The vulnerability of the microprogrammed network router Advantech BB-ERT351, related to the use of a unreliable cryptographic algorithm, allows a hacker to retrieve the administrator password from the hash.

The vulnerability of the microprogrammed network router Advantech BB-ERT351 is related to the use of a unreliable cryptographic algorithm for hashing passwords. Exploiting this vulnerability could allow an attacker, operating remotely, to retrieve the administrator’s password from the hash...

CVE-2020-10538

An issue was discovered in Epikur before 20.1.1. It stores the secret passwords of the users as MD5 hashes in the database. MD5 can be brute-forced efficiently and should not be used for such purposes. Additionally, since no salt is used, rainbow tables can speed up the attack...

PhpList Authentication Bypass Vulnerability (CNVD-2021-48845)

PhpList is a suite of open source newsletter and email marketing software from PhpList UK. A security vulnerability exists in phpList 3.5.3 that stems from the use of == instead of === for password hashing. No details of the vulnerability are provided at this time...

PhpList 安全漏洞

PhpList is a suite of open source newsletter and email marketing software from PhpList UK. A security vulnerability exists in phpList 3.5.3 that stems from the use of == instead of === for password hashing. No details of the vulnerability are provided at this time...

CVE-2021-21253

OnlineVotingSystem is an open source project hosted on GitHub. OnlineVotingSystem before version 1.1.2 hashes user passwords without a salt, which is vulnerable to dictionary attacks. Therefore there is a threat of security breach in the voting system. Without a salt, it is much easier for...

Information disclosure

OnlineVotingSystem is an open source project hosted on GitHub. OnlineVotingSystem before version 1.1.2 hashes user passwords without a salt, which is vulnerable to dictionary attacks. Therefore there is a threat of security breach in the voting system. Without a salt, it is much easier for...

PT-2021-14363 · Unknown · Onlinevotingsystem

Name of the Vulnerable Software and Affected Versions: OnlineVotingSystem versions prior to 1.1.2 Description: The issue concerns the hashing of user passwords without a salt, making the system vulnerable to dictionary attacks. This vulnerability allows attackers to pre-compute hash values using...

CVE-2020-8466

A command injection vulnerability in Trend Micro InterScan Web Security Virtual Appliance 6.5 SP2, with the improved password hashing method enabled, could allow an unauthenticated attacker to execute certain commands by providing a manipulated password...

Command injection

A command injection vulnerability in Trend Micro InterScan Web Security Virtual Appliance 6.5 SP2, with the improved password hashing method enabled, could allow an unauthenticated attacker to execute certain commands by providing a manipulated password...

CVE-2020-8466

A command injection vulnerability in Trend Micro InterScan Web Security Virtual Appliance 6.5 SP2, with the improved password hashing method enabled, could allow an unauthenticated attacker to execute certain commands by providing a manipulated password...

CVE-2020-17494

Untangle Firewall NG before 16.0 uses MD5 for passwords...

CVE-2020-17494

Untangle Firewall NG before 16.0 uses MD5 for passwords...

ipa: No password length restriction leads to denial of service

A flaw was found in IPA. When sending a very long password = 1,000,000 characters to the server, the password hashing process could exhaust memory and CPU leading to a denial of service and the website becoming unresponsive. The highest threat from this vulnerability is to system availability...

openSUSE Security Update : nextcloud (openSUSE-2020-1652)

This update for nextcloud fixes the following issues : nextcloud version 20.0.0 fix some security issues : - NC-SA-2020-037 PIN for passwordless WebAuthm is asked for but not verified - NC-SA-2020-033 CVE-2020-8228 Missing rate limit on signup page - NC-SA-2020-029 CVE-2020-8233, boo1177346...

Nextcloud: Possible denial of service when entering a loooong password

You can create a very long password until you get the last user to put and aries or DoS. Normally passwords have 8-10-24 digits. By sending a very long password 1.000.000 characters Usually this problem is caused by a vulnerable password hashing implementation. When a long password is sent, the...

CVE-2020-14489

OpenClinic GA 5.09.02 and 5.89.05b stores passwords using inadequate hashing complexity, which may allow an attacker to recover passwords using known password cracking techniques...

CVE-2020-14489

OpenClinic GA 5.09.02 and 5.89.05b stores passwords using inadequate hashing complexity, which may allow an attacker to recover passwords using known password cracking techniques...

Design/Logic Flaw

OpenClinic GA 5.09.02 and 5.89.05b stores passwords using inadequate hashing complexity, which may allow an attacker to recover passwords using known password cracking techniques...

CVE-2020-14489

OpenClinic GA versions 5.09.02 and 5.89.05b are affected by CVE-2020-14489 due to storing passwords with inadequate hashing complexity, potentially enabling password recovery via known cracking techniques. Affected component: password storage mechanism. Impact: attacker could recover user passwor...

CVE-2020-14489 OpenClinic GA

OpenClinic GA 5.09.02 and 5.89.05b stores passwords using inadequate hashing complexity, which may allow an attacker to recover passwords using known password cracking techniques...