6213 matches found
CVE-2019-7649: Use of Password Hash With Insufficient Computational Effort
global.encryptPassword in bootstrap/global.js in CMSWing 1.3.7 relies on multiple MD5 operations for password hashing...
[slackware-security] mozilla-thunderbird
New mozilla-thunderbird packages are available for Slackware 14.2 and -current to fix security issues. Here are the details from the Slackware 14.2 ChangeLog: patches/packages/mozilla-thunderbird-60.5.1-i686-1slack14.2.txz: Upgraded. This release contains security fixes and improvements. For more...
Security Bulletin: Vulnerability in IBM Java SDK affects IBM System Networking Switch Center (CVE-2015-7575)
Summary There is a vulnerability in IBMR; SDK JavaTM Technology Edition, Version 7 that is used by IBM System Networking Switch Center. This vulnerability, commonly referred to as "SLOTH", was disclosed as part of the IBM Java SDK updates in January 2016. Vulnerability Details Summary There is a...
Security Bulletin: Multiple vulnerabilities affect IBM Flex System Chassis Management Module
Summary The following curl, glibc, php and OpenSSL vulnerabilities, as well as MD5 "SLOTH" vulnerability on TLS 1.2, affect IBM Flex System Chassis Management Module. Vulnerability Details Summary The following curl, glibc, php and OpenSSL vulnerabilities, as well as MD5 "SLOTH" vulnerability on...
Security Bulletin: Vulnerability in MD5 Signature and Hash Algorithm affects IBM Flex System FC5022 16Gb SAN Scalable Switch (CVE-2015-7575)
Summary The MD5 "SLOTH" vulnerability on TLS 1.2 affects IBM Flex System FC5022 16Gb SAN Scalable Switch. Vulnerability Details Summary The MD5 "SLOTH" vulnerability on TLS 1.2 affects IBM Flex System FC5022 16Gb SAN Scalable Switch. Vulnerability Details: CVE-ID: CVE-2015-7575 Description: The T...
Security Bulletin: Multiple vulnerabilities, including MD5 Signature and Hash Algorithm (CVE-2015-7575), affect IBM Flex System Networking Switches
Summary The following vulnerabilities, including the MD5 "SLOTH" vulnerability on TLS 1.2, affect IBM Flex System Networking Switches. Vulnerability Details Summary The following vulnerabilities, including the MD5 "SLOTH" vulnerability on TLS 1.2, affect IBM Flex System Networking Switches...
Security Bulletin: Vulnerabilities in OpenSSL and MD5 Signature and Hash Algorithm (CVE-2015-7575) affect IBM System Networking RackSwitch products.
Summary IBM System Networking RackSwitch products listed below have addressed the following vulnerabilities, including the MD5 "SLOTH" vulnerability on TLS 1.2. Vulnerability Details Summary IBM System Networking RackSwitch products listed below have addressed the following vulnerabilities,...
Cisco Small Business RV320 and RV325 Routers Information Disclosure Vulnerability (cisco-sa-20190123-rv-info) (remote check)
The remote Cisco Small Business router is affected by a remote information disclosure vulnerability. A remote, unauthenticated attacker can exploit this, via a simple HTTP GET or POST request, to obtain the configuration of the router. This configuration includes device credentials in the form of...
CVE-2019-3907
Premisys Identicard version 3.1.190 stores user credentials and other sensitive information with a known weak encryption method MD5 hash of a salt and password...
Default credentials
Premisys Identicard version 3.1.190 stores user credentials and other sensitive information with a known weak encryption method MD5 hash of a salt and password...
CVE-2019-3907
Premisys Identicard version 3.1.190 stores user credentials and other sensitive information with a known weak encryption method MD5 hash of a salt and password...
TAU Threat Intelligence Notification – WindTail (OSX)
Summary Dark Matter researcher Taha Karim recently presented his research on the APT group WindShift at Hack in the Box Singapore. This group primarily focuses on highly targeted campaigns directed toward Middle Eastern government and commercial entities. One of the custom macOS backdoors employe...
CVE-2019-3907: Use of Hard-coded Credentials
Premisys Identicard version 3.1.190 stores user credentials and other sensitive information with a known weak encryption method MD5 hash of a salt and password...
Man-in-the-Middle (MitM)
nss is vulnerable to man-in-the-middle attack. A flaw was found in the way TLS 1.2 could use the MD5 hash function for signing ServerKeyExchange and Client Authentication packets during a TLS handshake. A man-in-the-middle attacker able to force a TLS connection to use the MD5 hash function could...
Town of Salem Data Breach Exposes 7.6 Million Gamers' Accounts
A massive data breach at the popular online role-playing game 'Town of Salem' has reportedly impacted more than 7.6 million players, the game owner BlankMediaGames BMG confirmed Wednesday on its online forum. With the user base of more than 8 million players, Town of Salem is a browser-based game...
MD5 and SHA-1 Still Used in 2018
Last week, the Scientific Working Group on Digital Evidence published a draft document -- "SWGDE Position on the Use of MD5 and SHA1 Hash Algorithms in Digital and Multimedia Forensics" -- where it accepts the use of MD5 and SHA-1 in digital forensics applications: While SWGDE promotes the adopti...
Hashie - Crack Hashes In A Blink Of An Eye
Hashie is a multi functional tool written in python to deal with hashes. Features Hash cracking. Hash generation. Automatic hash type identification. Supports MD5, SHA1, SHA256, SHA384, SHA512 etc... How to Install and Run in Linux 1 Enter the following command in the terminal to download it. git...
CVE-2018-15717
Open Dental before version 18.4 stores user passwords as base64 encoded MD5 hashes...