7 matches found
CVE-2024-21754-Forti-RCE
FortiOS 和 FortiProxy 密码哈希漏洞导致 RCE（CVE-2024-21754） 概述 已发现 FortiOS 和 FortiProxy 中一个严重漏洞，编号为 CVE-2024-21754，影响版本截至 7.4.3、7.2、7.0、6.4 及 2.0。该漏洞归类于 CWE-916，涉及使用计算开销不足的密码哈希，可能允许具有超级管理员配置文件和 CLI 访问权限的特权攻击者解密备份文件。 详情 CVE ID ：CVE-2024-21754 发现时间 ：2024-04-27 发布时间 ：2024-06-27 影响 ：机密性 漏洞利用可用性 ：未公开，仅限私有。 漏洞描述...
CVE-2026-86670 aircheng-org iWebShop-5 Authentication Storage admin.php weak password hash
A flaw has been found in aircheng-org iWebShop-5 up to 5.15. This impacts an unknown function of the file controllers/admin.php of the component Authentication Storage. Executing a manipulation of the argument Password can lead to password hash with insufficient computational effort. It is possib...
Use of Password Hash With Insufficient Computational Effort
Overview Affected versions of this package are vulnerable to Use of Password Hash With Insufficient Computational Effort due to the use of a simple, unsalted hash for storing user passwords and API keys. An attacker can obtain sensitive information by performing offline rainbow table attacks...
Use of Password Hash With Insufficient Computational Effort
Overview com.xuxueli:xxl-job is a distributed task scheduling framework. Affected versions of this package are vulnerable to Use of Password Hash With Insufficient Computational Effort via the XXLJOBLOGINIDENTITY in the cookie. An attacker can obtain sensitive information by exploiting weak...
SUSE CVE-2024-7701
Use of Password Hash With Insufficient Computational Effort vulnerability in percona percona-toolkit allows Encryption Brute Forcing.This issue affects percona-toolkit: 3.6.0...
