CVE-2026-75106

OpnForm (open-source form builder) contains a critical vulnerability in its editable-submission secret derivation mechanism. Secrets are generated from sequential row identifiers using Hashids with an empty default salt , making them fully predictable. An unauthenticated attacker can compute vali...

CVE-2026-6659 Crypt::PasswdMD5 versions through 1.42 for Perl generates insecure random values for salts

Crypt::PasswdMD5 versions through 1.42 for Perl generates insecure random values for salts. The built-in rand function is predictable, and unsuitable for cryptography...

EUVD-2022-5044

Malicious code in bioql PyPI...

SUSE CVE-2014-0083

The Ruby net-ldap gem before 0.11 uses a weak salt when generating SSHA passwords...

GHSA-QWGM-MXM4-3Q2C net-ldap has weak salt when generating passwords

The Ruby net-ldap gem before 0.16.2 uses a weak salt when generating SSHA passwords...

net-ldap has weak salt when generating passwords

The Ruby net-ldap gem before 0.16.2 uses a weak salt when generating SSHA passwords...

CVE-2014-0083

The Ruby net-ldap gem before 0.11 uses a weak salt when generating SSHA passwords...

Design/Logic Flaw

The Ruby net-ldap gem before 0.11 uses a weak salt when generating SSHA passwords...

CVE-2014-0083

The Ruby net-ldap gem before 0.11 uses a weak salt when generating SSHA passwords...

UBUNTU-CVE-2014-0083

The Ruby net-ldap gem before 0.11 uses a weak salt when generating SSHA passwords...

CVE-2014-0083

The Ruby net-ldap gem before 0.11 uses a weak salt when generating SSHA passwords...

CVE-2014-0083

The Ruby net-ldap gem before 0.11 uses a weak salt when generating SSHA passwords...

CVE-2014-0083: Use of Password Hash With Insufficient Computational Effort

The Ruby net-ldap gem before 0.11 uses a weak salt when generating SSHA passwords...

Default credentials

An issue was discovered in BTITeam XBTIT 2.5.4. When a user logs in, their password hash is rehashed using a predictable salt and stored in the "pass" cookie, which is not flagged as HTTPOnly. Due to the weak and predictable salt that is in place, an attacker who successfully steals this cookie c...

CVE-2018-15681: Incorrect Permission Assignment for Critical Resource

An issue was discovered in BTITeam XBTIT 2.5.4. When a user logs in, their password hash is rehashed using a predictable salt and stored in the "pass" cookie, which is not flagged as HTTPOnly. Due to the weak and predictable salt that is in place, an attacker who successfully steals this cookie c...

CVE-2013-0173: Undefined Security Weakness

Foreman before 1.1 uses a salt of "foreman" to hash root passwords, which makes it easier for attackers to guess the password via a brute force attack...

CVE-2009-5014

The default quickstart configuration of TurboGears2 aka tg2 before 2.0.2 has a weak cookie salt, which makes it easier for remote attackers to bypass repoze.who authentication via a forged authorization cookie, a related issue to CVE-2010-3852...

CVE-2009-4304: Undefined Security Weakness

Moodle 1.8 before 1.8.11 and 1.9 before 1.9.7 does not use a random password salt in config.php, which makes it easier for attackers to conduct brute-force password guessing attacks...

CVE-2006-0591: Undefined Security Weakness

The cryptgensalt functions for BSDI-style extended DES-based and FreeBSD-sytle MD5-based password hashes in cryptblowfish 0.4.7 and earlier do not evenly and randomly distribute salts, which makes it easier for attackers to guess passwords from a stolen password file due to the increased number o...

CVE-2002-1975

Sharp Zaurus PDA SL-5000D and SL-5500 uses a salt of "A0" to encrypt the screen-locking password as stored in the Security.conf file, which makes it easier for local users to guess the password via brute force methods...