7 matches found
CVE-2026-75106
OpnForm derives editable-submission secrets from sequential row identifiers using Hashids with an empty default salt, allowing unauthenticated attackers to compute hashes for any submission. Attackers can read other respondents' full submission data through the submission-fetch endpoint or...
CVE-2026-75106 OpnForm Editable Submission Secret Derivation via Empty Hashids Salt
OpnForm derives editable-submission secrets from sequential row identifiers using Hashids with an empty default salt, allowing unauthenticated attackers to compute hashes for any submission. Attackers can read other respondents' full submission data through the submission-fetch endpoint or...
CVE-2026-75106 OpnForm Editable Submission Secret Derivation via Empty Hashids Salt
OpnForm derives editable-submission secrets from sequential row identifiers using Hashids with an empty default salt, allowing unauthenticated attackers to compute hashes for any submission. Attackers can read other respondents' full submission data through the submission-fetch endpoint or...
CVE-2026-75106 OpnForm Editable Submission Secret Derivation via Empty Hashids Salt
OpnForm derives editable-submission secrets from sequential row identifiers using Hashids with an empty default salt, allowing unauthenticated attackers to compute hashes for any submission. Attackers can read other respondents' full submission data through the submission-fetch endpoint or...
PT-2026-76801
Name of the Vulnerable Software and Affected Versions OpnForm affected versions not specified Description The software derives editable-submission secrets from sequential row identifiers using Hashids with an empty default salt. This allows unauthenticated attackers to compute hashes for any...
EUVD-2012-2310
Malware in sbrugna...
CVE-2012-2317: Undefined Security Weakness
The Debian phpcryptrevamped.patch patch for PHP 5.3.x, as used in the php5 package before 5.3.3-7+squeeze4 in Debian GNU/Linux squeeze, the php5 package before 5.3.2-1ubuntu4.17 in Ubuntu 10.04 LTS, and the php5 package before 5.3.5-1ubuntu7.10 in Ubuntu 11.04, does not properly handle an empty...