Lucene search
+L

706 matches found

Kitploit
Kitploit
added 2026/09/09 12:59 a.m.30 views

libsodium

Sodium is an easy-to-use software library that provides a wide range of cryptographic operations including encryption, decryption, digital signatures, and secure password hashing. It is a portable, cross-compilable, installable, and packageable fork of NaCl. While maintaining API compatibility,...

5.9AI score
SaveExploits0References2
Kitploit
Kitploit
added 2026/09/09 12:32 a.m.6 views

rscrypto

rscrypto rscrypto puts cryptographic primitives, cryptographic and fast hashes, password hashing, and checksums behind one feature model. Target-gated SIMD and assembly accelerate portable Rust backends without a production C/FFI, OpenSSL, or system-library dependency. rscrypto is a primitives...

5.9AI score
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/08 11:50 p.m.7 views

cve-2022-22976-bcrypt-skips-salt

BCrypt Hash Check To assist with the mitigation steps for CVE-2022-xxxx, you can use this tool to check your database for hashes that need updating. After you've integrated the application with your database, the tool works in two steps. To demonstrate this a in-memory sample application is used...

5.3CVSS7.3AI score0.02344EPSS
SaveExploits0
Kitploit
Kitploit
added 2026/09/08 8:24 a.m.7 views

openssh_dos

Since OpenSSH servers don't restrict the login password length, you can cause these servers to crash by sending very long passwords which use massive amounts of a the server's CPU to hash. This vulnerability is known as CVE-2016-6515. My POC can be downloaded here you will need to unzip Usage:...

7.8CVSS7AI score0.58568EPSS
SaveExploits5References1
Kitploit
Kitploit
added 2026/09/08 6:17 a.m.7 views

CVE-2016-6210-Exploit

This is the first version of the "weaponized" exploit for CVE-2016-6210 Background: Posted by Eddie Harari on Full Disclosure http://seclists.org/fulldisclosure/2016/Jul/51 The brief: By sending large passwords, a remote user can enumerate users on system that runs SSHD. This problem exists in mo...

5.9CVSS6.7AI score0.88944EPSS
SaveExploits12
Kitploit
Kitploit
added 2026/09/08 1:54 a.m.7 views

wargame-turkey_in_2

wargame 1. flag file divide 2. Brute force prevent - delay 50005s 3. logging 4. password hashing -wargame-turkeyin2...

5.9AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/06 3:12 p.m.4 views

hmac-bcrypt

hmac-bcrypt This repository contains reference implementations of the hmac-bcrypt password hashing function in several languages. Each reference implementation attempts to be a 1:1 port of the original C and Perl implementations created by @epixoip where possible, and are fully compatible with ea...

5.9AI score
SaveExploits0References1
NVD
NVD
added 2026/08/29 2:16 p.m.18 views

CVE-2026-82453

rust-iot-platform through commit 5df942ab stores user passwords in cleartext without hashing in the user model. Attackers can read API responses from user retrieval and listing routes to obtain plaintext credentials for all accounts...

8.7CVSS0.00283EPSS
SaveExploits0References3
NVD
NVD
added 2026/08/27 5:20 p.m.7 views

CVE-2026-80211

FrontAccounting through 2.4.20 stores and verifies user passwords as unsalted MD5 digests. admin/users.php passes md5$POST'password' to adduser and updateuserpassword, admin/changecurrentuserpassword.php does the same when a user changes their own password, the forgotten-password path in...

8.2CVSS0.00244EPSS
SaveExploits0References4
UbuntuCve
UbuntuCve
added 2026/08/27 5:20 p.m.9 views

CVE-2026-80211

FrontAccounting through 2.4.20 stores and verifies user passwords as unsalted MD5 digests. admin/users.php passes md5$POST'password' to adduser and updateuserpassword, admin/changecurrentuserpassword.php does the same when a user changes their own password, the forgotten-password path in...

8.2CVSS5.9AI score0.00244EPSS
SaveExploits0References5
GithubExploit
GithubExploit
added 2026/08/26 7:03 a.m.17 views

bank-api-remediated

vulnbank-api — Remediated Fixed version of bank-api, built...

