Lucene search
+L

7048 matches found

OSV
OSV
added 2022/10/13 7:15 p.m.9 views

CVE-2022-42159

D-Link COVR 1200,1202,1203 v1.08 was discovered to have a predictable seed in a Pseudo-Random Number Generator...

4.3CVSS5.8AI score0.00678EPSS
SaveExploits1References2
Prion
Prion
added 2022/10/13 7:15 p.m.17 views

Code injection

D-Link COVR 1200,1202,1203 v1.08 was discovered to have a predictable seed in a Pseudo-Random Number Generator...

4CVSS4.8AI score0.00678EPSS
SaveExploits1References2Affected Software3
Positive Technologies
Positive Technologies
added 2022/10/13 12:00 a.m.10 views

PT-2022-5276 · D Link · D-Link Covr

Name of the Vulnerable Software and Affected Versions: D-Link COVR versions 1.08 Description: The issue is related to errors in the code of the pseudo-random number generator, which may allow a remote attacker to compromise the integrity of protected information. The pseudo-random number generato...

4.3CVSS4.5AI score0.00678EPSS
SaveExploits1References7
Vulnrichment
Vulnrichment
added 2022/10/13 12:00 a.m.5 views

CVE-2022-42159

D-Link COVR 1200,1202,1203 v1.08 was discovered to have a predictable seed in a Pseudo-Random Number Generator...

4.7AI score0.00678EPSS
SaveExploits1References2
CNVD
CNVD
added 2022/10/13 12:00 a.m.62 views

SAP Customer Data Cloud Security Feature Issue Vulnerability

SAP Customer Data Cloud is a tool from SAP Germany that provides digital customer identity and access management. It enables companies to collect, aggregate and manage customer data across multiple touch points and applications. A security feature issue vulnerability exists in SAP Customer Data...

5.2CVSS5AI score0.00397EPSS
SaveExploits0References1
OSV
OSV
added 2022/10/11 9:15 p.m.10 views

CVE-2022-41210

SAP Customer Data Cloud Gigya mobile app for Android - version 7.4, uses insecure random number generator program which makes it easy for the attacker to predict future random numbers. This can lead to information disclosure and modification of certain user settings...

5.2CVSS5.8AI score0.00397EPSS
SaveExploits0References2
NVD
NVD
added 2022/10/11 9:15 p.m.24 views

CVE-2022-41210

SAP Customer Data Cloud Gigya mobile app for Android - version 7.4, uses insecure random number generator program which makes it easy for the attacker to predict future random numbers. This can lead to information disclosure and modification of certain user settings...

5.2CVSS0.00397EPSS
SaveExploits0References2
Prion
Prion
added 2022/10/11 9:15 p.m.17 views

Information disclosure

SAP Customer Data Cloud Gigya mobile app for Android - version 7.4, uses insecure random number generator program which makes it easy for the attacker to predict future random numbers. This can lead to information disclosure and modification of certain user settings...

3.6CVSS5AI score0.00397EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2022/10/11 12:00 a.m.36 views

CVE-2022-41210

SAP Customer Data Cloud Gigya mobile app for Android - version 7.4, uses insecure random number generator program which makes it easy for the attacker to predict future random numbers. This can lead to information disclosure and modification of certain user settings...

5.3AI score0.00397EPSS
SaveExploits0References2
CVE
CVE
added 2022/10/11 12:00 a.m.59 views

CVE-2022-41210

CVE-2022-41210 affects SAP Customer Data Cloud (Gigya mobile app for Android) version 7.4. The issue is caused by an insecure random number generator, making it easy to predict future random numbers and enabling information disclosure and modification of certain user settings. Sources across mult...

5.2CVSS5AI score0.00397EPSS
SaveExploits0References2Affected Software1
Vulnrichment
Vulnrichment
added 2022/10/11 12:00 a.m.10 views

CVE-2022-41210

SAP Customer Data Cloud Gigya mobile app for Android - version 7.4, uses insecure random number generator program which makes it easy for the attacker to predict future random numbers. This can lead to information disclosure and modification of certain user settings...

