984 matches found
CVE-2025-13353: Use of Insufficiently Random Values
In gokey versions 0.2.0, a flaw in the seed decryption logic resulted in passwords incorrectly being derived solely from the initial vector and the AES-GCM authentication tag of the key seed. This issue has been fixed in gokey version 0.2.0. This is a breaking change. The fix has invalidated any...
CVE-2025-13470
In RNP version 0.18.0 a refactoring regression causes the symmetric session key used for Public-Key Encrypted Session Key PKESK packets to be left uninitialized except for zeroing, resulting in it always being an all-zero byte array. Any data encrypted using public-key encryption in this release...
JLSEC-2025-232 Side channel in RSA key generation and operations (SSBleed, M-Step)
Vulnerability Mbed TLS's modular inversion routine and GCD routine are vulnerable to local timing attacks in a number of settings discussed below. These functions are used in RSA, making the following operations vulnerable in all configurations: - RSA key generation with any API mbedtlsrsagenkey...
UBUNTU-CVE-2025-13402
RNP PKESK Session Keys Generated as All-Zero...
TencentOS Server 3: tang (TSSA-2023:0292)
The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2023:0292 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities:...
CVE-2025-12822
The WP Login and Register using JWT plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the 'mojwtgeneratenewapikey' function in all versions up to, and including, 3.0.0. This makes it possible for authenticated attackers, with Subscriber-level...
RNP 安全漏洞
RNP is a C++ library open-sourced by RNP. A security vulnerability exists in RNP that stems from improper PKESK session key generation...
EUVD-2025-35623
Sakai kernel-impl: predictable PRNG used to generate server‑side encryption key in EncryptionUtilityServiceImpl...
EUVD-1999-1425
Malware in sbrugna...
EUVD-2012-0026
Malware in sbrugna...
EUVD-2019-13374
Malware in sbrugna...
EUVD-2000-0738
Malware in sbrugna...
EUVD-2000-0532
Malware in sbrugna...
EUVD-2011-4069
Malware in sbrugna...
EUVD-2014-2399
Malware in sbrugna...
EUVD-2016-4160
Malware in sbrugna...
EUVD-2018-0718
Malware in sbrugna...
EUVD-2018-12754
Malware in sbrugna...