CVE-2024-29868

CVE-2024-29868: 복구 토큰 생성 시 암호학적으로 취약한 PRNG 사용 이 저장소는 CVE-2024-29868 과 관련된 개념 증명PoC을 포함하며, 해당 취약점은 Apache StreamPipes v0.69.0부터 0.93.0까지 영향을 미칩니다. 설명 : Apache StreamPipes의 사용자 자체 등록 및 비밀번호 복구 메커니즘에서 암호학적으로 취약한 의사 난수 생성기PRNG 사용 취약점입니다. 이로 인해 공격자는 합리적인 시간 내에 복구 토큰을 추측하여 공격 대상 사용자의 계정을 탈취할 수 있습니다. 이...

vuke

vuke 취약한 비트코인 키 생성을 분석하고 재현하기 위한 연구 도구입니다. 기능 모듈식 아키텍처 - 플러그 가능한 소스와 변환 다중 입력 소스 숫자 범위 취약한 시드 테스트 워드리스트 브레인월렛 분석 타임스탬프 시간 기반 PRNG 악용 Stdin 스트리밍 파이프라인 통합 역사적 취약점 변환 직접 원시 바이트를 키로 SHA256 클래식 브레인월렛 이중 SHA256 비트코인 스타일 해싱 MD5 레거시 취약 해싱 SHA256 체인 반복/인덱스 기반 결정론적 파생 Milksad MT19937 PRNG - CVE-2023-39910...

CVE-2024-27632

CVE-2024-27632 脆弱性の詳細 概要 Savane v3.12 以前では、クロスサイトリクエストフォージェリ CSRF 保護トークン formid の生成に使用される擬似乱数生成器 PRNG のシードとして Unix タイムスタンプが使用されています。その結果、攻撃者が被害ユーザーに割り当てられたものと同じ有効な CSRF トークンを独立して生成できる可能性があり、CSRF チェックを通過して CSRF 攻撃を成功させる可能性があります。CSRF 攻撃の影響には、権限昇格とアカウント乗っ取りが含まれます。 CWE 分類: CWE-335: 擬似乱数生成器 PRNG...

CVE-2017-3000

CVE-2017-3000 Flash Player Constant Blinding PRNG에서 CVE-2017-3000의 완전한 익스플로잇 마지막에 동적으로 생성된 코드 힙에 WANG과 wang을 삽입합니다...

Bluetooth-Attacks-CVE-2025-27840

Este artículo analiza cómo un atacante puede introducir una lista oculta de vulnerabilidades a través de actualizaciones de módulos, lo que puede comprometer dispositivos ESP32 y obtener acceso no autorizado a claves privadas, afectando a miles de millones de dispositivos que utilizan este...

debian-ssh

Debian OpenSSL 可预测 PRNG 链接 原始 URL：http://metasploit.com/users/hdm/tools/debian-openssl/（镜像 ） 漏洞利用： https://www.exploit-db.com/exploits/5622/ Perl https://www.exploit-db.com/exploits/5720/ Python https://www.exploit-db.com/exploits/5632/ Ruby 推荐工具：Crowbar （能够暴力破解 SSH 密钥） 测试方法：ssh-vulnkey & dowkd.p...

juniper-cve-2015-7755

Juniper CVE-2015-7755 および CVE-2015-7756 このリポジトリには、Juniper ScreenOS における CVE-2015-7755 および CVE-2015-7756 の問題の分析から得られたメモ、バイナリ、および関連情報が含まれています。 これらの問題の詳細については、以下のURLを参照してください: https://forums.juniper.net/t5/Security-Incident-Response/Important-Announcement-about-ScreenOS/ba-p/285554...

CVE-2026-3416

The API Publisher component previously used a non-cryptographic pseudorandom number generator PRNG to create shared secrets for Webhook HMAC validation. This PRNG lacks sufficient entropy for security-sensitive operations, allowing a sophisticated attacker to predict future secrets. This enables...

CVE-2026-3416

CVE-2026-3416 affects the API Publisher component in multiple WSO2 products. The root cause is the use of a non-cryptographic pseudorandom number generator (PRNG) to create shared secrets for Webhook HMAC validation. Because the PRNG lacks sufficient entropy, a sophisticated attacker with high at...

