395 matches found
CVE-2025-13829: Incorrect Authorization
Incorrect Authorization vulnerability in Data Illusion Zumbrunn NGSurvey allows any logged-in user to obtain the private information of any other user. Critical information retrieved: APIKEY 1 year user Session RefreshToken 10 minutes user Session Password hashed with bcrypt User IP Email Full Na...
Malicious code in bcrypt-js-edge (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bca5605febed4ebf8f03746e572ca1fb05186ff2714f0f1c34842fc4858f9fa7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
EUVD-2025-35142
Malicious code in bcrypt-js-edge npm...
Malicious Package
Overview bcrypt-js-edge is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...
MAL-2025-48530 Malicious code in bcrypt-js-edge (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bca5605febed4ebf8f03746e572ca1fb05186ff2714f0f1c34842fc4858f9fa7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
System Password Security: Attack and Defense Mechanisms
System passwords serve as critical credentials for user authentication and access control when logging into operating systems or applications. Upon entering a valid password, users pass verification to access system resources and execute corresponding operations. In recent years, frequent passwor...
EUVD-2020-0151
Malware in sbrugna...
EUVD-2017-16283
Malware in sbrugna...
EUVD-2015-3497
Malware in sbrugna...
EUVD-2019-4915
Malware in sbrugna...
EUVD-2020-18617
Malware in sbrugna...
EUVD-2020-0266
Malware in sbrugna...
EUVD-2025-9909
Malicious code in bioql PyPI...
EUVD-2025-8117
Malicious code in bioql PyPI...
EUVD-2024-3150
Malicious code in bioql PyPI...
EUVD-2022-5665
Malicious code in bioql PyPI...
EUVD-2024-46453
Malicious code in bioql PyPI...
Linux Distros Unpatched Vulnerability : CVE-2025-27552
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - DBIx::Class::EncodedColumn use the rand function, which is not cryptographically secure to salt password hashes. This vulnerability is associated with program...
Linux Distros Unpatched Vulnerability : CVE-2022-22976
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Spring Security versions 5.5.x prior to 5.5.7, 5.6.x prior to 5.6.4, and earlier unsupported versions contain an integer overflow vulnerability. When using the...
spring-security-core: Spring Security BCryptPasswordEncoder does not enforce maximum password length
A flaw was found in the spring-security-core password encoder. This vulnerability allows incorrect password matching via input manipulation...