Lucene search
+L

29829 matches found

Schneier on Security
Schneier on Security
•added 2023/08/10 11:12 a.m.•45 views

Cryptographic Flaw in Libbitcoin Explorer Cryptocurrency Wallet

Cryptographic flaws still matter. Heres a flaw in the random-number generator used to create private keys. The seed has only 32 bits of entropy. Seems like this flaw is being exploited in the wild. EDITED TO ADD 8/14: A good explainer...

6.9AI score
SaveExploits0
NVD
NVD
•added 2023/08/09 3:15 a.m.•43 views

CVE-2023-39910

The cryptocurrency wallet entropy seeding mechanism used in Libbitcoin Explorer 3.0.0 through 3.6.0 is weak, aka the Milk Sad issue. The use of an mt19937 Mersenne Twister PRNG restricts the internal entropy to 32 bits regardless of settings. This allows remote attackers to recover any wallet...

7.5CVSS7.5AI score0.01804EPSS
SaveExploits1References6
attackerkb
attackerkb
•added 2023/08/09 3:15 a.m.•10 views

CVE-2023-39910

The cryptocurrency wallet entropy seeding mechanism used in Libbitcoin Explorer 3.0.0 through 3.6.0 is weak, aka the Milk Sad issue. The use of an mt19937 Mersenne Twister PRNG restricts the internal entropy to 32 bits regardless of settings. This allows remote attackers to recover any wallet...

7.5CVSS7.2AI score0.01804EPSS
SaveExploits1References7
Prion
Prion
•added 2023/08/09 3:15 a.m.•48 views

Design/Logic Flaw

The cryptocurrency wallet entropy seeding mechanism used in Libbitcoin Explorer 3.0.0 through 3.6.0 is weak, aka the Milk Sad issue. The use of an mt19937 Mersenne Twister PRNG restricts the internal entropy to 32 bits regardless of settings. This allows remote attackers to recover any wallet...

5CVSS7.5AI score0.01804EPSS
SaveExploits1References6Affected Software1
osv_cve
osv_cve
•added 2023/08/09 12:00 a.m.•52 views

CVE-2023-39910

The cryptocurrency wallet entropy seeding mechanism used in Libbitcoin Explorer 3.0.0 through 3.6.0 is weak, aka the Milk Sad issue. The use of an mt19937 Mersenne Twister PRNG restricts the internal entropy to 32 bits regardless of settings. This allows remote attackers to recover any wallet...

7.1AI score0.01804EPSS
SaveExploits1References8
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/08/09 12:00 a.m.•7 views

CVE-2023-39910: Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)

The cryptocurrency wallet entropy seeding mechanism used in Libbitcoin Explorer 3.0.0 through 3.6.0 is weak, aka the Milk Sad issue. The use of an mt19937 Mersenne Twister PRNG restricts the internal entropy to 32 bits regardless of settings. This allows remote attackers to recover any wallet...

7.5CVSS7.2AI score0.01804EPSS
SaveExploits1References2
CNNVD
CNNVD
•added 2023/08/09 12:00 a.m.•27 views

Libbitcoin Explorer Security Feature Issue Vulnerability

Libbitcoin Explorer is a bitcoin command line tool open-sourced by Libbitcoin. Libbitcoin Explorer versions 3.0.0 through 3.6.0 suffer from a security vulnerability that stems from a security issue with the currency's encryption technology leading to the theft of funds...

7.5CVSS7.2AI score0.01804EPSS
SaveExploits1References8
CVE
CVE
•added 2023/08/09 12:00 a.m.•210 views

CVE-2023-39910

The Libbitcoin Explorer (versions 3.0.0 through 3.6.0) contains a critical vulnerability in its entropy seeding mechanism, known as the Milk Sad issue. The software utilizes an mt19937 Mersenne Twister PRNG , which restricts internal entropy to only 32 bits regardless of user settings. This weakn...

7.5CVSS7.2AI score0.01804EPSS
SaveIn wildExploits1References6Affected Software1
Cvelist
Cvelist
•added 2023/08/09 12:00 a.m.•52 views

CVE-2023-39910

The cryptocurrency wallet entropy seeding mechanism used in Libbitcoin Explorer 3.0.0 through 3.6.0 is weak, aka the Milk Sad issue. The use of an mt19937 Mersenne Twister PRNG restricts the internal entropy to 32 bits regardless of settings. This allows remote attackers to recover any wallet...

