Integer Overflow or Wraparound

Overview Affected versions of this package are vulnerable to Integer Overflow or Wraparound through the fillPool logic in index.js and index.cjs. An attacker can make subsequent ID generation deterministic by supplying an oversized size value to nanoidsize, which is coerced into a negative 32-bit...

Integer Overflow or Wraparound

Overview Affected versions of this package are vulnerable to Integer Overflow or Wraparound through the fillPool logic in index.js and index.cjs. An attacker can make subsequent ID generation deterministic by supplying an oversized size value to nanoidsize, which is coerced into a negative 32-bit...

PT-2018-11228 · Ntop +1 · Ntopng +1

Name of the Vulnerable Software and Affected Versions: ntopng versions prior to 3.4.180617 Description: An issue was discovered where the pseudo-random number generator PRNG involved in generating session IDs is not seeded at program startup, resulting in deterministic session IDs for active user...