PunBB 1.4.4 Database Disclosure

From https://j.ludost.net/blog/archives/2019/11/11/minorsecurityissueinpunbbwithsqlite/index.html Minor security issue in punbb with SQLite Georgi Guninski security advisory 76, 2019 Running punbb-master from https://github.com/punbb/punbb from Thu 07 Nov 2019 11:23:33 AM UTC Installing on...

CVE-2019-16205

A vulnerability, in Brocade SANnav versions before v2.0, could allow remote attackers to brute-force a valid session ID. The vulnerability is due to an insufficiently random session ID for several post-authentication actions in the SANnav portal...

CVE-2019-16205

A vulnerability, in Brocade SANnav versions before v2.0, could allow remote attackers to brute-force a valid session ID. The vulnerability is due to an insufficiently random session ID for several post-authentication actions in the SANnav portal...

Session fixation

A vulnerability, in Brocade SANnav versions before v2.0, could allow remote attackers to brute-force a valid session ID. The vulnerability is due to an insufficiently random session ID for several post-authentication actions in the SANnav portal...

CVE-2019-16205

A vulnerability, in Brocade SANnav versions before v2.0, could allow remote attackers to brute-force a valid session ID. The vulnerability is due to an insufficiently random session ID for several post-authentication actions in the SANnav portal...

CVE-2019-16205

CVE-2019-16205 affects Broadcom/Brocade SANnav prior to version 2.0. The issue is a weak, insufficiently random session ID used for several post-authentication actions in the SANnav portal, enabling remote attackers to brute-force a valid session ID (session hijacking risk). Affected product: SAN...

CVE-2019-16205: Use of Insufficiently Random Values

A vulnerability, in Brocade SANnav versions before v2.0, could allow remote attackers to brute-force a valid session ID. The vulnerability is due to an insufficiently random session ID for several post-authentication actions in the SANnav portal...

PT-2019-14578

Name of the Vulnerable Software and Affected Versions Brocade SANnav versions prior to 2.0 Description The issue is related to an insufficiently random session ID for several post-authentication actions in the SANnav portal, which could allow remote attackers to brute-force a valid session ID...

Multiple Medtronic Products ICSMA-19-311-02 Multiple Security Vulnerabilities

Description Multiple Medtronic Products are prone to multiple security vulnerabilities. An attacker can exploit these issues to gain unauthorized access or obtain sensitive information that may aid in brute-force attacks. Other attacks are also possible. Technologies Affected Medtronic Valleylab...

fuzzdb-collect

Based on the provided code and context, it appears to be a Python script designed to perform a brute-force attack on file extensions. The script is part of...

CVE-2019-8113: Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)

Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3 or 2.3.2-p1 uses cryptographically weak random number generator to brute-force the confirmation code for customer registration...

TYPO3 Security Feature Issue Vulnerability

TYPO3 is a free and open source content management system framework CMS/CMF of the Swiss TYPO3 Association. A security signature issue vulnerability exists in the 'uniqid' function in TYPO3, which can be exploited by an attacker to brute-force hash values...

PT-2019-18889

Name of the Vulnerable Software and Affected Versions Magento versions 2.2 prior to 2.2.10 Magento versions 2.3 prior to 2.3.3 Magento version 2.3.2-p1 Description The issue concerns the use of a cryptographically weak random number generator. This weakness can be exploited to brute-force the...

CVE-2013-2257

Cryptocat before 2.0.42 has Group Chat ECC Private Key Generation Brute Force Weakness...

CVE-2013-2257

CVE-2013-2257 affects Cryptocat prior to version 2.0.42. The issue is described as a Group Chat ECC Private Key Generation Brute Force Weakness, indicating weakness in how ECC private keys for group chats are generated. The public descriptions in connected records consistently reference Cryptocat

CVE-2013-2257

Cryptocat before 2.0.42 has Group Chat ECC Private Key Generation Brute Force Weakness...

PT-2019-6887

Name of the Vulnerable Software and Affected Versions Cryptocat versions prior to 2.0.42 Description The issue concerns a weakness in the generation of ECC private keys for group chats, which could potentially be exploited through brute force. Recommendations For versions prior to 2.0.42, update ...

CVE-2013-2257: Improper Restriction of Excessive Authentication Attempts

Cryptocat before 2.0.42 has Group Chat ECC Private Key Generation Brute Force Weakness...

hardware: bluetooth: BR/EDR encryption key negotiation attacks (KNOB)

A flaw was discovered in the Bluetooth protocol. An attacker within physical proximity to the Bluetooth connection could downgrade the encryption protocol to be trivially brute forced...

Unspecified Vulnerability in IBM Security Directory Server

IBM Security Directory Server is a suite of enterprise identity management software from IBM USA that uses the Lightweight Directory Access Protocol LDAP. The software provides a trusted identity data infrastructure for authentication. A security vulnerability exists in IBM Security Directory...