stegcrack

Stegcrack Stegcrackは、Steghideの脆弱性（具体的にはCVE-2021-27211）を悪用するためのオープンソースプログラムです。 Stegcrackは、指定されたファイルにSteghideで隠されたデータが含まれているかどうかを検出し、パスワードなしで隠されたデータを完全に抽出できる場合もあります。 インストール このリポジトリをクローンする root@kitploit: git clone https://github.com/b4shfire/stegcrack ソースディレクトリに移動する root@kitploit: cd stegcrack/src...

profanity-verifier

profanity-verifier CVE-2022-40769 の証明可能なチェック: EOA の秘密鍵が、Profanity バニティアドレス生成器から到達可能な鍵空間に存在するか? 存在する場合、その鍵は復元可能であり、そのアカウントおよびそれが制御するすべてのものは誰でも引き出せる。 ヒューリスティックは使わない。結果は、正確な鍵空間の完全な探索に裏打ちされたブール値であり、同じシャードを再実行することで再現可能である。 元のソースコードにあるバグ Dispatcher.cpp、createSeed: root@kitploit: std::randomdevice rd;...

CVE-2026-5080

Dancer::Session::Abstract versions through 1.3522 for Perl generates session ids insecurely. The session id is generated from summing the character codepoints of the absolute pathname with the process id, the epoch time and calls to the built-in rand function to return a number between 0 and...

CVE-2021-27211

steghide 0.5.1 relies on a certain 32-bit seed value, which makes it easier for attackers to detect hidden data...

CVE-2021-27211

steghide 0.5.1 relies on a certain 32-bit seed value, which makes it easier for attackers to detect hidden data...

CVE-2021-27211

steghide 0.5.1 relies on a certain 32-bit seed value, which makes it easier for attackers to detect hidden data...

UBUNTU-CVE-2021-27211

steghide 0.5.1 relies on a certain 32-bit seed value, which makes it easier for attackers to detect hidden data...

CVE-2021-27211

steghide 0.5.1 relies on a certain 32-bit seed value, which makes it easier for attackers to detect hidden data...

CVE-2021-27211

steghide 0.5.1 relies on a certain 32-bit seed value, which makes it easier for attackers to detect hidden data...

PT-2021-17326

Name of the Vulnerable Software and Affected Versions: steghide version 0.5.1 Description: The issue relies on a certain 32-bit seed value, which makes it easier for attackers to detect hidden data. Recommendations: For steghide version 0.5.1, at the moment, there is no information about a newer...

CVE-2012-2387

devotee 0.1 patch 2 uses a 32-bit seed for generating 48-bit random numbers, which makes it easier for remote attackers to obtain the secret monikers via a brute force attack...

Code injection

devotee 0.1 patch 2 uses a 32-bit seed for generating 48-bit random numbers, which makes it easier for remote attackers to obtain the secret monikers via a brute force attack...

CVE-2012-2387

devotee 0.1 patch 2 uses a 32-bit seed for generating 48-bit random numbers, which makes it easier for remote attackers to obtain the secret monikers via a brute force attack...

CVE-2012-2387

devotee 0.1 patch 2 uses a 32-bit seed for generating 48-bit random numbers, which makes it easier for remote attackers to obtain the secret monikers via a brute force attack...

PHP 32 bit weak random seed

The GENERATESEED macro in PHP 4.x before 4.4.8 and 5.x before 5.2.5, when running on 32-bit systems, performs a multiplication using values that can produce a zero seed in rare circumstances, which allows context-dependent attackers to predict subsequent values of the rand and mtrand functions an...

Improper access control

PowerDNS Recursor before 3.1.5 uses insufficient randomness to calculate 1 TRXID values and 2 UDP source port numbers, which makes it easier for remote attackers to poison a DNS cache, related to a algorithmic deficiencies in rand and random functions in external libraries, b use of a 32-bit seed...