection can crack passwords with precomputed tables or GPU attacks...