Session Hijacking

laravel/socialite is vulnerable to Session Hijacking. The vulnerability is due to the state guessing during OAuth authentication, which could potentially lead to session hijacking...

PT-2024-40159

Name of the Vulnerable Software and Affected Versions: laravel/socialite versions prior to 2.0.10 Description: The issue is related to state guessing during OAuth authentication, which could potentially lead to session hijacking, allowing attackers to compromise user sessions. Recommendations: Fo...

kernel: Small table perturb size in the TCP source port generation algorithm can lead to information leak

The Linux kernel's TCP source port generation algorithm in the TCP stack contains a flaw due to the small table perturb size. This flaw allows an attacker to positively distinguish a system among devices with identical hardware and software, which lasts until the device restarts. An attacker can...

State guessing vulnerability

By doing this we're protecting against people trying to guess the state...