CVE-2025-30049

The CGM CLININET application stores user passwords as unsalted MD5 hashes. This issue was fixed in versions 2026.MS1 and 2026.MS3...

EUVD-2025-211179

The CGM CLININET application stores user passwords as unsalted MD5 hashes. This issue was fixed in versions 2026.MS1 and 2026.MS3...

CVE-2025-30049

The CGM CLININET application is vulnerable to the use of unsalted MD5 password hashes , which provide insufficient computational effort for security. This flaw allows for potential credential compromise. The issue was addressed in versions 2026.MS1 and 2026.MS3 . No specific exploit details or in...

CVE-2025-30049 Use of Unsalted MD5 Password Hashes in CGM CLININET

The CGM CLININET application stores user passwords as unsalted MD5 hashes. This issue was fixed in versions 2026.MS1 and 2026.MS3...

PT-2026-121801

The CGM CLININET application stores user passwords as unsalted MD5 hashes. This issue was fixed in versions 2026.MS1 and 2026.MS3...

CVE-2025-30049: Use of Password Hash With Insufficient Computational Effort

The CGM CLININET application stores user passwords as unsalted MD5 hashes. This issue was fixed in versions 2026.MS1 and 2026.MS3...

CVE-2026-110104

Xxyopen novel through 3.5.0 contains a weak password hashing vulnerability that allows attackers to recover plaintext passwords because UserServiceImpl.register stores unsalted MD5 digests in userinfo.password. Attackers who obtain the password column through a database leak or backup exposure ca...

CVE-2026-110104 novel through 3.5.0 Unsalted MD5 Password Storage

Xxyopen novel through 3.5.0 contains a weak password hashing vulnerability that allows attackers to recover plaintext passwords because UserServiceImpl.register stores unsalted MD5 digests in userinfo.password. Attackers who obtain the password column through a database leak or backup exposure ca...

CVE-2026-110104

The Xxyopen novel software (versions through 3.5.0 ) contains a weak password hashing vulnerability. The UserServiceImpl.register() function stores unsalted MD5 digests in the user_info.password field. If an attacker gains access to the password column via a database leak or backup exposure, they...

EUVD-2026-98937

Xxyopen novel through 3.5.0 contains a weak password hashing vulnerability that allows attackers to recover plaintext passwords because UserServiceImpl.register stores unsalted MD5 digests in userinfo.password. Attackers who obtain the password column through a database leak or backup exposure ca...

CVE-2026-110104 novel through 3.5.0 Unsalted MD5 Password Storage

Xxyopen novel through 3.5.0 contains a weak password hashing vulnerability that allows attackers to recover plaintext passwords because UserServiceImpl.register stores unsalted MD5 digests in userinfo.password. Attackers who obtain the password column through a database leak or backup exposure ca...

CVE-2026-110104 novel through 3.5.0 Unsalted MD5 Password Storage

Xxyopen novel through 3.5.0 contains a weak password hashing vulnerability that allows attackers to recover plaintext passwords because UserServiceImpl.register stores unsalted MD5 digests in userinfo.password. Attackers who obtain the password column through a database leak or backup exposure ca...

CVE-2026-110104: Use of Password Hash With Insufficient Computational Effort

Xxyopen novel through 3.5.0 contains a weak password hashing vulnerability that allows attackers to recover plaintext passwords because UserServiceImpl.register stores unsalted MD5 digests in userinfo.password. Attackers who obtain the password column through a database leak or backup exposure ca...

PT-2026-111698

Xxyopen novel through 3.5.0 contains a weak password hashing vulnerability that allows attackers to recover plaintext passwords because UserServiceImpl.register stores unsalted MD5 digests in user info.password. Attackers who obtain the password column through a database leak or backup exposure c...

CVE-2026-109321

The grav-plugin-login-oauth plugin (versions before 1.4.3 ) contains a predictable local credentials vulnerability. The flaw stems from the plugin provisioning OAuth accounts as standard Grav users using a deterministic username format (. ) and an unsalted MD5 hash of the provider identifier as t...

CVE-2026-109321 Grav Login OAuth Plugin before 1.4.3 Predictable Local Credentials Authentication Bypass

Grav Login OAuth plugin grav-plugin-login-oauth before 1.4.3 provisions OAuth accounts as ordinary Grav users with a deterministic . username and an unsalted MD5 hash of the provider identifier as the password, without disabling password login. Unauthenticated remote attackers who learn or guess ...

CVE-2026-107829

Jivejdon through 5.0 contains a weak password storage vulnerability that stores account passwords as unsalted MD5 digests via ToolsUtil.hash in AccountDaoSql. Attackers who obtain the user table through database access or SQL injection can crack passwords with precomputed tables or GPU attacks...

CVE-2026-107829 Jivejdon through 5.0 Unsalted MD5 Password Storage via AccountDaoSql

Jivejdon through 5.0 contains a weak password storage vulnerability that stores account passwords as unsalted MD5 digests via ToolsUtil.hash in AccountDaoSql. Attackers who obtain the user table through database access or SQL injection can crack passwords with precomputed tables or GPU attacks...

CVE-2026-107829

Jivejdon versions through 5.0 are vulnerable to a weak password storage issue. The application uses ToolsUtil.hash() in AccountDaoSql to store account passwords as unsalted MD5 digests . If an attacker gains access to the user table via database access or SQL injection , they can crack the passwo...

CVE-2026-107829 Jivejdon through 5.0 Unsalted MD5 Password Storage via AccountDaoSql

Jivejdon through 5.0 contains a weak password storage vulnerability that stores account passwords as unsalted MD5 digests via ToolsUtil.hash in AccountDaoSql. Attackers who obtain the user table through database access or SQL injection can crack passwords with precomputed tables or GPU attacks...