libsodium

Sodium is an easy-to-use software library that provides a wide range of cryptographic operations including encryption, decryption, digital signatures, and secure password hashing. It is a portable, cross-compilable, installable, and packageable fork of NaCl. While maintaining API compatibility,...

CVE-2026-80211

FrontAccounting through 2.4.20 stores and verifies user passwords as unsalted MD5 digests. admin/users.php passes md5$POST'password' to adduser and updateuserpassword, admin/changecurrentuserpassword.php does the same when a user changes their own password, the forgotten-password path in...

CVE-2016-6210-Exploit

Dies ist die erste Version des „weaponized“ Exploits für CVE-2016-6210 Hintergrund: Gepostet von Eddie Harari auf Full Disclosure http://seclists.org/fulldisclosure/2016/Jul/51 Die Kurzfassung: Durch das Senden großer Passwörter kann ein entfernter Benutzer Benutzer auf einem System enumerieren,...

hmac-bcrypt

hmac-bcrypt Questo repository contiene implementazioni di riferimento della funzione di hashing delle password hmac-bcrypt in diversi linguaggi. Ogni implementazione di riferimento cerca di essere una conversione 1:1 dell'implementazione originale in C e Perl creata da @epixoip dove possibile, e...

rscrypto

rscrypto rscrypto fornisce primitive crittografiche pure in Rust, hash crittografici e veloci, hashing delle password e checksum dietro un unico modello di feature. Non ha dipendenze da C/FFI di produzione, OpenSSL o librerie di sistema. Le feature foglia supportano build ristrette; le feature...

cve-2022-22976-bcrypt-skips-salt

Controllo hash BCrypt Per supportare le fasi di mitigazione per CVE-2022-xxxx, puoi usare questo strumento per verificare nel tuo database la presenza di hash da aggiornare. Dopo aver integrato l'applicazione con il tuo database, lo strumento funziona in due fasi. Per dimostrarlo, viene utilizzat...

openssh_dos

Poiché i server OpenSSH non limitano la lunghezza della password di login, puoi causare il crash di questi server inviando password molto lunghe che richiedono enormi quantità di CPU del server per l'hashing. Questa vulnerabilità è nota come CVE-2016-6515. La mia POC può essere scaricata qui dovr...

wargame-turkey_in_2

wargame 1. dividi file flag 2. prevenzione forza bruta - ritardo 5000 5s 3. registrazione 4. hashing delle password -wargame-turkeyin2...

CVE-2026-19611

A flaw was found in WildFly Elytron. Password hashing and verification normalize input with Unicode NFKC, which can collapse fullwidth characters to ASCII equivalents. A remote attacker can more easily guess affected passwords by using an ASCII-only dictionary against accounts whose passwords wer...

CVE-2026-19611 Wildfly-elytron: org.wildfly.security/wildfly-elytron-password-impl: wildfly-elytron: password keyspace reduction via nfkc fullwidth folding

A flaw was found in WildFly Elytron. Password hashing and verification normalize input with Unicode NFKC, which can collapse fullwidth characters to ASCII equivalents. A remote attacker can more easily guess affected passwords by using an ASCII-only dictionary against accounts whose passwords wer...

EUVD-2026-63478

A flaw was found in WildFly Elytron. Password hashing and verification normalize input with Unicode NFKC, which can collapse fullwidth characters to ASCII equivalents. A remote attacker can more easily guess affected passwords by using an ASCII-only dictionary against accounts whose passwords wer...

CVE-2026-19611

The vulnerable component is org.wildfly.security/wildfly-elytron-password-impl in WildFly Elytron. Password hashing/verification applies Unicode NFKC normalization, collapsing fullwidth characters to ASCII equivalents, which reduces the effective password keyspace. This allows a remote attacker t...

CVE-2026-19611 Wildfly-elytron: org.wildfly.security/wildfly-elytron-password-impl: wildfly-elytron: password keyspace reduction via nfkc fullwidth folding

A flaw was found in WildFly Elytron. Password hashing and verification normalize input with Unicode NFKC, which can collapse fullwidth characters to ASCII equivalents. A remote attacker can more easily guess affected passwords by using an ASCII-only dictionary against accounts whose passwords wer...

CVE-2026-19611

A flaw was found in WildFly Elytron. Password hashing and verification normalize input with Unicode NFKC, which can collapse fullwidth characters to ASCII equivalents. A remote attacker can more easily guess affected passwords by using an ASCII-only dictionary against accounts whose passwords wer...

PT-2026-79049

A flaw was found in WildFly Elytron. Password hashing and verification normalize input with Unicode NFKC, which can collapse fullwidth characters to ASCII equivalents. A remote attacker can more easily guess affected passwords by using an ASCII-only dictionary against accounts whose passwords wer...

CVE-2026-75112

OTTO® Fleet Manager uses an insufficient bcrypt work factor, lowering the computational cost for offline brute-force attacks on stored password hashes if an attacker obtains an unencrypted system backup. CVSS 6.9 (Medium), ADJACENT vector. No exploitation reported; Rockwell advisory SD1791 refere...

EUVD-2026-62694

A security issue exists within OTTO® Fleet Manager. The vulnerability stems from the use of an insufficient work factor in the bcrypt password hashing implementation, which could reduce the computational cost required for an attacker to perform offline brute-force attacks against stored password...

CVE-2026-75112 OTTO® Fleet Manager – Weak Password Hashing Configuration

A security issue exists within OTTO® Fleet Manager. The vulnerability stems from the use of an insufficient work factor in the bcrypt password hashing implementation, which could reduce the computational cost required for an attacker to perform offline brute-force attacks against stored password...

UBUNTU-CVE-2026-53525

GHSA-vhv8-g2r9-cwcc: Non-Constant-Time Password Hash Comparison in Relay Authentication...

CVE-2026-57263

A vulnerability has been identified in LOGO! Soft Comfort All versions V9. The project password feature in the affected products stores the password as an unsalted SHA-256 hash. This could allow an attacker who has obtained the project file to perform efficient offline dictionary or brute-force...