Lucene search
+L

14 matches found

Kitploit
Kitploit
•added 2026/10/12 11:16 a.m.•23 views

DEScrypt-CPU-Collision-Cracker

DEScrypt-CPU-Collision-Cracker What is DEScrypt-CPU-Collision-Cracker? A linux based high performance DEScrypt CPU cracker written in c++, it deduces the salt and uses a password list to crack hashes. Why not use a rainbow table? DEScrypt uses by default a two byte saltcomprised of characters...

6.3AI score
SaveExploits0
RedhatCVE
RedhatCVE
•added 2026/09/28 9:48 a.m.•17 views

CVE-2026-97469

A flaw was found in PostgreSQL Anonymizer. An authenticated, unprivileged masked user can bypass access restrictions to execute restricted functions by embedding function calls within a subquery. By repeatedly invoking functions such as anon.hash, an attacker can collect output to deduce the...

4.3CVSS6AI score0.00118EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2026/09/25 3:40 p.m.•46 views

CVE-2026-97469 PostgreSQL Anonymizer: RESTRICTED functions are reachable through a subLink

PostgreSQL Anonymizer contains a vulnerability that allows unprivileged masked users to repeatedly call the anon.hash function and collects seed, hashoutput pairs to perform an offline brute-force attack and deduce the salt. A masked role can run a RESTRICTED function when the call is placed insi...

4.3CVSS0.00118EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/09/25 3:40 p.m.•18 views

EUVD-2026-87134

PostgreSQL Anonymizer contains a vulnerability that allows unprivileged masked users to repeatedly call the anon.hash function and collects seed, hashoutput pairs to perform an offline brute-force attack and deduce the salt. A masked role can run a RESTRICTED function when the call is placed insi...

4.3CVSS5.7AI score0.00118EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/09/25 3:40 p.m.•18 views

CVE-2026-97469 PostgreSQL Anonymizer: RESTRICTED functions are reachable through a subLink

PostgreSQL Anonymizer contains a vulnerability that allows unprivileged masked users to repeatedly call the anon.hash function and collects seed, hashoutput pairs to perform an offline brute-force attack and deduce the salt. A masked role can run a RESTRICTED function when the call is placed insi...

4.3CVSS5.7AI score0.00118EPSS
SaveExploits0References1
CVE
CVE
•added 2026/09/25 3:40 p.m.•33 views

CVE-2026-97469

PostgreSQL Anonymizer contains a vulnerability allowing authenticated, unprivileged masked users to bypass access restrictions by embedding function calls within a subquery . This allows the execution of RESTRICTED functions, such as anon.hash() . An attacker can repeatedly invoke these functions...

4.3CVSS5.7AI score0.00118EPSS
SaveExploits0References1
OSV
OSV
•added 2026/09/25 3:40 p.m.•11 views

CVE-2026-97469 PostgreSQL Anonymizer: RESTRICTED functions are reachable through a subLink

PostgreSQL Anonymizer contains a vulnerability that allows unprivileged masked users to repeatedly call the anon.hash function and collects seed, hashoutput pairs to perform an offline brute-force attack and deduce the salt. A masked role can run a RESTRICTED function when the call is placed insi...

4.3CVSS5.8AI score
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/09/25 12:00 a.m.•7 views

PT-2026-98889

Name of the Vulnerable Software and Affected Versions PostgreSQL Anonymizer versions prior to 3.2.3 Description Unprivileged masked users can repeatedly call the anon.hash function to collect seed and hash output pairs. This allows for an offline brute-force attack to deduce the salt. Additionall...

4.3CVSS5.9AI score0.00118EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/25 12:00 a.m.•14 views

CVE-2026-97469: Use of Weak Hash

PostgreSQL Anonymizer contains a vulnerability that allows unprivileged masked users to repeatedly call the anon.hash function and collects seed, hashoutput pairs to perform an offline brute-force attack and deduce the salt. A masked role can run a RESTRICTED function when the call is placed insi...

4.3CVSS5.8AI score0.00118EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
•added 2026/06/30 8:15 p.m.•27 views

CVE-2026-13455

A flaw was found in PostgreSQL Anonymizer. Unprivileged masked users can repeatedly call the anon.hash function to collect seed and hash output pairs. This allows an attacker to perform an offline brute-force attack to deduce the salt, potentially leading to information disclosure. Mitigation...

4.3CVSS5.7AI score0.00188EPSS
SaveExploits0References4
NVD
NVD
•added 2026/06/30 4:16 p.m.•30 views

CVE-2026-13455

PostgreSQL Anonymizer contains a vulnerability that allows unprivileged masked users to repeatedly call the anon.hash function and collects seed, hashoutput pairs to perform an offline brute-force attack and deduce the salt. The problem is resolved in PostgreSQL Anonymizer 3.1.2 and later version...

4.3CVSS0.00188EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2026/06/30 3:19 p.m.•38 views

CVE-2026-13455

PostgreSQL Anonymizer contains a vulnerability that allows unprivileged masked users to repeatedly call the anon.hash function and collects seed, hashoutput pairs to perform an offline brute-force attack and deduce the salt. The problem is resolved in PostgreSQL Anonymizer 3.1.2 and later version...

4.3CVSS5.8AI score0.00188EPSS
SaveExploits0References2Affected Software1
Vulnrichment
Vulnrichment
•added 2026/06/30 3:19 p.m.•22 views

CVE-2026-13455 PostgreSQL Anonymizer: Unrestricted function can leak the secret salt

PostgreSQL Anonymizer contains a vulnerability that allows unprivileged masked users to repeatedly call the anon.hash function and collects seed, hashoutput pairs to perform an offline brute-force attack and deduce the salt. The problem is resolved in PostgreSQL Anonymizer 3.1.2 and later version...

4.3CVSS5.8AI score0.00188EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/06/30 12:00 a.m.•6 views

CVE-2026-13455: Use of Weak Hash

PostgreSQL Anonymizer contains a vulnerability that allows unprivileged masked users to repeatedly call the anon.hash function and collects seed, hashoutput pairs to perform an offline brute-force attack and deduce the salt. The problem is resolved in PostgreSQL Anonymizer 3.1.2 and later version...

4.3CVSS5.8AI score0.00188EPSS
SaveExploits0References3
Rows per page
Query Builder