47 matches found
php: openssl_random_pseudo_bytes() is not cryptographically secure
The opensslrandompseudobytes function in ext/openssl/openssl.c in PHP before 5.4.44, 5.5.x before 5.5.28, and 5.6.x before 5.6.12 incorrectly relies on the deprecated RANDpseudobytes function, which makes it easier for remote attackers to defeat cryptographic protection mechanisms via unspecified...
imansearch.com XSS vulnerability
Vulnerable URL: http://imansearch.com/ Deprecated: Function eregireplace is deprecated in /home3/zaneer/publichtml/imansearch/include/searchfuncs.php on line 45 Deprecated: Function eregireplace is deprecated in /home3/zaneer/publichtml/imansearch/include/searchfuncs.php on line 45 Deprecated:...
Design/Logic Flaw
The opensslrandompseudobytes function in ext/openssl/openssl.c in PHP before 5.4.44, 5.5.x before 5.5.28, and 5.6.x before 5.6.12 incorrectly relies on the deprecated RANDpseudobytes function, which makes it easier for remote attackers to defeat cryptographic protection mechanisms via unspecified...
Binary loopholes-the evil of the printf-bug warning-the black bar safety net
This article is binary vulnerabilities related series of articles. printf some of the lesser-known characteristics, for coding convenience, but also introduces security problems. This paper focus on the description of printf in the exploits of some of the usage, in the normal programming is not...
The jQuery version used in JIRA needs to be updated
panel:bgColor=e7f4fa NOTE: This suggestion is for JIRA Cloud. Using JIRA Server? See the corresponding suggestion|http://jira.atlassian.com/browse/JRASERVER-43422. panel Actually the jQuery version used in JIRA is still using the function jQuery.browser which is deprecated and has been removed...
Security Audit Notes: OpenSSL d1_srvr.c Overflow - Advanced Information Security
-= Advanced Information Security Corporation =- ------------------------------------------------------------------------ Author: Nicholas Lemonias Type: Security Audit Notes Date: 17/3/2015 Email: lem.nikolas at gmail dot com Audit: OpenSSL v1.0.2 22nd of January, 2015 Release...
