94 matches found
openssl-encrypt: Dynamic .so loading for Whirlpool uses broad glob pattern without integrity verification
Severity: HIGH Summary The Whirlpool hash implementation in opensslencrypt/modules/registry/hashregistry.py at lines 570-589 uses glob patterns to find .so modules in site-packages and loads the first match via importlib without verifying module integrity. Affected Code python for sitepkg in...
GHSA-J48Q-4C78-RHF9 openssl-encrypt: Dynamic .so loading for Whirlpool uses broad glob pattern without integrity verification
Severity: HIGH Summary The Whirlpool hash implementation in opensslencrypt/modules/registry/hashregistry.py at lines 570-589 uses glob patterns to find .so modules in site-packages and loads the first match via importlib without verifying module integrity. Affected Code python for sitepkg in...
CVE-2026-33041
WWBN AVideo is an open source video platform. In versions 25.0 and below, /objects/encryptPass.json.php exposes the application's password hashing algorithm to any unauthenticated user. An attacker can submit arbitrary passwords and receive their hashed equivalents, enabling offline password...
CVE-2026-33041
WWBN AVideo is an open source video platform. In versions 25.0 and below, /objects/encryptPass.json.php exposes the application's password hashing algorithm to any unauthenticated user. An attacker can submit arbitrary passwords and receive their hashed equivalents, enabling offline password...
Malicious code in kite-whirlpool-bvb755-project (npm)
The package kite-whirlpool-bvb755-project was found to contain malicious code...
MAL-2025-44879 Malicious code in kite-whirlpool-bvb755-project (npm)
The package kite-whirlpool-bvb755-project was found to contain malicious code...
Malicious code in valley-whirlpool-rcb252-project (npm)
The package valley-whirlpool-rcb252-project was found to contain malicious code...
Malicious code in whirlpool-yucca-fyi102-project (npm)
The package whirlpool-yucca-fyi102-project was found to contain malicious code...
MAL-2025-23025 Malicious code in iguana-whirlpool-mpq809-project (npm)
The package iguana-whirlpool-mpq809-project was found to contain malicious code...
MAL-2025-39155 Malicious code in whirlpool_5uyux_aagbo_kestrel (npm)
The package whirlpool5uyuxaagbokestrel was found to contain malicious code...
MAL-2025-39139 Malicious code in whirlpool-cascade-upu258-project (npm)
The package whirlpool-cascade-upu258-project was found to contain malicious code...
MAL-2025-39143 Malicious code in whirlpool-hill-fyz742-project (npm)
The package whirlpool-hill-fyz742-project was found to contain malicious code...
MAL-2025-38071 Malicious code in valley-whirlpool-rcb252-project (npm)
The package valley-whirlpool-rcb252-project was found to contain malicious code...
MAL-2025-39146 Malicious code in whirlpool-kiwi-boe743-project (npm)
The package whirlpool-kiwi-boe743-project was found to contain malicious code...
MAL-2025-19077 Malicious code in eagle-whirlpool-mph288-project (npm)
The package eagle-whirlpool-mph288-project was found to contain malicious code...
MAL-2025-39151 Malicious code in whirlpool-yawn-tcl905-project (npm)
The package whirlpool-yawn-tcl905-project was found to contain malicious code...
MAL-2025-39147 Malicious code in whirlpool-lilac-hzi541-project (npm)
The package whirlpool-lilac-hzi541-project was found to contain malicious code...
MAL-2025-24398 Malicious code in kelp-whirlpool-rjg403-project (npm)
The package kelp-whirlpool-rjg403-project was found to contain malicious code...