Search Vulnerabilities

RustDesk Encrypts Local Passwords with World-Readable Machine ID and Fixed Zero Nonce (XSalsa20-Poly1305)

RustDesk Server Controls All Handshake Entropy (Salt/Challenge), Enabling Offline Brute-Force

RustDesk Client Generates Auth Proof Without Client-Side Nonce, Enabling Replay Attacks

Weak Password Hash in Core Privileged Access Manager (BoKS)

Weak/Predictable root Password

Use of password hash with insufficient computational effort issue exists in BUFFALO Wi-Fi router 'WSR-1800AX4 series'

Xuxueli xxl-job Token Generation IndexController.java makeToken weak password hash

Use of Password Hash with Insufficient Computational Effort

A vulnerability in the users configuration file of ctrlX OS may allow a remote authenticated (low-privileged) attacker to recover the plaintext pas...

DBIx::Class::EncodedColumn until 0.00032 for Perl uses insecure rand() function for salting password hashes in Crypt/Eksblowfish/Bcrypt.pm

DBIx::Class::EncodedColumn until 0.00032 for Perl uses insecure rand() function for salting password hashes in Digest.pm

Broken or Risky Cryptographic Algorithm, Use of Password Hash With Insufficient Computational Effort, Use of Weak Hash, Use of a One-Way Hash wit...

IROAD Dash Cam FX2 Password Hash passwd weak password hash

Santesoft Sante PACS Server HTTP.db SHA1 Hash Truncation

Command Injection Vulnerability

Misuse of SHA256 to create an encryption key

Bludit uses SHA1 as Password Hashing Algorithm

Freeipa: user can obtain a hash of the passwords of all domain users and perform offline brute force

A use of password hash with insufficient computational effort vulnerability [CWE-916] affecting FortiOS version 7

Improved security for stored password hashes