PT-2012-2882

Name of the Vulnerable Software and Affected Versions Suhosin extension versions prior to 0.9.33 Description A stack-based buffer overflow issue exists in the suhosin encrypt single cookie function of the Suhosin extension for PHP. This issue arises when the transparent cookie-encryption feature ...

SoftMP3 - SQL Injection

SoftMP3 - SQL Injection Exploit Title: SOFTMP3 source code SQL injection Date: 23/04/2011 Author: mArTi Software Link: http://softmp3.org/ Version: No others versions available... Tested on: Windows / Unix /.................................../ Introduction /.................................../...

Most soil buy the system blind and cookie spoofing vulnerability-vulnerability warning-the black bar safety net

Most soil group purchase system is a domestic famous group purchase program in the domestic group purchase system of share in the proportion is very large. But because some version of some where filtering does not completely lead to injection vulnerabilitiesnon-killed. Find a way powered by zuitu...

Design/Logic Flaw

The web management interface in Citrix NetScaler 8.0 build 47.8 uses weak encryption XOR of unpadded data to store credentials within a cookie, which makes it easier for remote attackers to obtain cleartext credentials when a cookie is captured via a known-plaintext attack...

Citrix NetScaler weak cryptography

Username/password are stored as a part of cookie with encryption XORing with reused key, making it's possible to discover parts of the password...

Timing attack vector for remember me token

The current rememberme token verification process leaves the application open to a timing attack. Since the default is for the token to be stored as a cookie and for cookies to be encrypted, an attacker would have to know the application secret to exploit this. However, should a custom guard be...