CVE-2026-3416 Predictable Pseudorandom Number Generation via Webhook HMAC Secret Generation in Multiple WSO2 Products Allows Forged Event Payloads

The API Publisher component previously used a non-cryptographic pseudorandom number generator PRNG to create shared secrets for Webhook HMAC validation. This PRNG lacks sufficient entropy for security-sensitive operations, allowing a sophisticated attacker to predict future secrets. This enables...

CVE-2023-31290-Scanner-

寄付: bc1qps62cyk9f9unmdkc9k3ccj9e2h8ywfhg2j53ec 暗号通貨研究コミュニティのために❤️を込めて作られました。 🚀 CVE-2023-31290 スキャナー - Bitcoin & Ethereum 脆弱性エクスプロイト ⚡ Bitcoin & Ethereum 向け最速の CVE-2023-31290 Milk Sad スキャナー 🔥 最新ハードウェアで最大毎秒150,000シード！ 📌 これは何ですか？ このツールは、libbitcoin-explorer ライブラリの CVE-2023-31290 脆弱性 （別名 「Milk Sad」...

librest: weak random number generation in PKCE implementation

A flaw was found in librest. The PKCE implementation for OAuth authorization uses the GRand function from the GLib API, a cryptographically insecure pseudo-random number generator. Because the generated "code verifier" lacks sufficient cryptographic entropy, a malicious actor can reverse-engineer...

sslWeakness

sslWeakness 약한 PRNG를 보여주는 예제 스크립트, CVE-2008-0166...

weakrng-sweep

weak-rng スイープ（CVE-2026-71851 クラス） 調査ツール：PRNG スキーム × uint32 シードを列挙し、BIP39 ウォレットを導出し、 被害者アドレス集合に対するメンバーシップをチェックします（防御的調査、illbloom スタイル）。 スキーム：0-10（illbloom：MT19937/glibc/Java/LCG/xorshift）、11-13（glibc-31 LCG）、 14-15（crypto-js 3.3.0 WordArray.random MWC 移植版、node とのバイト検証済み）。 実行方法：Actions - mwc-sweep ...

SUSE SLED15 / SLES15 Security Update : librest (SUSE-SU-2026:3795-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2026:3795-1 advisory. This update for librest fixes the following issue: - CVE-2026-16615: PKCE implementation for OAuth authorization uses a...

SUSE SLES12 Security Update : librest (SUSE-SU-2026:3796-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2026:3796-1 advisory. This update for librest fixes the following issue: - CVE-2026-16615: PKCE implementation for OAuth authorization uses a cryptographically...

urwid: Urwid: Predictable session IDs lead to remote code execution and information disclosure

A flaw was found in the urwid web display backend. This vulnerability arises from the use of a cryptographically insecure pseudo-random number generator PRNG for web session identifiers, making them predictable. An attacker could either observe enough session IDs to reconstruct the PRNG state or,...

CVE-2026-19718

The BlogVault Backup & Staging WordPress plugin before 6.65, MalCare WordPress Security Plugin WordPress plugin before 6.65, The WP Remote WordPress Plugin WordPress plugin before 6.65 do not prevent unauthenticated users from obtaining data derived from the secret that binds a site to its remote...

CVE-2026-19718 BlogVault, MalCare and WP Remote 5.16 - 6.62 - Unauthenticated Site Takeover via Connection Key Recovery

The BlogVault Backup & Staging WordPress plugin before 6.65, MalCare WordPress Security Plugin WordPress plugin before 6.65, The WP Remote WordPress Plugin WordPress plugin before 6.65 do not prevent unauthenticated users from obtaining data derived from the secret that binds a site to its remote...

EUVD-2026-66276

The BlogVault Backup & Staging WordPress plugin before 6.65, MalCare WordPress Security Plugin WordPress plugin before 6.65, The WP Remote WordPress Plugin WordPress plugin before 6.65 do not prevent unauthenticated users from obtaining data derived from the secret that binds a site to its remote...