vulnerability

Details of the cryto stuff I've helped to break on a NF&A2P** certified alarm system.

Originally posted on the blog of the company where I work; I found a session ID exposure on Centron.

Originaly posted on the blog of the company where I work; With a collegue, we found several XSS on Centreon.

Alwaysdata, a hosting company, recently fixed a vulnerability. Indeed, they stored PHP sessions in a shared directory. This allowed an attacker to know PHP sessions ID, without their content, and in which account it has been used.