CVE-2026-75106

OpnForm (open-source form builder) contains a critical vulnerability in its editable-submission secret derivation mechanism. Secrets are generated from sequential row identifiers using Hashids with an empty default salt , making them fully predictable. An unauthenticated attacker can compute vali...

CVE-2026-6659 Crypt::PasswdMD5 versions through 1.42 for Perl generates insecure random values for salts

Crypt::PasswdMD5 versions through 1.42 for Perl generates insecure random values for salts. The built-in rand function is predictable, and unsuitable for cryptography...

PT-2026-25582

Description The default bcrypt salt rounds is set to 5, which is below the recommended minimum for security. Affected Code export function getHashvalue: string const salt = bcrypt.genSaltSyncparseIntprocess.env.PASSWORD SALT HASH ROUNDS || '5' return bcrypt.hashSyncvalue, salt Evidence Using 5 sa...

EUVD-2022-5044

Malicious code in bioql PyPI...

CVE-2025-1805

Crypt::Salt for Perl version 0.01 uses insecure rand function when generating salts for cryptographic purposes...

SUSE CVE-2014-0083

The Ruby net-ldap gem before 0.11 uses a weak salt when generating SSHA passwords...

net-ldap has weak salt when generating passwords

The Ruby net-ldap gem before 0.16.2 uses a weak salt when generating SSHA passwords...

GHSA-QWGM-MXM4-3Q2C net-ldap has weak salt when generating passwords

The Ruby net-ldap gem before 0.16.2 uses a weak salt when generating SSHA passwords...

CVE-2014-0083

The Ruby net-ldap gem before 0.11 uses a weak salt when generating SSHA passwords...

UBUNTU-CVE-2014-0083

The Ruby net-ldap gem before 0.11 uses a weak salt when generating SSHA passwords...

Design/Logic Flaw

The Ruby net-ldap gem before 0.11 uses a weak salt when generating SSHA passwords...

CVE-2014-0083

The Ruby net-ldap gem before 0.11 uses a weak salt when generating SSHA passwords...

CVE-2014-0083

The Ruby net-ldap gem before 0.11 uses a weak salt when generating SSHA passwords...

CVE-2014-0083

The Ruby net-ldap gem before 0.11 uses a weak salt when generating SSHA passwords...

CVE-2014-0083

The Ruby net-ldap gem before 0.11 uses a weak salt when generating SSHA passwords...

PT-2019-7036

Name of the Vulnerable Software and Affected Versions net-ldap gem versions prior to 0.16.2 Description The issue concerns the generation of SSHA passwords using a weak salt in the Ruby net-ldap gem. Recommendations For versions prior to 0.16.2, update to version 0.16.2 or later to resolve the...

CVE-2014-0083: Use of Password Hash With Insufficient Computational Effort

The Ruby net-ldap gem before 0.11 uses a weak salt when generating SSHA passwords...

Default credentials

An issue was discovered in BTITeam XBTIT 2.5.4. When a user logs in, their password hash is rehashed using a predictable salt and stored in the "pass" cookie, which is not flagged as HTTPOnly. Due to the weak and predictable salt that is in place, an attacker who successfully steals this cookie c...

CVE-2018-15681: Incorrect Permission Assignment for Critical Resource

An issue was discovered in BTITeam XBTIT 2.5.4. When a user logs in, their password hash is rehashed using a predictable salt and stored in the "pass" cookie, which is not flagged as HTTPOnly. Due to the weak and predictable salt that is in place, an attacker who successfully steals this cookie c...

WS-2017-3748

In Ansible v2.0.0.1 to v2.4.0.0-0.1.rc1 there is a mismatch between two hash formats that causes the generation of a relatively shorter salt value 8 characters. That makes it easier to use dictionary/brute force attacks...