1015 matches found
Use of a Broken or Risky Cryptographic Algorithm in serghey-rodin/vesta
✍️ Description uniqid does not generate cryptographically secure strings, even if it did, supplying it with mtrand would render it insecure as an attacker would be able to gain access to a victim's account by simply knowing when they logged in, this could be used as a mass-account-takeover vector...
[SECURITY] Fedora 33 Update: leptonica-1.80.0-3.fc33
The library supports many operations that are useful on Document images Natural images Fundamental image processing and image analysis operations Rasterop aka bitblt Affine transforms scaling, translation, rotation, shear on images of arbitrary pixel depth Projective and bi-linear transforms Bina...
USN-4842-1 ntopng vulnerability
It was discovered that ntopng did not properly seed its random number generator, leading to predictable session tokens. An attacker could use this vulnerability to hijack a user's session...
CVE-2020-28597
A predictable seed vulnerability exists in the password reset functionality of Epignosis EfrontPro 5.2.21. By predicting the seed it is possible to generate the correct password reset 1-time token. An attacker can visit the password reset supplying the password reset token to reset the password o...
Default credentials
A predictable seed vulnerability exists in the password reset functionality of Epignosis EfrontPro 5.2.21. By predicting the seed it is possible to generate the correct password reset 1-time token. An attacker can visit the password reset supplying the password reset token to reset the password o...
CVE-2020-28597
Epignosis EfrontPro 5.2.21 is affected by a password reset vulnerability where the reset token is generated from a predictable seed, enabling an attacker to reset passwords via the password-reset URL. Talos details show the hash is md5(reset_password_timestamp + login) and that the vulnerability ...
PT-2021-11567 · Epignosis · Epignosis Efrontpro
Name of the Vulnerable Software and Affected Versions: Epignosis EfrontPro version 5.2.21 Description: A predictable seed vulnerability exists in the password reset functionality. By predicting the seed, it is possible to generate the correct password reset 1-time token. An attacker can visit the...
UBUNTU-CVE-2021-27378
An issue was discovered in the randcore crate before 0.6.2 for Rust. Because readu32into and readu64into mishandle certain buffer-length checks, a random number generator may be seeded with too little data...
CVE-2021-27211
steghide 0.5.1 relies on a certain 32-bit seed value, which makes it easier for attackers to detect hidden data...
CVE-2021-27211
steghide 0.5.1 relies on a certain 32-bit seed value, which makes it easier for attackers to detect hidden data...
Code injection
steghide 0.5.1 relies on a certain 32-bit seed value, which makes it easier for attackers to detect hidden data...
CVE-2021-27211
steghide 0.5.1 relies on a certain 32-bit seed value, which makes it easier for attackers to detect hidden data...
CVE-2021-27211
steghide 0.5.1 relies on a certain 32-bit seed value, which makes it easier for attackers to detect hidden data...
UBUNTU-CVE-2021-27211
steghide 0.5.1 relies on a certain 32-bit seed value, which makes it easier for attackers to detect hidden data...
CVE-2021-27211
steghide 0.5.1 relies on a certain 32-bit seed value, which makes it easier for attackers to detect hidden data...
CVE-2021-27211
steghide 0.5.1 relies on a certain 32-bit seed value, which makes it easier for attackers to detect hidden data...
PT-2021-17326
Name of the Vulnerable Software and Affected Versions: steghide version 0.5.1 Description: The issue relies on a certain 32-bit seed value, which makes it easier for attackers to detect hidden data. Recommendations: For steghide version 0.5.1, at the moment, there is no information about a newer...
seed-proteome.com Cross Site Scripting vulnerability OBB-1451909
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
EulerOS 2.0 SP2 : xulrunner (EulerOS-SA-2020-1619)
According to the versions of the xulrunner package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Expat, when used in a parser that has not called XMLSetHashSalt or passed it a seed of 0, makes it easier for context-dependent attackers to...