Use of Weak Hash

Every one of the 90 is a mark on the map. Named now: 1 to 26, most at risk first.

1. RADIUS Protocol under RFC2865 is vulnerable to forgery attacks.CVE-2024-3596IETF · CVSS 9 · 15% likely

   IETF

2. The MD5 Message-Digest Algorithm is not collision resistant, which makes it easier for context-dependent attackers to conduct spoofing attacks, as demonstrated by attacks on the u…CVE-2004-2761Ietf · CVSS 9.8 · 10% likely

   IETF

3. openwrt/asu allows build artifact poisoning via truncated SHA-256 hash and command injectionCVE-2024-54143openwrt · CVSS 9.3 · 1.8% likely

   Openwrt

4. The aeson library is not safe to use to consume untrusted JSON input. A remote user could abuse this flaw to produce a hash collision in the underlying unordered-containers librar…CVE-2022-3433Haskell · 0.9% likely
5. Reversible One-Way Hash and Use of a Broken or Risky Cryptographic Algorithm in io.github.javaezlib.JavaEZCVE-2022-29249JavaEZLib · CVSS 7.5 · 0.7% likely
6. NFine Rapid Development Platform CheckLogin weak hashCVE-2023-2900NFine · CVSS 3.7 · 0.7% likely
7. Econolite EOS versions prior to 3.2.23 use a weak hash algorithm for encrypting privileged user credentials. A configuration file that is accessible without authentication uses MD…CVE-2023-0452Econolite · CVSS 9.8 · 0.6% likely
8. Weak hashing alghrythmCVE-2025-27595SICK AG · CVSS 9.8 · 0.5% likely

   SICK AG

9. Weidmueller: Authentication Bypass Vulnerability in Industrial Ethernet SwitchesCVE-2025-41652Weidmueller · CVSS 9.8 · 0.5% likely

   Weidmueller

10. An issue in geelen mcp-remote 0.1.16 through 0.1.38 allows a remote attacker to execute arbitrary code via the src/lib/utils.ts and the getServerUrlHash functionCVE-2026-51996CVSS 9.8 · 0.5% likely
11. Since the Windows Kerberos RC4-HMAC Elevation of Privilege Vulnerability was disclosed by Microsoft on Nov 8 2022 and per RFC8429 it is assumed that rc4-hmac is weak, Vulnerable S…CVE-2022-45141Samba · CVSS 9.8 · 0.5% likely

    Samba

12. A vulnerability has been identified in RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2) (All versions < V8.0), RUGGEDCOM RM1224 LTE(4G) NAM (6GK6108-4AM00-2DA2) (All versions < V8…CVE-2023-44319Siemens · CVSS 4.9 · 0.4% likely

    Siemens

13. An issue in beego v.2.2.0 and before allows a remote attacker to escalate privileges via the getCacheFileName function in file.go fileCVE-2024-40465Beego · CVSS 8.8 · 0.4% likely

    Beego

14. Nextcloud Server has a potential hash collision for background jobs could skip queuing themCVE-2024-52521nextcloud · CVSS 2.6 · 0.4% likely

    Nextcloud

15. jq: Algorithmic complexity DoS via hardcoded MurmurHash3 seedCVE-2026-40164jqlang · CVSS 7.5 · 0.4% likely

    Jqlang

16. MessagePack allows untrusted data to lead to DoS attack due to hash collisions and stack overflowCVE-2024-48924MessagePack-CSharp · CVSS 8.7 · 0.4% likely

    MessagePack-CSharp

17. IBM App Connect Enterprise Certified Container information disclosureCVE-2022-43922IBM · CVSS 5.3 · 0.4% likely

    IBM

18. Krb5: kerberos rc4-hmac-md5 checksum vulnerability enabling message spoofing via md5 collisionsCVE-2025-3576Siemens · CVSS 5.9 · 0.4% likely

    Siemens

19. free-one-api uses md5 for password storageCVE-2024-56516RockChinQ · CVSS 6.9 · 0.3% likely
20. Beego Vulnerable to Collision Hazards of MD5 in Cache Key FilenamesCVE-2024-55885beego · CVSS 6.9 · 0.3% likely

    Beego

21. Deprecated TLS version supportedCVE-2025-49197SICK AG · CVSS 6.5 · 0.3% likely

    SICK AG

22. Tenda AX9 httpd image_check weak hashCVE-2025-14636Tenda · CVSS 3.7 · 0.3% likely

    Tenda

23. exo-explore exo Vision Feature Cache vision.py _image_cache_key weak hashCVE-2026-14738exo-explore · CVSS 3.7 · 0.3% likely
24. SimStudioAI sim Password Protection deployment.ts weak hashCVE-2026-13510SimStudioAI · CVSS 3.7 · 0.3% likely

    SimStudioAI

25. Actualizer Uses OpenSSL's "-passwd" Function Which Uses SHA512 Under The Hood Instead of Proper Password Hasher like Yescript/Argon2iCVE-2025-47276ChewKeanHo · CVSS 7.5 · 0.3% likely
26. php-censor v2.1.4 and fixed in v.2.1.5 was discovered to utilize a weak hashing algorithm for its remember_key value. This allows attackers to bruteforce to bruteforce the remembe…CVE-2024-34914CVSS 5.3 · 0.3% likely

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.