Lucene search
+L

1532 matches found

Kitploit
Kitploit
•added 2026/10/20 5:53 a.m.•15 views

Digisol-DG--GR1321-s-Password-Storage-in-Plaintext--CVE-2024-4232

Digisol-DG--GR1321-s-Password-Storage-in-Plaintext--CVE-2024-4232...

5.4CVSS6AI score0.0034EPSS
SaveExploits0
Kitploit
Kitploit
•added 2026/10/20 3:59 a.m.•19 views

CVE-2023-45185

CVE-2023-45184 IBM i Access Client Solutions 1.1.9.4 - Remote code execution via insecure deserialisation. Timeline Vulnerability reported to vendor: 22.09.2023 New fixed 1.1.9.4 version released: 08.12.2023 Public disclosure: 15.12.2023 Description IBM i Access Client Solutions uses insecure...

8.8CVSS8.5AI score0.01624EPSS
SaveExploits1
Kitploit
Kitploit
•added 2026/10/19 3:55 a.m.•41 views

pmanager

Pmanager Demo Description Store and retrieve your passwords from a secure offline database. Check if your passwords has leaked previously to prevent targeted password reuse attacks. Why develop another password manager ? This project was initially born from my desire to learn Rust. I was tired of...

6.2AI score
SaveExploits0References2
Kitploit
Kitploit
•added 2026/10/18 6:59 p.m.•19 views

aes256_passwd_store

aes256passwdstore This script securely encrypts or decrypts passwords on disk within a custom database file. It also features functionality to retrieve passwords from a previously generated database file. This script takes a master password from stdin/from memory, hashes the password using the...

6.3AI score
SaveExploits0
Kitploit
Kitploit
•added 2026/10/15 12:42 p.m.•20 views

CVE-2022-43117

Suggested description Sourcecodester Password Storage Application in PHP/OOP and MySQL 1.0 was discovered to contain multiple cross-site scripting XSS vulnerabilities via the Name, Username, Description and Site Feature parameters. Additional Information Proof Of Concept:...

5.4CVSS5.9AI score0.0082EPSS
SaveExploits1
EUVD
EUVD
•added 2026/10/09 12:31 a.m.•14 views

EUVD-2026-95309

Jivejdon through 5.0 contains a weak password storage vulnerability that stores account passwords as unsalted MD5 digests via ToolsUtil.hash in AccountDaoSql. Attackers who obtain the user table through database access or SQL injection can crack passwords with precomputed tables or GPU attacks...

8.2CVSS5.8AI score0.00197EPSS
SaveExploits0References9
NVD
NVD
•added 2026/10/08 10:17 p.m.•12 views

CVE-2026-107829

Jivejdon through 5.0 contains a weak password storage vulnerability that stores account passwords as unsalted MD5 digests via ToolsUtil.hash in AccountDaoSql. Attackers who obtain the user table through database access or SQL injection can crack passwords with precomputed tables or GPU attacks...

8.2CVSS0.00197EPSS
SaveExploits0References8
osv_cve
osv_cve
•added 2026/10/08 9:51 p.m.•16 views

CVE-2026-107829 Jivejdon through 5.0 Unsalted MD5 Password Storage via AccountDaoSql

Jivejdon through 5.0 contains a weak password storage vulnerability that stores account passwords as unsalted MD5 digests via ToolsUtil.hash in AccountDaoSql. Attackers who obtain the user table through database access or SQL injection can crack passwords with precomputed tables or GPU attacks...

8.2CVSS5.9AI score
SaveExploits0References10
CVE
CVE
•added 2026/10/08 9:51 p.m.•16 views

CVE-2026-107829

Jivejdon versions through 5.0 are vulnerable to a weak password storage issue. The application uses ToolsUtil.hash() in AccountDaoSql to store account passwords as unsalted MD5 digests . If an attacker gains access to the user table via database access or SQL injection , they can crack the passwo...

8.2CVSS5.8AI score0.00197EPSS
SaveExploits0References8
Cvelist
Cvelist
•added 2026/10/08 9:51 p.m.•46 views

CVE-2026-107829 Jivejdon through 5.0 Unsalted MD5 Password Storage via AccountDaoSql

Jivejdon through 5.0 contains a weak password storage vulnerability that stores account passwords as unsalted MD5 digests via ToolsUtil.hash in AccountDaoSql. Attackers who obtain the user table through database access or SQL injection can crack passwords with precomputed tables or GPU attacks...

