75 matches found
MAL-2025-22742 Malicious code in hs-sha3 (npm)
The package hs-sha3 was found to contain malicious code...
MAL-2025-24787 Malicious code in ks-sha3 (npm)
The package ks-sha3 was found to contain malicious code...
Malicious code in simple-js-sha3-512 (npm)
The package simple-js-sha3-512 was found to contain malicious code...
Malicious code in simple-js-sha3 (npm)
The package simple-js-sha3 was found to contain malicious code...
Malicious code in bs-sha3 (npm)
The package bs-sha3 was found to contain malicious code...
Malicious code in simple-js-sha3-256 (npm)
The package simple-js-sha3-256 was found to contain malicious code...
Malicious code in hs-sha3 (npm)
The package hs-sha3 was found to contain malicious code...
Malicious code in zs-sha3 (npm)
The package zs-sha3 was found to contain malicious code...
MAL-2025-33271 Malicious code in simple-js-sha3-512 (npm)
The package simple-js-sha3-512 was found to contain malicious code...
MAL-2025-24128 Malicious code in jw-sha3 (npm)
The package jw-sha3 was found to contain malicious code...
MAL-2025-23907 Malicious code in jr-sha3 (npm)
The package jr-sha3 was found to contain malicious code...
Weak Password Hashing
Manifest is vulnerable to Weak Password Hashing. The vulnerability is due to improper password hashing due to the use of SHA3 without a salt, making user passwords more susceptible to cracking if an attacker gains access to the database...
Manifest Uses a One-Way Hash without a Salt
Summary Manifest employs a weak password hashing implementation that uses SHA3 without a salt. This exposes user passwords to a higher risk of being cracked if an attacker gains access to the database. Without the use of a salt, identical passwords across multiple users will result in the same...
GHSA-H8H6-7752-G28C Manifest Uses a One-Way Hash without a Salt
Summary Manifest employs a weak password hashing implementation that uses SHA3 without a salt. This exposes user passwords to a higher risk of being cracked if an attacker gains access to the database. Without the use of a salt, identical passwords across multiple users will result in the same...
CVE-2025-27408
Manifest offers users a one-file micro back end. Prior to version 4.9.2, Manifest employs a weak password hashing implementation that uses SHA3 without a salt. This exposes user passwords to a higher risk of being cracked if an attacker gains access to the database. Without the use of a salt,...
CVE-2025-27408 Manifest Uses a One-Way Hash without a Salt
Manifest offers users a one-file micro back end. Prior to version 4.9.2, Manifest employs a weak password hashing implementation that uses SHA3 without a salt. This exposes user passwords to a higher risk of being cracked if an attacker gains access to the database. Without the use of a salt,...
SUSE-SU-2024:2298-1 Security update for openCryptoki
This update for openCryptoki fixes the following issues: openCryptoki was updated to version to 3.17.0 bsc1220266, bsc1219217 + openCryptoki 3.17 - tools: added function to list keys to p11sak - common: added support for OpenSSL 3.0 - common: added support for event notifications - ICA: added SW...
CVE-2024-24559 Vyper SHA3 code generation bug
Vyper is a Pythonic Smart Contract Language for the EVM. There is an error in the stack management when compiling the IR for sha364. Concretely, the height variable is miscalculated. The vulnerability can't be triggered without writing the IR by hand that is, it cannot be triggered from regular...
USN-6525-1 pysha3 vulnerability
Nicky Mouha discovered that pysha incorrectly handled certain SHA-3 operations. An attacker could possibly use this issue to cause pysha3 to crash, resulting in a denial of service, or possibly execute arbitrary code...