[FD] It essentially wins crypto vulnerability bingo! gilfether/phpcrypt

2016-01-16 Thread Scott Arciszewski
Consider this email the spiritual successor to my most recent post on Full Disclosure (http://seclists.org/fulldisclosure/2016/Jan/50). Today, we're going to talk about this library: https://github.com/gilfether/phpcrypt/issues/6 Let's go down the list: - [x] Wrote their own block cipher impleme

[FD] Correct answer Information Disclosure in TCExam <= 12.2.5

2016-01-16 Thread li...@antonioherraizs.com li...@antonioherraizs.com
- Correct answer Information Disclosure in TCExam <= 12.2.5 - [-] Software Link: http://www.tcexam.org/ [-] Vendor description: TCExam is a Open Source system for electronic exams (a