CVE-2025-46660

An issue was discovered in 4C Strategies Exonaut 21.6. Passwords, stored in the database, are hashed without a salt...

CVE-2025-46660

An issue was discovered in 4C Strategies Exonaut 21.6. Passwords, stored in the database, are hashed without a salt...

CVE-2025-46660

An issue was discovered in 4C Strategies Exonaut 21.6. Passwords, stored in the database, are hashed without a salt...

RX-INT: a Kernel Engine for Real-Time Detection and Analysis of In-Memory Threats

Malware and cheat developers use fileless execution techniques to evade traditional, signature-based security products. These methods include various types of manual mapping, module stomping, and threadless injection which work entirely within the address space of a legitimate process, presenting...

CVE-2025-54535

In JetBrains TeamCity before 2025.07 password reset and email verification tokens were using weak hashing algorithms...

JetBrains TeamCity < 2025.07 Multiple Vulnerabilities

The version of JetBrains TeamCity installed on the remote host is prior to 2025.07. It is, therefore, affected by multiple vulnerabilities: - In JetBrains TeamCity before 2025.07 a CSRF was possible in GitHub App connection flow CVE-2025-54528 - In JetBrains TeamCity before 2025.07 a CSRF was...

Privacy-Preserving Anonymization of System and Network Event Logs Using Salt-Based Hashing and Temporal Noise

System and network event logs are essential for security analytics, threat detection, and operational monitoring. However, these logs often contain Personally Identifiable Information PII, raising significant privacy concerns when shared or analyzed. A key challenge in log anonymization is...

CVE-2025-54535

In JetBrains TeamCity before 2025.07 password reset and email verification tokens were using weak hashing algorithms...

CVE-2025-54535

In JetBrains TeamCity before 2025.07 password reset and email verification tokens were using weak hashing algorithms...

CVE-2025-54535

CVE-2025-54535 affects JetBrains TeamCity versions prior to 2025.07, where password reset and email verification tokens were secured with weak hashing algorithms. The available documents describe the affected component and the root cause (weak hash usage for tokens) but do not provide explicit ex...

CVE-2025-54535

In JetBrains TeamCity before 2025.07 password reset and email verification tokens were using weak hashing algorithms...

CVE-2025-54535

In JetBrains TeamCity before 2025.07 password reset and email verification tokens were using weak hashing algorithms...

PT-2025-31125 · Jetbrains · Teamcity

Name of the Vulnerable Software and Affected Versions: TeamCity versions prior to 2025.07 Description: Password reset and email verification tokens utilized weak hashing algorithms. Recommendations: Update to version 2025.07 or later...

CVE-2025-54535: Use of Weak Hash

In JetBrains TeamCity before 2025.07 password reset and email verification tokens were using weak hashing algorithms...

BIT-NODE-MIN-2025-27209

The V8 release used in Node.js v24.0.0 has changed how string hashes are computed using rapidhash. This implementation re-introduces the HashDoS vulnerability as an attacker who can control the strings to be hashed can generate many hash collisions - an attacker can generate collisions even witho...

Use of Password Hash With Insufficient Computational Effort

Overview com.xuxueli:xxl-job is a distributed task scheduling framework. Affected versions of this package are vulnerable to Use of Password Hash With Insufficient Computational Effort via the XXLJOBLOGINIDENTITY in the cookie. An attacker can obtain sensitive information by exploiting weak...

PT-2025-30048 · Xxl-Job · Xxl-Job

Name of the Vulnerable Software and Affected Versions: xxl-job versions up to 3.1.1 Description: A flaw exists within the makeToken function located in src/main/java/com/xxl/job/admin/controller/IndexController.java of the Token Generation component. This issue involves password hashing with...

XXL-JOB 安全漏洞

XXL-JOB is a distributed task scheduling platform by the individual developer Xu Xueli xuxueli. A security vulnerability exists in XXL-JOB 3.1.1 and earlier versions, which stems from an insufficient password hash calculation in the Token generation component...

SUSE CVE-2025-40918

Authen::SASL::Perl::DIGESTMD5 versions 2.04 through 2.1800 for Perl generates the cnonce insecurely. The cnonce client nonce is generated from an MD5 hash of the PID, the epoch time and the built-in rand function. The PID will come from a small set of numbers, and the epoch time may be guessed, i...

Hash Collision Attack

llamaindex is vulnerable to Hash Collision Attack. The vulnerability is due to the use of MD5 hashing for generating document chunk IDs, which allows an attacker to exploit hash collisions by creating structurally distinct chunks with identical text...