7.6AI score0.01804EPSS
SaveExploits1References6
Mend
Mend
•added 2023/08/09 12:00 a.m.•9 views

CVE-2023-39910

The cryptocurrency wallet entropy seeding mechanism used in Libbitcoin Explorer 3.0.0 through 3.6.0 is weak, aka the Milk Sad issue. The use of an mt19937 Mersenne Twister PRNG restricts the internal entropy to 32 bits regardless of settings. This allows remote attackers to recover any wallet...

8.7CVSS0.01804EPSS
SaveExploits1References8
Vulnrichment
Vulnrichment
•added 2023/08/09 12:00 a.m.•27 views

CVE-2023-39910

The cryptocurrency wallet entropy seeding mechanism used in Libbitcoin Explorer 3.0.0 through 3.6.0 is weak, aka the Milk Sad issue. The use of an mt19937 Mersenne Twister PRNG restricts the internal entropy to 32 bits regardless of settings. This allows remote attackers to recover any wallet...

7.2AI score0.01804EPSS
SaveExploits1References6
OpenVAS
OpenVAS
•added 2023/08/09 12:00 a.m.•46 views

Microsoft Internet Explorer Security Feature Bypass Vulnerability (KB5029243)

This host is missing an important security update according to Microsoft KB5029243 SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

6.5CVSS9.5AI score0.01572EPSS
SaveExploits0References1
Microsoft KB
Microsoft KB
•added 2023/08/08 7:00 a.m.•67 views

Internet Explorer help

None None...

6.5CVSS7.2AI score0.01572EPSS
SaveExploits0
Positive Technologies
Positive Technologies
•added 2023/08/08 12:00 a.m.•32 views

PT-2023-5500

Name of the Vulnerable Software and Affected Versions Libbitcoin Explorer versions 3.0.0 through 3.6.0 Description The issue is related to the use of a weak cryptocurrency wallet entropy seeding mechanism in Libbitcoin Explorer, also known as the Milk Sad issue. This weakness allows remote...

7.8CVSS7AI score0.01804EPSS
SaveExploits1References34
VulnCheck KEV
VulnCheck KEV
•added 2023/08/08 12:00 a.m.•31 views

VulnCheck KEV: CVE-2023-39910

The cryptocurrency wallet entropy seeding mechanism used in Libbitcoin Explorer 3.0.0 through 3.6.0 is weak, aka the Milk Sad issue. The use of an mt19937 Mersenne Twister PRNG restricts the internal entropy to 32 bits regardless of settings. This allows remote attackers to recover any wallet...

7.5CVSS7.2AI score0.01804EPSS
SaveIn wildExploits1References3
osv_cve
osv_cve
•added 2023/08/01 5:15 p.m.•16 views

CVE-2023-33493

An Unrestricted Upload of File with Dangerous Type vulnerability in the Ajaxmanager File and Database explorer ajaxmanager module for PrestaShop through 2.3.0, allows remote attackers to upload dangerous files without restrictions...

9.8CVSS5.8AI score0.00888EPSS
SaveExploits0References1
osv_ghsa
osv_ghsa
•added 2023/07/20 9:30 p.m.•52 views

GHSA-GHG2-3W9X-9599 Alkacon OpenCMS arbitrary file upload vulnerability

An arbitrary file upload vulnerability in the component /workplace!explorer of Alkacon OpenCMS v15.0 allows attackers to execute arbitrary code via uploading a crafted PNG file...

6.1CVSS6.2AI score0.00614EPSS
SaveExploits1References3
attackerkb
attackerkb
•added 2023/07/20 7:15 p.m.•23 views

CVE-2023-37602

An arbitrary file upload vulnerability in the component /workplace!explorer of Alkacon OpenCMS v15.0 allows attackers to execute arbitrary code via uploading a crafted PNG file...

6.1CVSS6.7AI score0.00614EPSS
SaveExploits1References2
NVD
NVD
•added 2023/07/20 9:15 a.m.•41 views

CVE-2023-3784

A vulnerability was found in Dooblou WiFi File Explorer 1.13.3. It has been declared as problematic. Affected by this vulnerability is an unknown functionality. The manipulation of the argument search/order/download/mode leads to cross site scripting. The attack can be launched remotely. The...

5.4CVSS4.2AI score0.0057EPSS
SaveExploits1References4
osv_cve
osv_cve
•added 2023/07/20 9:15 a.m.•24 views

CVE-2023-3784

A vulnerability was found in Dooblou WiFi File Explorer 1.13.3. It has been declared as problematic. Affected by this vulnerability is an unknown functionality. The manipulation of the argument search/order/download/mode leads to cross site scripting. The attack can be launched remotely. The...

5.4CVSS3.8AI score0.0057EPSS
SaveExploits1References4
Rows per page
Query Builder