Search Vulnerabilities

Weak password hashing in Windu CMS

Weak Password Hashing Mechanism in TP-Link Deco M5

FrontAccounting < 2.4.20 SQL Injection via rep601.php

Kestra BasicAuth Password Stored as SHA-512 Enables Offline Brute-Force Attack

Flowise - Insufficient Password Salt Rounds in Bcrypt Hashing

Crypt::PBKDF2 versions before 0.261630 for Perl have a weak default algorithm and number of iterations

QloApps 1.7.0 Weak Password Hashing via MD5 in Tools.php

MacGregor Voyage Data Recorder (VDR) G4e Use of Password Hash With Insufficient Computational Effort

electerm's encrypt method not safe enough

WeGIA: Use of Weak Password Hashing Algorithm (SHA-256, no salt) in html/login.php

RustDesk Encrypts Local Passwords with World-Readable Machine ID and Fixed Zero Nonce (XSalsa20-Poly1305)

RustDesk Auth Proof Uses Server-Controlled Salt/Challenge and Fast Double-SHA256, Enabling Offline Brute-Force

Weak Password Hash in Core Privileged Access Manager (BoKS)

Weak/Predictable root Password

Use of password hash with insufficient computational effort issue exists in BUFFALO Wi-Fi router 'WSR-1800AX4 series'

Xuxueli xxl-job Token Generation IndexController.java makeToken weak password hash

Use of Password Hash with Insufficient Computational Effort

A vulnerability in the users configuration file of ctrlX OS may allow a remote authenticated (low-privileged) attacker to recover the plaintext pas...

DBIx::Class::EncodedColumn until 0.00032 for Perl uses insecure rand() function for salting password hashes in Crypt/Eksblowfish/Bcrypt.pm

DBIx::Class::EncodedColumn until 0.00032 for Perl uses insecure rand() function for salting password hashes in Digest.pm