Lucene search
K

27 matches found

Debian CVE
Debian CVE
added 2014/11/25 11:0 p.m.37 views

CVE-2014-9034

wp-includes/class-phpass.php in WordPress before 3.7.5, 3.8.x before 3.8.5, 3.9.x before 3.9.3, and 4.x before 4.0.1 allows remote attackers to cause a denial of service CPU consumption via a long password that is improperly handled during hashing, a similar issue to CVE-2014-9016...

5CVSS5.6AI score0.82702EPSS
Exploits7
Debian CVE
Debian CVE
added 2014/11/24 3:0 p.m.33 views

CVE-2014-9016

Removed by vendor...

5CVSS6.2AI score0.82234EPSS
Exploits3
OSV
OSV
added 2013/06/21 1:57 p.m.6 views

UBUNTU-CVE-2013-2173

wp-includes/class-phpass.php in WordPress 3.5.1, when a password-protected post exists, allows remote attackers to cause a denial of service CPU consumption via a crafted value of a certain wp-postpass cookie...

4.3CVSS5.8AI score0.03373EPSS
Exploits2References3
Kitploit
Kitploit
added 2013/03/23 2:48 a.m.44 views

[oclHashcat-plus v0.14] Worlds fastest md5crypt, phpass, mscash2 and WPA/WPA2 cracker

Features Worlds fastest md5crypt, phpass, mscash2 and WPA / WPA2 cracker Worlds first and only GPGPU based rule engine Free Multi-GPU up to 128 gpus Multi-Hash up to 15 million hashes Multi-OS Linux & Windows native binaries Multi-Platform OpenCL & CUDA support Multi-Algo see below Low resource...

7.2AI score
Exploits0
Drupal
Drupal
added 2011/06/29 12:0 a.m.23 views

SA-CONTRIB-2011-026 - Secure Password Hashes (phpass) - Multiple Vulnerabilities

This module uses the PHPass hashing library to try to store users hashed passwords securely. The module sets a fixed string for the 'pass' column in the users database column but does not replace the pass attribute of the account object used for password reset links. This leads to a vulnerability...

7.2AI score
Exploits0References8
myhack58
myhack58
added 2009/04/03 12:0 a.m.16 views

phpass_crack-vulnerability warning-the black bar safety net

from:huaidan.org Trace: the new version of WordPress and phpbb has been deprecated md5, using phpass encryption. there are some other open source WEB. The original DarkC0de posted on aphpass.py, is with dictionary crack, this PhpassCrack too. PasswordsProofficial download of the latest version al...

1.4AI score
Exploits0
Cvelist
Cvelist
added 2007/11/08 8:0 p.m.15 views

CVE-2003-1533

SQL injection vulnerability in accesscontrol.php in PhpPass 2 allows remote attackers to execute arbitrary SQL commands via the 1 uid and 2 pwd parameters...

8.4AI score0.00971EPSS
Exploits1References4
Rows per page
Query Builder