161 matches found
Wagtail: Identification of documents by SHA1 hash
Impact By passing specific HTTP headers to the document serve URL endpoint, an attacker was able to determine whether a document with a given ID matched a specified SHA1 hash, regardless of any permission restrictions on the document or knowing its filename. This could allow an attacker to...
GHSA-92HV-J533-69WC Wagtail: Identification of documents by SHA1 hash
Impact By passing specific HTTP headers to the document serve URL endpoint, an attacker was able to determine whether a document with a given ID matched a specified SHA1 hash, regardless of any permission restrictions on the document or knowing its filename. This could allow an attacker to...
Improper Handling of Insufficient Permissions or Privileges
Overview wagtail is an open source content management system built on Django. Affected versions of this package are vulnerable to Improper Handling of Insufficient Permissions or Privileges in the document retrieval. An attacker can confirm the existence of a document with a known SHA1 hash by...
PT-2026-83650
Impact By passing specific HTTP headers to the document serve URL endpoint, an attacker was able to determine whether a document with a given ID matched a specified SHA1 hash, regardless of any permission restrictions on the document or knowing its filename. This could allow an attacker to...
CVE-2026-13577 Dancer2 versions before 2.2.0 for Perl generate insecure session ids when required CSPRNG modules are unavailable
Dancer2 versions before 2.2.0 for Perl generate insecure session ids when required CSPRNG modules are unavailable. Dancer2::Core::Role::SessionFactory::generateid silently falls back to a built-in rand-derived session id unless both Math::Random::ISAAC::XS and Crypt::URandom are available. The...
IKEv1 Denial of Service via RSA-SHA1 (PKCS#1 Version 1.5 Encrypted) authentication payload
...
PT-2026-22392
Name of the Vulnerable Software and Affected Versions HTTP::Session2 versions prior to 1.12 Description The software may generate weak session IDs using the rand function. The session ID generator returns a SHA-1 hash seeded with the rand function, epoch time, and the process ID PID. The rand...
MS12-075: Vulnerabilities in Windows kernel-mode drivers could allow remote code execution: November 13, 2012
MS12-075: Vulnerabilities in Windows kernel-mode drivers could allow remote code execution: November 13, 2012 INTRODUCTION Microsoft has released security bulletin MS12-075. To view the complete security bulletin, visit one of the following Microsoft websites: Home users:...
(Windows Insider Program) Servicing stack update for Windows 10, Version 1903: May 1, 2019
Windows Insider Program Servicing stack update for Windows 10, Version 1903: May 1, 2019 Applies To Windows 10, version 1903, all editions Summary Microsoft released a new Servicing stack update to Window Insider program Slow, Fast and Release Preview rings. This update makes quality improvements...
Servicing stack update for Windows 10, version 2004: September 8, 2020
Servicing stack update for Windows 10, version 2004: September 8, 2020 Applies To Windows 10, version 2004, all editions Applies to Windows 10, version 2004 for 32-bit Systems Windows 10, version 2004 for ARM64-based Systems Windows 10, version 2004 for x64-based Systems Windows Server, version...
Servicing stack update for Windows 10 version 1607: October 8, 2019
Servicing stack update for Windows 10 version 1607: October 8, 2019 Applies To Windows 10, version 1607, all editions Summary This update makes quality improvements to the servicing stack, which is the component that installs Windows updates. Key changes include the following: Improves the Secure...
Servicing stack update for Windows 10, version 1903: November 12, 2019
Servicing stack update for Windows 10, version 1903: November 12, 2019 Applies To Windows 10, version 1903, all editions Summary This update makes quality improvements to the servicing stack, which is the component that installs Windows updates. We strongly recommend you install the latest...
Servicing stack update for Windows 10, version 1709: November 12, 2019
Servicing stack update for Windows 10, version 1709: November 12, 2019 Applies To Windows 10, version 1709, all editions Summary This update makes quality improvements to the servicing stack, which is the component that installs Windows updates. We strongly recommend you install the latest...
EUVD-2006-1545
Malware in sbrugna...
EUVD-2008-0590
Malware in sbrugna...
EUVD-2024-22464
Malicious code in bioql PyPI...
PYSEC-2025-98
A Server-Side Request Forgery SSRF vulnerability was discovered in gaizhenbiao/chuanhuchatgpt version 20240914. The vulnerability allows an attacker to construct a response link by saving the response in a folder named after the SHA-1 hash of the target URL. This enables the attacker to access th...
CVE-2025-2265
The password of a web user in "Sante PACS Server.exe" is zero-padded to 0x2000 bytes, SHA1-hashed, base64-encoded, and stored in the USER table in the SQLite database HTTP.db. However, the number of hash bytes encoded and stored is truncated if the hash contains a zero byte...
CVE-2025-2265
The password of a web user in "Sante PACS Server.exe" is zero-padded to 0x2000 bytes, SHA1-hashed, base64-encoded, and stored in the USER table in the SQLite database HTTP.db. However, the number of hash bytes encoded and stored is truncated if the hash contains a zero byte...
CVE-2025-2265
The CVE-2025-2265 entry concerns Santesoft Sante PACS Server (Sante PACS Server.exe) where a web user’s password is processed as a 0x2000-byte zero-padded value that is SHA-1 hashed, base64-encoded, and stored in the HTTP.db’s USER table. The reported issue is that the number of hash bytes encode...