8.2CVSS0.00197EPSS
SaveExploits0References8
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/08 12:00 a.m.•11 views

CVE-2026-107829: Use of Password Hash With Insufficient Computational Effort

Jivejdon through 5.0 contains a weak password storage vulnerability that stores account passwords as unsalted MD5 digests via ToolsUtil.hash in AccountDaoSql. Attackers who obtain the user table through database access or SQL injection can crack passwords with precomputed tables or GPU attacks...

8.2CVSS5.8AI score0.00197EPSS
SaveExploits0References2
The Hacker News
The Hacker News
•added 2026/10/07 11:56 a.m.•22 views

FBI Warns FortiBleed Remains Active After Amassing 86,644 Fortinet Device Credentials

The U.S. Federal Bureau of Investigation FBI and Secret Service USSS on Tuesday warned that the FortiBleed credential harvesting campaign remains an active threat aimed at internet-facing Fortinet FortiGate firewalls and secure socket layer SSL virtual private network VPN gateways. "The campaign...

5.7AI score
SaveExploits0
AstraLinux
AstraLinux
•added 2026/10/05 11:39 a.m.•16 views

Astra Linux – Vulnerability in LibreOffice

LibreOffice supports the storage of passwords for web connections in the user’s configuration database. The stored passwords are encrypted using a single master key provided by the user. There was a flaw in LibreOffice where the required initialization vector for encryption was always the same,...

7.5CVSS7.4AI score0.01126EPSS
SaveExploits0References2
NVD
NVD
•added 2026/09/25 2:17 p.m.•19 views

CVE-2026-84884

IBM Guardium Data Protection 12.2 stores internal REST service-account passwords in a reversible plaintext-equivalent format. An authenticated attacker who gains access to the stored credential could recover the password and obtain an administrative REST access token...

7.5CVSS0.00235EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/09/25 2:00 p.m.•55 views

CVE-2026-84884 IBM Guardium Data Protection is affected by multiple vulnerabilities.

IBM Guardium Data Protection 12.2 stores internal REST service-account passwords in a reversible plaintext-equivalent format. An authenticated attacker who gains access to the stored credential could recover the password and obtain an administrative REST access token...

7.5CVSS0.00235EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/09/25 2:00 p.m.•14 views

CVE-2026-84884 IBM Guardium Data Protection is affected by multiple vulnerabilities.

IBM Guardium Data Protection 12.2 stores internal REST service-account passwords in a reversible plaintext-equivalent format. An authenticated attacker who gains access to the stored credential could recover the password and obtain an administrative REST access token...

7.5CVSS5.8AI score0.00235EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/25 12:00 a.m.•13 views

CVE-2026-84884: Plaintext Storage of a Password

IBM Guardium Data Protection 12.2 stores internal REST service-account passwords in a reversible plaintext-equivalent format. An authenticated attacker who gains access to the stored credential could recover the password and obtain an administrative REST access token...

7.5CVSS5.8AI score0.00235EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/09/17 12:00 a.m.•13 views

PT-2026-94252

Name of the Vulnerable Software and Affected Versions admin3 versions 3.0.0 through 3.0.0 Description Account passwords are stored using a single-round MD5 hash with only the username as salt and no key derivation function a method used to strengthen passwords by adding computational cost. This...

6.9CVSS5.7AI score0.00301EPSS
SaveExploits0References8
CVE
CVE
•added 2026/09/14 6:42 a.m.•35 views

CVE-2026-82783

A plaintext password storage flaw affects the CONPROSYS nano Series , a product by Contec. If exploited, an attacker with physical access to the device can obtain stored credentials. The vulnerability requires high attack complexity and no prior privileges (CVSS 4.0: 4.1 MEDIUM ; CVSS 3.1: 4.2 ME...

4.2CVSS6.3AI score0.00175EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/14 12:00 a.m.•8 views

CVE-2026-82783: Plaintext Storage of a Password

Plaintext storage of a password issue exists in CONPROSYS nano Series . If this vulnerability is exploited, an attacker with physical access to the product may obtain credentials...

4.2CVSS6.4AI score0.00175EPSS
SaveExploits0References2
Rows per page
Query Builder