94 matches found
GHSA-J48Q-4C78-RHF9 openssl-encrypt: Dynamic .so loading for Whirlpool uses broad glob pattern without integrity verification
Severity: HIGH Summary The Whirlpool hash implementation in opensslencrypt/modules/registry/hashregistry.py at lines 570-589 uses glob patterns to find .so modules in site-packages and loads the first match via importlib without verifying module integrity. Affected Code python for sitepkg in...
openssl-encrypt: Dynamic .so loading for Whirlpool uses broad glob pattern without integrity verification
Severity: HIGH Summary The Whirlpool hash implementation in opensslencrypt/modules/registry/hashregistry.py at lines 570-589 uses glob patterns to find .so modules in site-packages and loads the first match via importlib without verifying module integrity. Affected Code python for sitepkg in...
CVE-2026-33041
WWBN AVideo is an open source video platform. In versions 25.0 and below, /objects/encryptPass.json.php exposes the application's password hashing algorithm to any unauthenticated user. An attacker can submit arbitrary passwords and receive their hashed equivalents, enabling offline password...
CVE-2026-33041
WWBN AVideo is an open source video platform. In versions 25.0 and below, /objects/encryptPass.json.php exposes the application's password hashing algorithm to any unauthenticated user. An attacker can submit arbitrary passwords and receive their hashed equivalents, enabling offline password...
Malicious code in kite-whirlpool-bvb755-project (npm)
The package kite-whirlpool-bvb755-project was found to contain malicious code...
MAL-2025-44879 Malicious code in kite-whirlpool-bvb755-project (npm)
The package kite-whirlpool-bvb755-project was found to contain malicious code...
Malicious code in kelp-whirlpool-rjg403-project (npm)
The package kelp-whirlpool-rjg403-project was found to contain malicious code...
Malicious code in valley-whirlpool-rcb252-project (npm)
The package valley-whirlpool-rcb252-project was found to contain malicious code...
MAL-2025-39145 Malicious code in whirlpool-kite-yvk901-project (npm)
The package whirlpool-kite-yvk901-project was found to contain malicious code...
MAL-2025-28142 Malicious code in octopus-whirlpool-ejn271-project (npm)
The package octopus-whirlpool-ejn271-project was found to contain malicious code...
MAL-2025-29215 Malicious code in piano-whirlpool-wid643-project (npm)
The package piano-whirlpool-wid643-project was found to contain malicious code...
MAL-2025-39147 Malicious code in whirlpool-lilac-hzi541-project (npm)
The package whirlpool-lilac-hzi541-project was found to contain malicious code...
MAL-2025-39144 Malicious code in whirlpool-kite-gfa567-project (npm)
The package whirlpool-kite-gfa567-project was found to contain malicious code...
MAL-2025-39150 Malicious code in whirlpool-reef-pgo769-project (npm)
The package whirlpool-reef-pgo769-project was found to contain malicious code...
Malicious code in dragon-whirlpool-sze629-project (npm)
The package dragon-whirlpool-sze629-project was found to contain malicious code...
Malicious code in jasmine-whirlpool-wbx348-project (npm)
The package jasmine-whirlpool-wbx348-project was found to contain malicious code...
Malicious code in whirlpool-kite-yvk901-project (npm)
The package whirlpool-kite-yvk901-project was found to contain malicious code...
Malicious code in dove-whirlpool-vlb086-project (npm)
The package dove-whirlpool-vlb086-project was found to contain malicious code...
Malicious code in whirlpool_2dv2u_52bpd_nectar (npm)
The package whirlpool2dv2u52bpdnectar was found to contain malicious code...
Malicious code in whirlpool-eagle-zif875-project (npm)
The package whirlpool-eagle-zif875-project was found to contain malicious code...