85 matches found
browsertunnel
browsertunnel Browsertunnel es una herramienta para exfiltrar datos del navegador utilizando el protocolo DNS. Lo logra abusando de dns-prefetch, una función diseñada para reducir la latencia percibida de los sitios web realizando consultas DNS en segundo plano para dominios específicos. El tráfi...
CVE-2026-6217
Use of a One-Way hash without a salt vulnerability in Pik Online Software Solutions Inc. Pik Online Portal allows Cryptanalysis. This issue affects Pik Online Portal: through 3.5.1...
EUVD-2026-70952
Use of a One-Way hash without a salt vulnerability in Pik Online Software Solutions Inc. Pik Online Portal allows Cryptanalysis. This issue affects Pik Online Portal: through 3.5.1...
CVE-2026-6217
Pik Online Portal (by Pik Online Software Solutions Inc.) is vulnerable to information disclosure via use of a one-way hash without a salt , allowing cryptanalysis of hashed data. The issue affects versions through 3.5.1 . The CVSS 3.1 score is 6.3 (MEDIUM) , with a network attack vector, low com...
CVE-2026-6217 Information Disclosure in Pik Online Software's Portal
Use of a One-Way hash without a salt vulnerability in Pik Online Software Solutions Inc. Pik Online Portal allows Cryptanalysis. This issue affects Pik Online Portal: through 3.5.1...
DNSlivery
DNSlivery Easy files and payloads delivery over DNS. DNSlivery Acknowledgments Description TL;DR What problem are you trying to solve? How does it work? Requirements Setup DNS Zone DNSlivery Usage Server Target Acknowledgments This project has been originally inspired by PowerDNS and Joff Thyer's...
EUVD-2026-51488
ANDRITZ HIPASE-250 formerly 250 SCALA in affected versions stores and transmits user passwords using a reversible format instead of a one-way password hash. This allows an attacker able to read the credential store or capture network traffic to recover all stored passwords...
GHSA-JGJ7-C8VJ-W563 jasypt-spring-boot Uses a One-Way Hash without a Salt
A weakness has been identified in ulisesbocchio jasypt-spring-boot up to 3.0.5/4.0.4. Affected by this vulnerability is the function getSecretKeySaltGenerator of the file jasypt-spring-boot/src/main/java/com/ulisesbocchio/jasyptspringboot/encryptor/SimpleGCMConfig.java of the component Password...
jasypt-spring-boot Uses a One-Way Hash without a Salt
A weakness has been identified in ulisesbocchio jasypt-spring-boot up to 3.0.5/4.0.4. Affected by this vulnerability is the function getSecretKeySaltGenerator of the file jasypt-spring-boot/src/main/java/com/ulisesbocchio/jasyptspringboot/encryptor/SimpleGCMConfig.java of the component Password...
Use of a One-Way Hash with a Predictable Salt
Overview Affected versions of this package are vulnerable to Use of a One-Way Hash with a Predictable Salt in the getSecretKeySaltGenerator function of the Password Hash Handler component. An attacker can compromise the confidentiality of hashed secrets by exploiting the use of a predictable salt...
Astra Linux – Vulnerability in Linux 5.10
In the Linux kernel, the following vulnerabilities have been resolved: rustbinder: fixed oneway spam detection The spam detection logic in TreeRange was executed before the current request was inserted into the tree. As a result, the new request wasn’t taken into account in the spam calculation...
CVE-2021-22774
A CWE-759: Use of a One-Way Hash without a Salt vulnerability exists in EVlink City EVC1S22P4 / EVC1S7P4 all versions prior to R8 V3.4.0.1, EVlink Parking EVW2 / EVF2 / EV.2 all versions prior to R8 V3.4.0.1, and EVlink Smart Wallbox EVB1A all versions prior to R8 V3.4.0.1 that could lead an...
CVE-2022-38466
A vulnerability has been identified in CoreShield One-Way Gateway OWG Software All versions V2.2. The default installation sets insecure file permissions that could allow a local attacker to escalate privileges to local administrator...
Analysis of the Security Design, Engineering, and Implementation of the SecureDNA System
We analyze security aspects of the SecureDNA system regarding its system design, engineering, and implementation. This system enables DNA synthesizers to screen order requests against a database of hazards. By applying novel cryptography, the system aims to keep order requests and the database of...
Multi-Copy Security in Unclonable Cryptography
Unclonable cryptography leverages the quantum no-cloning principle to copy-protect cryptographic functionalities. While most existing works address the basic single-copy security, the stronger notion of multi-copy security remains largely unexplored. We introduce a generic compiler that upgrades...
EUVD-2016-4107
Malware in sbrugna...
EUVD-2021-19436
Malware in sbrugna...
EUVD-2020-20698
Malware in sbrugna...