99 matches found
CVE-2026-74872
opensslencrypt versions before 1.4.0 contain an arbitrary code execution vulnerability in the Whirlpool hash implementation that uses broad glob patterns to load .so modules without integrity verification. Attackers can place malicious .so files matching the whirlpoolpy313.so pattern in...
CVE-2026-74872 openssl_encrypt before 1.4.0 Arbitrary Code Execution via Whirlpool
opensslencrypt versions before 1.4.0 contain an arbitrary code execution vulnerability in the Whirlpool hash implementation that uses broad glob patterns to load .so modules without integrity verification. Attackers can place malicious .so files matching the whirlpoolpy313.so pattern in...
CVE-2026-74872
The Python package openssl_encrypt before version 1.4.0 loads native .so modules via a broad glob pattern (whirlpool*py313*.so) without integrity checks, allowing arbitrary code execution. Attackers placing malicious .so files in site-packages trigger native code execution on module load. Fixed i...
CVE-2026-74872 openssl_encrypt before 1.4.0 Arbitrary Code Execution via Whirlpool
opensslencrypt versions before 1.4.0 contain an arbitrary code execution vulnerability in the Whirlpool hash implementation that uses broad glob patterns to load .so modules without integrity verification. Attackers can place malicious .so files matching the whirlpoolpy313.so pattern in...
EUVD-2026-60091
opensslencrypt versions before 1.4.0 contain an arbitrary code execution vulnerability in the Whirlpool hash implementation that uses broad glob patterns to load .so modules without integrity verification. Attackers can place malicious .so files matching the whirlpoolpy313.so pattern in...
GHSA-J48Q-4C78-RHF9 openssl-encrypt: Dynamic .so loading for Whirlpool uses broad glob pattern without integrity verification
Severity: HIGH Summary The Whirlpool hash implementation in opensslencrypt/modules/registry/hashregistry.py at lines 570-589 uses glob patterns to find .so modules in site-packages and loads the first match via importlib without verifying module integrity. Affected Code python for sitepkg in...
openssl-encrypt: Dynamic .so loading for Whirlpool uses broad glob pattern without integrity verification
Severity: HIGH Summary The Whirlpool hash implementation in opensslencrypt/modules/registry/hashregistry.py at lines 570-589 uses glob patterns to find .so modules in site-packages and loads the first match via importlib without verifying module integrity. Affected Code python for sitepkg in...
CVE-2026-33041
WWBN AVideo is an open source video platform. In versions 25.0 and below, /objects/encryptPass.json.php exposes the application's password hashing algorithm to any unauthenticated user. An attacker can submit arbitrary passwords and receive their hashed equivalents, enabling offline password...
CVE-2026-33041
WWBN AVideo is an open source video platform. In versions 25.0 and below, /objects/encryptPass.json.php exposes the application's password hashing algorithm to any unauthenticated user. An attacker can submit arbitrary passwords and receive their hashed equivalents, enabling offline password...
Malicious code in kite-whirlpool-bvb755-project (npm)
The package kite-whirlpool-bvb755-project was found to contain malicious code...
MAL-2025-44879 Malicious code in kite-whirlpool-bvb755-project (npm)
The package kite-whirlpool-bvb755-project was found to contain malicious code...
Malicious code in whirlpool-yucca-fyi102-project (npm)
The package whirlpool-yucca-fyi102-project was found to contain malicious code...
Malicious code in valley-whirlpool-rcb252-project (npm)
The package valley-whirlpool-rcb252-project was found to contain malicious code...
MAL-2025-39153 Malicious code in whirlpool-zenith-pjh894-project (npm)
The package whirlpool-zenith-pjh894-project was found to contain malicious code...
MAL-2025-39139 Malicious code in whirlpool-cascade-upu258-project (npm)
The package whirlpool-cascade-upu258-project was found to contain malicious code...
MAL-2025-24398 Malicious code in kelp-whirlpool-rjg403-project (npm)
The package kelp-whirlpool-rjg403-project was found to contain malicious code...
MAL-2025-19077 Malicious code in eagle-whirlpool-mph288-project (npm)
The package eagle-whirlpool-mph288-project was found to contain malicious code...
MAL-2025-39142 Malicious code in whirlpool-elephant-xmr620-project (npm)
The package whirlpool-elephant-xmr620-project was found to contain malicious code...