https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 29 Sep 2026 00:15:09 +0000 https://vulnerability.circl.lu/vuln/cnvd-2026-34826 cnvd-2026-34826 https://vulnerability.circl.lu/vuln/cnvd-2026-34826 https://vulnerability.circl.lu/vuln/fkie_cve-2026-57263 <p>A vulnerability has been identified in LOGO! Soft Comfort (All versions &lt; V9). The project password feature in the affected products stores the password as an unsalted SHA-256 hash. This could allow an attacker who has obtained the project file to perform efficient offline dictionary or brute-force attacks against the unsalted hash.</p> <p>A vulnerability has been identified in LOGO! Soft Comfort (All versions &lt; V9). The project password feature in the affected products stores the password as an unsalted SHA-256 hash. This could allow an attacker who has obtained the project file to perform efficient offline dictionary or brute-force attacks against the unsalted hash.</p> https://vulnerability.circl.lu/vuln/fkie_cve-2026-57263 https://vulnerability.circl.lu/vuln/ghsa-pmf3-v4rm-f24p <p>A vulnerability has been identified in LOGO! Soft Comfort (All versions &lt; V9). The project password feature in the affected products stores the password as an unsalted SHA-256 hash. This could allow an attacker who has obtained the project file to perform efficient offline dictionary or brute-force attacks against the unsalted hash.</p> <p>A vulnerability has been identified in LOGO! Soft Comfort (All versions &lt; V9). The project password feature in the affected products stores the password as an unsalted SHA-256 hash. This could allow an attacker who has obtained the project file to perform efficient offline dictionary or brute-force attacks against the unsalted hash.</p> https://vulnerability.circl.lu/vuln/ghsa-pmf3-v4rm-f24p https://vulnerability.circl.lu/vuln/icsa-26-225-13 <p>Siemens LOGO! Soft Comfort contains multiple vulnerabilities in its project-file encryption and password handling mechanisms. A local attacker could exploit these vulnerabilities to extract the master key, allowing them to decrypt project data or remove project passwords. The lack of password salting enables offline dictionary or brute-force attacks against the password hashes. Successful exploitation could result in unauthorized access to, or modification of, sensitive project logic and configurations.</p> <p>Siemens has released a new version for LOGO! Soft Comfort and recommends to update to the latest version.</p> <p>Siemens LOGO! Soft Comfort contains multiple vulnerabilities in its project-file encryption and password handling mechanisms. A local attacker could exploit these vulnerabilities to extract the master key, allowing them to decrypt project data or remove project passwords. The lack of password salting enables offline dictionary or brute-force attacks against the password hashes. Successful exploitation could result in unauthorized access to, or modification of, sensitive project logic and configurations.</p> <p>Siemens has released a new version for LOGO! Soft Comfort and recommends to update to the latest version.</p> https://vulnerability.circl.lu/vuln/icsa-26-225-13 https://vulnerability.circl.lu/vuln/ncsc-2026-0282 NCSC-2026-0282 https://vulnerability.circl.lu/vuln/ncsc-2026-0282 https://vulnerability.circl.lu/vuln/ssa-751328 <p>Siemens LOGO! Soft Comfort contains multiple vulnerabilities in its project-file encryption and password handling mechanisms. A local attacker could exploit these vulnerabilities to extract the master key, allowing them to decrypt project data or remove project passwords. The lack of password salting enables offline dictionary or brute-force attacks against the password hashes. Successful exploitation could result in unauthorized access to, or modification of, sensitive project logic and configurations.</p> <p>Siemens has released a new version for LOGO! Soft Comfort and recommends to update to the latest version.</p> <p>Siemens LOGO! Soft Comfort contains multiple vulnerabilities in its project-file encryption and password handling mechanisms. A local attacker could exploit these vulnerabilities to extract the master key, allowing them to decrypt project data or remove project passwords. The lack of password salting enables offline dictionary or brute-force attacks against the password hashes. Successful exploitation could result in unauthorized access to, or modification of, sensitive project logic and configurations.</p> <p>Siemens has released a new version for LOGO! Soft Comfort and recommends to update to the latest version.</p> https://vulnerability.circl.lu/vuln/ssa-751328