Timing Attack

Overview pyload-ng is a The free and open-source Download Manager written in pure Python Affected versions of this package are vulnerable to Timing Attack via the checkpassword function in src/pyload/core/database/userdatabase.py, which compares password hashes using the == operator rather than a...