https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 18 Oct 2026 14:22:10 +0000 https://cve.radiocsirt.org/vuln/cve-2018-6011 <p>The time-based one-time-password (TOTP) function in the application logic of the Green Electronics RainMachine Mini-8 (2nd generation) uses the administrator&#39;s password hash to generate a 6-digit temporary passcode that can be used for remote and local access, aka a &#34;Use of Password Hash Instead of Password for Authentication&#34; issue. This is exploitable by an attacker who discovers a hash value in the rainmachine-settings.sqlite file.</p> <p>The time-based one-time-password (TOTP) function in the application logic of the Green Electronics RainMachine Mini-8 (2nd generation) uses the administrator&#39;s password hash to generate a 6-digit temporary passcode that can be used for remote and local access, aka a &#34;Use of Password Hash Instead of Password for Authentication&#34; issue. This is exploitable by an attacker who discovers a hash value in the rainmachine-settings.sqlite file.</p> https://cve.radiocsirt.org/vuln/cve-2018-6011