Cryptography

Every one of the 3 is a mark on the map. Named now: 1 to 3, most at risk first.

1. The user-introduction email in MFScripts YetiShare v3.5.2 through v4.5.4 may leak the (system-picked) password if this email is sent in cleartext. In other words, the user is not…CVE-2019-20061Mfscripts · 0.9% likely

   CWE-319

2. class.userpeer.php in MFScripts YetiShare 3.5.2 through 4.5.3 uses an insecure method of creating password reset hashes (based only on microtime), which allows an attacker to gues…CVE-2019-19735Mfscripts · 0.8% likely

   CWE-916

3. MFScripts YetiShare 3.5.2 through 4.5.3 does not set the Secure flag on session cookies, allowing the cookie to be sent over cleartext channels.CVE-2019-19739Mfscripts · 0.7% likely

   CWE-311

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.