9.8CVSS8AI score0.05656EPSS
SaveExploits2
OSV
OSV
added 2026/08/21 11:16 p.m.4 views

UBUNTU-CVE-2026-53525

WeeChat Wee Enhanced Environment for Chat is a free chat client. In versions 0.3.1 through 4.9.0, the WeeChat relay authentication uses non-constant-time string comparison functions weechatstrcasecmp and strcmp to verify password hashes and plaintext passwords. An attacker can exploit timing...

7.4CVSS5.9AI score0.00254EPSS
SaveExploits0References4
NVD
NVD
added 2026/08/20 4:17 p.m.13 views

CVE-2026-19611

A flaw was found in WildFly Elytron. Password hashing and verification normalize input with Unicode NFKC, which can collapse fullwidth characters to ASCII equivalents. A remote attacker can more easily guess affected passwords by using an ASCII-only dictionary against accounts whose passwords wer...

7.4CVSS0.00345EPSS
SaveExploits0References2
EUVD
EUVD
added 2026/08/20 3:58 p.m.17 views

EUVD-2026-63478

A flaw was found in WildFly Elytron. Password hashing and verification normalize input with Unicode NFKC, which can collapse fullwidth characters to ASCII equivalents. A remote attacker can more easily guess affected passwords by using an ASCII-only dictionary against accounts whose passwords wer...

7.4CVSS5.5AI score0.00345EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2026/08/20 3:58 p.m.15 views

CVE-2026-19611 Wildfly-elytron: org.wildfly.security/wildfly-elytron-password-impl: wildfly-elytron: password keyspace reduction via nfkc fullwidth folding

A flaw was found in WildFly Elytron. Password hashing and verification normalize input with Unicode NFKC, which can collapse fullwidth characters to ASCII equivalents. A remote attacker can more easily guess affected passwords by using an ASCII-only dictionary against accounts whose passwords wer...

7.4CVSS5.4AI score0.00345EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2026/08/20 3:58 p.m.34 views

CVE-2026-19611 Wildfly-elytron: org.wildfly.security/wildfly-elytron-password-impl: wildfly-elytron: password keyspace reduction via nfkc fullwidth folding

A flaw was found in WildFly Elytron. Password hashing and verification normalize input with Unicode NFKC, which can collapse fullwidth characters to ASCII equivalents. A remote attacker can more easily guess affected passwords by using an ASCII-only dictionary against accounts whose passwords wer...

7.4CVSS0.00345EPSS
SaveExploits0References2
CVE
CVE
added 2026/08/20 3:58 p.m.60 views

CVE-2026-19611

The vulnerable component is org.wildfly.security/wildfly-elytron-password-impl in WildFly Elytron. Password hashing/verification applies Unicode NFKC normalization, collapsing fullwidth characters to ASCII equivalents, which reduces the effective password keyspace. This allows a remote attacker t...

7.4CVSS5.4AI score0.00345EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
added 2026/08/20 3:58 p.m.15 views

CVE-2026-19611

A flaw was found in WildFly Elytron. Password hashing and verification normalize input with Unicode NFKC, which can collapse fullwidth characters to ASCII equivalents. A remote attacker can more easily guess affected passwords by using an ASCII-only dictionary against accounts whose passwords wer...

7.4CVSS5AI score0.00345EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2026/08/20 12:00 a.m.23 views

PT-2026-79049

A flaw was found in WildFly Elytron. Password hashing and verification normalize input with Unicode NFKC, which can collapse fullwidth characters to ASCII equivalents. A remote attacker can more easily guess affected passwords by using an ASCII-only dictionary against accounts whose passwords wer...

7.4CVSS5.4AI score0.00345EPSS
SaveExploits0References3
EUVD
EUVD
added 2026/08/19 7:06 p.m.13 views

EUVD-2026-62694

A security issue exists within OTTO® Fleet Manager. The vulnerability stems from the use of an insufficient work factor in the bcrypt password hashing implementation, which could reduce the computational cost required for an attacker to perform offline brute-force attacks against stored password...

6.9CVSS5.4AI score0.00113EPSS
SaveExploits0References1
Rows per page
Query Builder