<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"><channel><title>agentprime: CWE-836</title><description>Every new CWE-836 Advisory and CVE.</description><link>https://agentprime.io/</link><item><title>CVE-2026-63158: Omnispace Agora Project &lt; 26.10.0 Pass-the-Hash Authentication Bypass via Cookies</title><link>https://agentprime.io/advisories/CVE-2026-63158/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-63158/</guid><description>CVSS 9.1 (Critical). Critical: CVSS score 9.1: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 13 Oct 2026 19:45:03 GMT</pubDate><category>CVE</category><category>critical</category></item><item><title>motionEye: Authentication possible via password hash</title><link>https://agentprime.io/advisories/GHSA-r3cw-c95m-wfh9/</link><guid isPermaLink="true">https://agentprime.io/advisories/GHSA-r3cw-c95m-wfh9/</guid><description>motioneye &lt;0.44.0, fixed in 0.44.0. CVSS 9.1 (Critical). Critical: CVSS score 9.1: 9.0 or more. Published by the GitHub Advisory Database. Not analysed by agentprime yet.</description><pubDate>Mon, 29 Jun 2026 11:50:52 GMT</pubDate><category>PyPI</category><category>motioneye</category><category>critical</category></item><item><title>CVE-2026-44736: OpenProject: Relations API Filter Bypasses Visibility Scope, Leaking Cross-Project Work Package Subjects</title><link>https://agentprime.io/advisories/CVE-2026-44736/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-44736/</guid><description>CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 26 Jun 2026 19:27:54 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-9222: Setracker2 Children&apos;s Smartwatch Ecosystem Use of password hash instead of password for authentication</title><link>https://agentprime.io/advisories/CVE-2026-9222/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-9222/</guid><description>CVSS 9.2 (Critical). Critical: CVSS score 9.2: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 25 Jun 2026 23:29:03 GMT</pubDate><category>CVE</category><category>critical</category></item><item><title>Vikunja: Scoped API tokens with projects.background permission can delete project backgrounds</title><link>https://agentprime.io/advisories/GHSA-v479-vf79-mg83/</link><guid isPermaLink="true">https://agentprime.io/advisories/GHSA-v479-vf79-mg83/</guid><description>code.vikunja.io/api &lt;2.3.0, fixed in 2.3.0. CVSS 4.3 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.</description><pubDate>Fri, 10 Apr 2026 15:36:47 GMT</pubDate><category>Go</category><category>code.vikunja.io/api</category></item><item><title>CVE-2019-25552: CEWE PHOTO SHOW 6.4.3 Denial of Service via Password Field</title><link>https://agentprime.io/advisories/CVE-2019-25552/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2019-25552/</guid><description>CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Sat, 21 Mar 2026 12:46:55 GMT</pubDate><category>CVE</category></item><item><title>CVE-2025-64471: Fortinet FortiWeb: A use of password hash instead of password for authentication vulnerability [CWE-836]…</title><link>https://agentprime.io/advisories/CVE-2025-64471/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-64471/</guid><description>CVSS 4.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 09 Dec 2025 17:18:44 GMT</pubDate><category>CVE</category></item><item><title>CVE-2025-62618: ELOG file upload stored XSS</title><link>https://agentprime.io/advisories/CVE-2025-62618/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-62618/</guid><description>CVSS 8.6 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 31 Oct 2025 18:31:06 GMT</pubDate><category>CVE</category></item><item><title>CVE-2025-52543: Login to the application services using only the password hash</title><link>https://agentprime.io/advisories/CVE-2025-52543/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-52543/</guid><description>CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 02 Sep 2025 11:24:32 GMT</pubDate><category>CVE</category></item><item><title>CVE-2025-48925: TeleMessage service: The TeleMessage service through 2025-05-05 relies on the client side (e.g…</title><link>https://agentprime.io/advisories/CVE-2025-48925/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-48925/</guid><description>CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 28 May 2025 00:00:00 GMT</pubDate><category>CVE</category></item><item><title>CVE-2023-39546: CLUSTERPRO X Ver5.1 and earlier and EXPRESSCLUSTER X 5.1 and earlier, CLUSTERPRO X SingleServerSafe 5.1 and earlier, EXPRESSCLUSTER X SingleServerSafe 5.1 and earlier allows a attacker to log in to t…</title><link>https://agentprime.io/advisories/CVE-2023-39546/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2023-39546/</guid><description>Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 17 Nov 2023 05:31:08 GMT</pubDate><category>CVE</category></item><item><title>CVE-2023-4299: Digi RealPort Protocol Use of Password Hash Instead of Password for Authentication</title><link>https://agentprime.io/advisories/CVE-2023-4299/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2023-4299/</guid><description>CVSS 9.0 (Critical). Critical: CVSS score 9.0: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 31 Aug 2023 20:45:43 GMT</pubDate><category>CVE</category><category>critical</category></item><item><title>CVE-2023-34132: SonicWall GMS: Use of password hash instead of password for authentication vulnerability in SonicWall…</title><link>https://agentprime.io/advisories/CVE-2023-34132/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2023-34132/</guid><description>Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 13 Jul 2023 02:24:25 GMT</pubDate><category>CVE</category></item><item><title>CVE-2023-23450: Use of Password Hash Instead of Password for Authentication in SICK FTMg AIR FLOW SENSOR with Partnumbers 1100214, 1100215, 1100216, 1120114, 1120116, 1122524, 1122526 allows an unprivileged remote a…</title><link>https://agentprime.io/advisories/CVE-2023-23450/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2023-23450/</guid><description>CVSS 6.2 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 15 May 2023 10:55:10 GMT</pubDate><category>CVE</category></item><item><title>CVE-2023-23614: Improper session handling of &quot;Remember me for 7 days&quot; functionality</title><link>https://agentprime.io/advisories/CVE-2023-23614/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2023-23614/</guid><description>CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 26 Jan 2023 10:15:21 GMT</pubDate><category>CVE</category></item><item><title>CVE-2022-32282: WWBN AVideo: An improper password check exists in the login functionality of WWBN AVideo 11.6 and dev…</title><link>https://agentprime.io/advisories/CVE-2022-32282/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2022-32282/</guid><description>CVSS 7.2 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 22 Aug 2022 18:25:14 GMT</pubDate><category>CVE</category></item><item><title>CVE-2021-23857: Login with hash</title><link>https://agentprime.io/advisories/CVE-2021-23857/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2021-23857/</guid><description>CVSS 10.0 (Critical). Critical: CVSS score 10.0: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 04 Oct 2021 17:32:36 GMT</pubDate><category>CVE</category><category>critical</category></item><item><title>CVE-2017-7927: A Use of Password Hash Instead of Password for Authentication issue was discovered in Dahua DH-IPC-HDBW23A0RN-ZS, DH-IPC-HDBW13A0SN, DH-IPC-HDW1XXX, DH-IPC-HDW2XXX, DH-IPC-HDW4XXX, DH-IPC-HFW1XXX, DH…</title><link>https://agentprime.io/advisories/CVE-2017-7927/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2017-7927/</guid><description>Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Sat, 06 May 2017 00:00:00 GMT</pubDate><category>CVE</category></item></channel></rss>