25 matches found
GO-2022-1213 Insecure generation of cookies in github.com/go-macaron/csrf
The Options.Secure value is ignored, and cookies created by Generate never have the secure attribute...
Syncovery 安全特征问题漏洞
Syncovery is a superbly versatile synchronization, copy, move, and backup tool from Syncovery Germany. A security vulnerability exists in Syncovery 9 for Linux prior to v9.48j, which stems from session tokens being generated in an insecure manner and can be exploited by an attacker to easily...
Information Disclosure
randompasswordgenerator is vulnerable to information disclosure. The vulnerability exists due to the insecure random password generation in rand functionality in the generate function of randompasswordgenerator.rb, allowing an attacker to guess the password...
CVE-2020-11729
An issue was discovered in DAViCal Andrew's Web Libraries AWL through 0.60. Long-term session cookies, uses to provide long-term session continuity, are not generated securely, enabling a brute-force attack that may be successful...
