PT-2026-39504

Name of the Vulnerable Software and Affected Versions Opencart TMD Vendor System versions 3.x Description A blind SQL injection allows unauthenticated attackers to extract database information. By injecting SQL code through the product id parameter, attackers can use time-based or content-based...

A paper by Amit Klein (Trusteer): "OpenBSD DNS Cache Poisoning and Multiple O/S Predictable IP ID Vulnerability"

Hello BugTraq Recently I've been looking at the OpenBSD PRNG implementation for DNS transaction ID OpenBSD ported BIND 9 into their code tree, but rolled their own PRNG for the DNS transaction ID field. I discovered a serious weakness in OpenBSD's PRNG, which allows an attacker to predict the nex...