CVE-2024-27632

Détails de la vulnérabilité CVE-2024-27632 Aperçu Dans Savane v3.12 et versions antérieures, le timestamp Unix est utilisé comme germe dans le générateur de nombres pseudo-aléatoires PRNG utilisé pour générer les jetons de protection contre les failles de type Cross-Site Request Forgery CSRF...

weakrng-sweep

weak-rng sweep класс CVE-2026-71851 Исследовательский инструмент: перебирает схемы PRNG x uint32 сиды, выводит BIP39-кошельки, проверяет принадлежность к набору адресов жертвы оборонительное исследование, в стиле illbloom. Схемы: 0-10 illbloom: MT19937/glibc/Java/LCG/xorshift, 11-13 glibc-31 LCG,...

CVE-2026-66372

CVE-2026-66372 affects the Digital Watchdog VMAX DVR and NVR product lineups. The root cause is a predictable seed in the pseudo-random number generator (PRNG) , resulting in insufficiently random values that make web session tokens predictable and bound their entropy to the seed space. The CVSS ...

CVE-2026-66372 Predictable Seed in Pseudo-Random Number Generator (PRNG) in Digital Watchdog VMAX DVR and NVR Product Lineups

The affected products use insufficiently random values, which allows web session tokens to be predictable, bounding token entropy to the seed space...

Astra Linux – Vulnerability in mbedtls

A issue was discovered in Mbed TLS before 3.6.6 and 4.x before 4.1.0, as well as in TF-PSA-Crypto before 1.1.0. There is a predictable seed in a pseudo-random number generator PRNG...

Mbed TLS before 3.6.6 and TF-PSA-Crypto before 1.1.0 misuse seeds in a Pseudo-Random Number Generator (PRNG).

...

Linux Distros Unpatched Vulnerability : CVE-2026-34871

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in Mbed TLS before 3.6.6 and 4.x before 4.1.0 and TF-PSA-Crypto before 1.1.0. There is a Predictable Seed in a Pseudo-Random Number...

CVE-2025-52578

CVE-2025-52578 describes an incorrect usage of seeds in a pseudo-random number generator (PRNG) affecting Gallagher Command Centre Server. The issue allows a sophisticated attacker with physical access to compromise internal device communications. Affected versions include 9.30 before vCR9.30.251...

EUVD-2008-3158

Malware in sbrugna...

PT-2025-32706 · Intel · Intel Tdx Firmware

Name of the Vulnerable Software and Affected Versions: IntelR TDX firmware affected versions not specified Description: A predictable seed in the Pseudo-Random Number Generator PRNG within the firmware may allow an authenticated user to potentially enable information disclosure via local access...

CVE-2024-45751

tgt aka Linux target framework before 1.0.93 attempts to achieve entropy by calling rand without srand. The PRNG seed is always 1, and thus the sequence of challenges is always identical...

CVE-2024-41594: Inadequate Encryption Strength

An issue in DrayTek Vigor310 devices through 4.3.2.6 allows an attacker to obtain sensitive information because the httpd server of the Vigor management UI uses a static string for seeding the PRNG of OpenSSL...

USN-7024-1: tgt vulnerability

It was discovered that tgt attempts to achieve entropy by calling rand without srand. The PRNG seed is always 1, and thus the sequence of challenges is always identical...

Ubuntu 20.04 LTS : tgt vulnerability (USN-7024-1)

The remote Ubuntu 20.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-7024-1 advisory. It was discovered that tgt attempts to achieve entropy by calling rand without srand. The PRNG seed is always 1, and thus the sequence of challenges is always...

Updated tgt packages fix security vulnerability

tgt aka Linux target framework before 1.0.93 attempts to achieve entropy by calling rand without srand. The PRNG seed is always 1, and thus the sequence of challenges is always identical. CVE-2024-45751...

CVE-2024-45751

tgt aka Linux target framework before 1.0.93 attempts to achieve entropy by calling rand without srand. The PRNG seed is always 1, and thus the sequence of challenges is always identical...

CVE-2024-45751

tgt aka Linux target framework before 1.0.93 attempts to achieve entropy by calling rand without srand. The PRNG seed is always 1, and thus the sequence of challenges is always identical...

CVE-2024-45751

tgt aka Linux target framework before 1.0.93 attempts to achieve entropy by calling rand without srand. The PRNG seed is always 1, and thus the sequence of challenges is always identical...

CVE-2024-45751

The tgt (Linux target framework) software before version 1.0.93 is vulnerable to a security flaw where it attempts to achieve entropy by calling rand() without proper seeding via srand() . This causes the PRNG seed to remain at a constant value of 1, resulting in an identical sequence of challeng...

PT-2024-31748

Name of the Vulnerable Software and Affected Versions: tgt versions prior to 1.0.93 Description: The issue is related to the Linux target framework tgt attempting to generate random numbers by using rand without srand, resulting in a predictable PRNG seed. This causes the sequence of challenges t...