Lucene search
+L

706 matches found

Kitploit
Kitploit
added 2026/09/09 12:59 a.m.30 views

libsodium

Sodium is an easy-to-use software library that provides a wide range of cryptographic operations including encryption, decryption, digital signatures, and secure password hashing. It is a portable, cross-compilable, installable, and packageable fork of NaCl. While maintaining API compatibility,...

5.9AI score
SaveExploits0References2
Kitploit
Kitploit
added 2026/09/09 12:32 a.m.6 views

rscrypto

rscrypto rscrypto puts cryptographic primitives, cryptographic and fast hashes, password hashing, and checksums behind one feature model. Target-gated SIMD and assembly accelerate portable Rust backends without a production C/FFI, OpenSSL, or system-library dependency. rscrypto is a primitives...

5.9AI score
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/08 8:24 a.m.7 views

openssh_dos

Debido a que los servidores OpenSSH no restringen la longitud de la contraseña de inicio de sesión, puedes provocar que estos servidores se bloqueen enviando contraseñas muy largas que utilizan grandes cantidades de la CPU del servidor para calcular su hash. Esta vulnerabilidad se conoce como...

7.8CVSS7AI score0.58568EPSS
SaveExploits5References1
Kitploit
Kitploit
added 2026/09/08 6:17 a.m.7 views

CVE-2016-6210-Exploit

Esta es la primera versión del exploit "armado" para CVE-2016-6210 Antecedentes: Publicado por Eddie Harari en Full Disclosure http://seclists.org/fulldisclosure/2016/Jul/51 Resumen breve: Al enviar contraseñas grandes, un usuario remoto puede enumerar usuarios en un sistema que ejecuta SSHD. Est...

5.9CVSS6.7AI score0.88944EPSS
SaveExploits12
Kitploit
Kitploit
added 2026/09/08 1:54 a.m.6 views

wargame-turkey_in_2

wargame 1. flag file divide 2. Brute force prevent - delay 50005s 3. logging 4. password hashing -wargame-turkeyin2...

5.9AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/06 3:12 p.m.4 views

hmac-bcrypt

hmac-bcrypt Este repositorio contiene implementaciones de referencia de la función de hash de contraseñas hmac-bcrypt en varios lenguajes. Cada implementación de referencia intenta ser un puerto 1:1 de las implementaciones originales en C y Perl creadas por @epixoip cuando es posible, y son...

5.9AI score
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/01 11:50 p.m.7 views

cve-2022-22976-bcrypt-skips-salt

Comprobación de Hash BCrypt Para ayudar con los pasos de mitigación de CVE-2022-xxxx, puede utilizar esta herramienta para revisar su base de datos en busca de hashes que necesiten actualizarse. Después de haber integrado la aplicación con su base de datos, la herramienta funciona en dos pasos...

5.3CVSS7.3AI score0.02344EPSS
SaveExploits0
NVD
NVD
added 2026/08/29 2:16 p.m.18 views

CVE-2026-82453

rust-iot-platform through commit 5df942ab stores user passwords in cleartext without hashing in the user model. Attackers can read API responses from user retrieval and listing routes to obtain plaintext credentials for all accounts...

8.7CVSS0.00283EPSS
SaveExploits0References3
NVD
NVD
added 2026/08/27 5:20 p.m.7 views

CVE-2026-80211

FrontAccounting through 2.4.20 stores and verifies user passwords as unsalted MD5 digests. admin/users.php passes md5$POST'password' to adduser and updateuserpassword, admin/changecurrentuserpassword.php does the same when a user changes their own password, the forgotten-password path in...

8.2CVSS0.00244EPSS
SaveExploits0References4
UbuntuCve
UbuntuCve
added 2026/08/27 5:20 p.m.9 views

CVE-2026-80211

FrontAccounting through 2.4.20 stores and verifies user passwords as unsalted MD5 digests. admin/users.php passes md5$POST'password' to adduser and updateuserpassword, admin/changecurrentuserpassword.php does the same when a user changes their own password, the forgotten-password path in...

8.2CVSS5.9AI score0.00244EPSS
SaveExploits0References5
GithubExploit
GithubExploit
added 2026/08/26 7:03 a.m.17 views

bank-api-remediated

vulnbank-api — Remediated Fixed version of bank-api, built...

