https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-06T22:10:46.480580+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2025-32352 CVE-2025-32352 2026-10-06T22:10:46.499267+00:00

Affected: ZendTo

A type confusion vulnerability in lib/NSSAuthenticator.php in ZendTo before v5.04-7 allows remote attackers to bypass authentication for users with passwords stored as MD5 hashes that can be interpreted as numbers. A solution requires moving from MD5 to bcrypt.