java-insecure-random-cve-2021-27568

java-insecure-random-cve-2021-27568 Demo of CVE-2021-27568: Insecure randomness in token generation...

openCRX-CVE-2020-7378

openCRX-CVE-2020-7378 Unauthenticated Account Take Over Exploits Password Reset Vulnerability in OpenCRX, CVE-2020-7378. A Stealthy Python Implentation for CVE-2020-7378 Exploit is because, the developers used Random Class from java.util.Random to generate random tokens in order to reset a users...

CVE-2026-55889

XDG Desktop Portal is a desktop integration portal. Prior to version 1.22.1, malicious sandboxed applications can use the FileTransfer.RetrieveFiles method to redirect drag-and-drop and copy-paste data targeted at other applications to itself. Some portals generate tokens which provide access to...

CVE-2026-55889

XDG Desktop Portal is a desktop integration portal. Prior to version 1.22.1, malicious sandboxed applications can use the FileTransfer.RetrieveFiles method to redirect drag-and-drop and copy-paste data targeted at other applications to itself. Some portals generate tokens which provide access to...

EUVD-2026-108751

XDG Desktop Portal is a desktop integration portal. Prior to version 1.22.1, malicious sandboxed applications can use the FileTransfer.RetrieveFiles method to redirect drag-and-drop and copy-paste data targeted at other applications to itself. Some portals generate tokens which provide access to...

Linux Distros Unpatched Vulnerability : CVE-2026-55889

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - XDG Desktop Portal is a desktop integration portal. Prior to version 1.22.1, malicious sandboxed applications can use the FileTransfer.RetrieveFiles method to...

CVE-2026-112240

The download link for files uploaded through a form relied on a token that could be predicted. The file name in the request was also not verified in a way that resisted guessing. An unauthenticated attacker could use this to access files uploaded by other visitors. In addition, the token was show...

EUVD-2026-104869

The download link for files uploaded through a form relied on a token that could be predicted. The file name in the request was also not verified in a way that resisted guessing. An unauthenticated attacker could use this to access files uploaded by other visitors. In addition, the token was show...

PT-2026-118312

The download link for files uploaded through a form relied on a token that could be predicted. The file name in the request was also not verified in a way that resisted guessing. An unauthenticated attacker could use this to access files uploaded by other visitors. In addition, the token was show...

PT-2026-110792

Name of the Vulnerable Software and Affected Versions Progress MarkLogic Server versions 12.x prior to 12.1.0 Progress MarkLogic Server versions 11.x prior to 11.3.7 Description The Query Console uses predictable Cross-Site Request Forgery CSRF tokens. CSRF is a technique where an attacker tricks...

CVE-2026-95653

Concrete CMS Community Store before 2.7.8 derives digital product download tokens from order creation timestamps instead of random values, making tokens predictable. Unauthenticated attackers can enumerate sequential order and file identifiers to calculate valid download tokens and retrieve digit...

EUVD-2026-84524

Concrete CMS Community Store before 2.7.8 derives digital product download tokens from order creation timestamps instead of random values, making tokens predictable. Unauthenticated attackers can enumerate sequential order and file identifiers to calculate valid download tokens and retrieve digit...

CVE-2026-95653

Concrete CMS Community Store versions before 2.7.8 contain a predictable digital download token vulnerability. The root cause is that download tokens are derived from order creation timestamps rather than cryptographically random values (in Download.php). Because order and file identifiers are se...

PT-2026-96817

Name of the Vulnerable Software and Affected Versions Concrete CMS Community Store versions prior to 2.7.8 Description Digital product download tokens are derived from order creation timestamps rather than random values, which makes the tokens predictable. Unauthenticated attackers can enumerate...

PT-2026-95958

Name of the Vulnerable Software and Affected Versions NivoCart versions prior to 2.4.1 Description The 'forgotten.php' endpoint generates recovery codes using the substrmd5mt rand, 0, 10 method, resulting in predictable password reset tokens. An attacker with knowledge of an administrator's email...

PT-2026-95699

Name of the Vulnerable Software and Affected Versions Cotonti version 1.0.0 Description Password recovery validation tokens are derived from md5microtime within the users.passrecover.php file, resulting in a predictable token space of approximately one million values per second. Unauthenticated...

CVE-2026-66372

The affected products use insufficiently random values, which allows web session tokens to be predictable, bounding token entropy to the seed space...

Improper Input Validation

nanoid is vulnerable to Improper Input Validation. The vulnerability is due to improper coercion of the user-influenced size parameter to a signed 32-bit integer, which allows an attacker to corrupt the process-wide CSPRNG pool and cause subsequent tokens and unique identifiers to become...

CVE-2026-64964

ATutor (open-source learning management system) is vulnerable to predictable email confirmation token generation in its account confirmation functionality. The root cause is the use of insufficiently random values tied to user registration, allowing an attacker who can predict these values to gue...

CVE-2026-64964

ATutor generates predictable email confirmation tokens due to the use of insufficiently random values in the account confirmation functionality. Due to the use of predictable values related to user registration, an attacker who knows or can predict these values can guess valid account activation...