CVE-2020-28873High· 7.5▾ TwilightFluxbb 1.5.11 is affected by a denial of service (DoS) vulnerability by sending an extremely long password via the user login form. When a long password is sent, the password hashing process will result in CPU and memory exhaustion on th…
▾ Twilight zone — High severity, or a signal on a lesser flaw
impact 41.3 · likelihood 0.2 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Exploit-prediction probability, daily snapshots since Jul 31.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via NVD
Last analysed / modified upstream
0.9%
0.9% → 0.9%
Fluxbb 1.5.11 is affected by a denial of service (DoS) vulnerability by sending an extremely long password via the user login form. When a long password is sent, the password hashing process will result in CPU and memory exhaustion on the server.
fluxbb = 1.5.11Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
Connected by shared product, vendor, weakness, or advisory.
CVE-2021-43677Medium· 6.1Fluxbb v1.4.12 is affected by a Cross Site Scripting (XSS) vulnerability.
CVE-2023-0567High· 7.7In PHP 8.0.X before 8.0.28, 8.1.X before 8.1.16 and 8.2.X before 8.2.3, password_verify() function may accept some invalid Blowfish hashes as valid
CVE-2026-65629High· 7.4Weak PBKDF2 parameters for password-encrypted private-key export in jose
CVE-2026-116071Medium· 5.9rotki before 1.44.2 Weak Key Derivation for Premium Cloud Backup Encryption
CVE-2026-116054Low· 2.2SH3 Módulo de Gestão/Módulo de Arrecadação weak password hash
CVE-2025-30049High· 8.2Use of Unsalted MD5 Password Hashes in CGM CLININET