9.8CVSS8AI score0.05656EPSS
SaveExploits2
OSV
OSV
added 2026/08/21 11:16 p.m.4 views

UBUNTU-CVE-2026-53525

WeeChat Wee Enhanced Environment for Chat is a free chat client. In versions 0.3.1 through 4.9.0, the WeeChat relay authentication uses non-constant-time string comparison functions weechatstrcasecmp and strcmp to verify password hashes and plaintext passwords. An attacker can exploit timing...

7.4CVSS5.9AI score0.00254EPSS
SaveExploits0References4
NVD
NVD
added 2026/08/20 4:17 p.m.13 views

CVE-2026-19611

A flaw was found in WildFly Elytron. Password hashing and verification normalize input with Unicode NFKC, which can collapse fullwidth characters to ASCII equivalents. A remote attacker can more easily guess affected passwords by using an ASCII-only dictionary against accounts whose passwords wer...

7.4CVSS0.00345EPSS
SaveExploits0References2
EUVD
EUVD
added 2026/08/20 3:58 p.m.17 views

EUVD-2026-63478

A flaw was found in WildFly Elytron. Password hashing and verification normalize input with Unicode NFKC, which can collapse fullwidth characters to ASCII equivalents. A remote attacker can more easily guess affected passwords by using an ASCII-only dictionary against accounts whose passwords wer...

7.4CVSS5.5AI score0.00345EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2026/08/20 3:58 p.m.15 views

CVE-2026-19611 Wildfly-elytron: org.wildfly.security/wildfly-elytron-password-impl: wildfly-elytron: password keyspace reduction via nfkc fullwidth folding

A flaw was found in WildFly Elytron. Password hashing and verification normalize input with Unicode NFKC, which can collapse fullwidth characters to ASCII equivalents. A remote attacker can more easily guess affected passwords by using an ASCII-only dictionary against accounts whose passwords wer...

7.4CVSS5.4AI score0.00345EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2026/08/20 3:58 p.m.34 views

CVE-2026-19611 Wildfly-elytron: org.wildfly.security/wildfly-elytron-password-impl: wildfly-elytron: password keyspace reduction via nfkc fullwidth folding

A flaw was found in WildFly Elytron. Password hashing and verification normalize input with Unicode NFKC, which can collapse fullwidth characters to ASCII equivalents. A remote attacker can more easily guess affected passwords by using an ASCII-only dictionary against accounts whose passwords wer...

7.4CVSS0.00345EPSS
SaveExploits0References2
CVE
CVE
added 2026/08/20 3:58 p.m.60 views

CVE-2026-19611

The vulnerable component is org.wildfly.security/wildfly-elytron-password-impl in WildFly Elytron. Password hashing/verification applies Unicode NFKC normalization, collapsing fullwidth characters to ASCII equivalents, which reduces the effective password keyspace. This allows a remote attacker t...

7.4CVSS5.4AI score0.00345EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
added 2026/08/20 3:58 p.m.15 views

CVE-2026-19611

A flaw was found in WildFly Elytron. Password hashing and verification normalize input with Unicode NFKC, which can collapse fullwidth characters to ASCII equivalents. A remote attacker can more easily guess affected passwords by using an ASCII-only dictionary against accounts whose passwords wer...

7.4CVSS5AI score0.00345EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2026/08/20 12:00 a.m.23 views

PT-2026-79049

A flaw was found in WildFly Elytron. Password hashing and verification normalize input with Unicode NFKC, which can collapse fullwidth characters to ASCII equivalents. A remote attacker can more easily guess affected passwords by using an ASCII-only dictionary against accounts whose passwords wer...

7.4CVSS5.4AI score0.00345EPSS
SaveExploits0References3
EUVD
EUVD
added 2026/08/19 7:06 p.m.13 views

EUVD-2026-62694

A security issue exists within OTTO® Fleet Manager. The vulnerability stems from the use of an insufficient work factor in the bcrypt password hashing implementation, which could reduce the computational cost required for an attacker to perform offline brute-force attacks against stored password...

6.9CVSS5.4AI score0.00113EPSS
SaveExploits0References1
Rows per page
Query Builder