https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T00:38:35.456703+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-11583 EUVD-2026-11583 2026-10-03T00:38:35.526516+00:00 EUVD-2026-11583 https://cve.radiocsirt.org/vuln/fkie_cve-2022-1235 fkie_cve-2022-1235 2026-10-03T00:38:35.526553+00:00

Weak secrethash can be brute-forced in GitHub repository livehelperchat/livehelperchat prior to 3.96.

 https://cve.radiocsirt.org/vuln/ghsa-vx8v-g3p3-88vg GHSA-vx8v-g3p3-88vg — Weak password hash in LiveHelperChat 2026-10-03T00:38:35.526584+00:00

Affected: Packagist: remdex/livehelperchat

The secrethash, which the application relies for multiple security measures, can be brute-forced. The hash is quite small, with only 10 characters of only hexadecimal, making 16^10 possilibities ( 1.099.511.627.776 ). The SHA1 of the secret can be obtained via a captcha string and brute-forced offline with an GPU.

 https://cve.radiocsirt.org/vuln/gsd-2022-1235 gsd-2022-1235 2026-10-03T00:38:35.526610+00:00 gsd-2022-1235