841 matches found
Design/Logic Flaw
The randompasswordgenerator aka RandomPasswordGenerator gem through 1.0.0 for Ruby uses Kernelrand to generate passwords, which, due to its cyclic nature, can facilitate password prediction...
Inadequate Encryption Strength
Overview randompasswordgenerator is a generates a random password with various useful options. Affected versions of this package are vulnerable to Inadequate Encryption Strength due to the use of Kernelrand to generate passwords, which, as a result of its cyclic nature, can facilitate password...
CVE-2019-25061
The CVE affects the Ruby gem random_password_generator (up to version 1.0.0). The root cause is the use of Kernel#rand to generate passwords, which exhibits a cyclic behavior that can lead to password prediction. Documented impacts include potential exposure of generated passwords due to predicta...
CVE-2019-25061
The randompasswordgenerator aka RandomPasswordGenerator gem through 1.0.0 for Ruby uses Kernelrand to generate passwords, which, due to its cyclic nature, can facilitate password prediction...
OmniAuth Ruby gem 安全漏洞
The OmniAuth Ruby gem is an authentication system that uses Rack middleware. Ruby gem 1.0.0 and earlier versions have a security vulnerability in randompasswordgenerator aka RandomPasswordGenerator, which can be exploited by an attacker to facilitate password prediction...
CVE-2019-25061: Incorrect Usage of Seeds in Pseudo-Random Number Generator (PRNG)
The randompasswordgenerator aka RandomPasswordGenerator gem through 1.0.0 for Ruby uses Kernelrand to generate passwords, which, due to its cyclic nature, can facilitate password prediction...
The vulnerability of the randomized generation of port numbers for outgoing TCP connections on Linux kernel ports allows a hacker to predict the port number of an outgoing TCP connection.
The vulnerability of the randomly generated port numbers for outgoing TCP connections in the Linux operating system is related to information disclosure. Exploiting this vulnerability allows a remote attacker to predict the number of the port for outgoing TCP connections...
Email-Prediction-Asterisks - Script That Allows You To Identify The Emails Hidden Behind Asterisks
Email prediction asterisks is a script that allows you to identify the emails hidden behind asterisks. It is a perfect application for osint analysts and security forces. It allows to intelligently predict, using Intelx leaks, which emails are related to the person we are looking for. It also...
PT-2022-2509 · Linux +9 · Linux Kernel +9
Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue is related to a memory leak problem in the TCP source port generation algorithm, which may allow an attacker to leak information and potentially cause a denial of service...
CVE-2022-27577
The vulnerability in the MSC800 in all versions before 4.15 allows for an attacker to predict the TCP initial sequence number. When the TCP sequence is predictable, an attacker can send packets that are forged to appear to come from a trusted computer. These forged packets could compromise servic...
CVE-2022-27577
The CVE-2022-27577 vulnerability affects SICK MSC800 PLCs (all versions before 4.15). The root cause is a TCP initial sequence number that can be predicted, enabling an attacker to send forged packets that appear to originate from a trusted host and potentially compromise MSC800 services. Affecte...
Vulnerability in SICK MSC800
SICK received a report about a vulnerability in the SICK MSC800. An attacker could compromise services on the MSC800 by a TCP sequence prediction attack if a vulnerable version is used...
CVE-2021-36171
The use of a cryptographically weak pseudo-random number generator in the password reset feature of FortiPortal before 6.0.6 may allow a remote unauthenticated attacker to predict parts of or the whole newly generated password within a given time frame...
Design/Logic Flaw
The use of a cryptographically weak pseudo-random number generator in the password reset feature of FortiPortal before 6.0.6 may allow a remote unauthenticated attacker to predict parts of or the whole newly generated password within a given time frame...
CVE-2021-36171
The use of a cryptographically weak pseudo-random number generator in the password reset feature of FortiPortal before 6.0.6 may allow a remote unauthenticated attacker to predict parts of or the whole newly generated password within a given time frame...
CVE-2021-36171: Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)
The use of a cryptographically weak pseudo-random number generator in the password reset feature of FortiPortal before 6.0.6 may allow a remote unauthenticated attacker to predict parts of or the whole newly generated password within a given time frame...
PT-2022-2953 · Amd +8 · Amd Cpus +8
Name of the Vulnerable Software and Affected Versions: AMD CPUs affected versions not specified Description: The issue is related to the LFENCE/JMP module in AMD CPUs, specifically concerning the branch prediction mechanism. This allows an attacker to access protected memory from a program withou...
CVE-2016-3735
CVE-2016-3735 affects Piwigo, a PHP-based image gallery. The root issue is that when a host criteria is not met, Piwigo uses mt_rand to generate password reset tokens, and the output can be predicted once the seed is known. This enables an unauthenticated attacker who knows an administrator’s ema...
Mageia: Security Advisory (MGASA-2018-0101)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Mageia: Security Advisory (MGASA-2016-0292)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...