5.1AI score0.00397EPSS
SaveExploits0References2
Kitploit
Kitploit
added 2022/09/28 8:31 p.m.91 views

Psudohash - Password List Generator That Focuses On Keywords Mutated By Commonly Used Password Creation Patterns

psudohash is a password list generator for orchestrating brute force attacks. It imitates certain password creation patterns commonly used by humans, like substituting a word's letters with symbols or numbers, using char-case variations, adding a common padding before or after the word and more. ...

7.2AI score
SaveExploits0References3
Kitploit
Kitploit
added 2022/09/22 11:30 a.m.50 views

OSRipper - AV Evading OSX Backdoor And Crypter Framework

OSripper is a fully undetectable Backdoor generator and Crypter which specialises in OSX M1 malware. It will also work on windows but for now there is no support for it and it IS NOT FUD for windows yet at least and for now i will not focus on windows. You can also PM me on discord for support or...

7AI score
SaveExploits0References5
CVE
CVE
added 2022/09/20 7:50 p.m.88 views

CVE-2022-39218

The CVE-2022-39218 vulnerability affects Fastly’s Compute@Edge JS Runtime. In versions before 0.5.3, Math.random and crypto.getRandomValues do not use sufficiently random values because the seed for the PRNG was baked into the final WebAssembly module, making the random sequence predictable for t...

7.5CVSS7.5AI score0.00802EPSS
SaveExploits0References1Affected Software1
ATTACKERKB
ATTACKERKB
added 2022/09/18 5:15 p.m.4 views

CVE-2022-40769

profanity through 1.60 has only four billion possible RNG initializations. Thus, attackers can recover private keys from Ethereum vanity addresses and steal cryptocurrency, as exploited in the wild in June 2022...

7.5CVSS5.8AI score0.01098EPSS
SaveExploits0References4
VulnCheck KEV
VulnCheck KEV
added 2022/09/18 12:00 a.m.14 views

VulnCheck KEV: CVE-2022-40769

profanity through 1.60 has only four billion possible RNG initializations. Thus, attackers can recover private keys from Ethereum vanity addresses and steal cryptocurrency, as exploited in the wild in June 2022...

7.5CVSS7.1AI score0.01098EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2022/09/18 12:00 a.m.16 views

PT-2022-25527

Name of the Vulnerable Software and Affected Versions profanity versions 1.60 and earlier Description The issue allows attackers to recover private keys from Ethereum vanity addresses and steal cryptocurrency due to only four billion possible RNG initializations. This has been exploited in the...

7.5CVSS7AI score0.01098EPSS
SaveExploits0References8
CNNVD
CNNVD
added 2022/09/18 12:00 a.m.18 views

profanity 安全特征问题漏洞

profanity is an ethereum vanity address generator from BlackTrace Personal Developers. A security vulnerability exists in profanity versions 1.60 and earlier, which stems from the fact that it has only 4 billion possible RNG initializations leading to an attacker being able to recover private key...

7.5CVSS7.2AI score0.01098EPSS
SaveExploits0References3
NVD
NVD
added 2022/09/06 6:15 p.m.26 views

CVE-2022-35931

Nextcloud Password Policy is an app that enables a Nextcloud server admin to define certain rules for passwords. Prior to versions 22.2.10, 23.0.7, and 24.0.3 the random password generator may, in very rare cases, generate common passwords that the validator itself would block. Upgrade Nextcloud...

2.7CVSS0.00397EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2022/09/06 6:10 p.m.8 views

CVE-2022-35931 Nextcloud Password Policy's generated passwords are not fully validated by HIBPValidator

Nextcloud Password Policy is an app that enables a Nextcloud server admin to define certain rules for passwords. Prior to versions 22.2.10, 23.0.7, and 24.0.3 the random password generator may, in very rare cases, generate common passwords that the validator itself would block. Upgrade Nextcloud...

2.7CVSS3.8AI score0.00397EPSS
SaveExploits0References2
Rows per page
Query Builder