PT-2018-14422

Name of the Vulnerable Software and Affected Versions Orange AirBox Y858 FL 01.16 04 Description The issue allows attackers to extract APN data, including name, number, username, and password, via the rand parameter in the "goform/getProfileList" API endpoint. Recommendations For Orange AirBox Y8...

PT-2018-14423

Name of the Vulnerable Software and Affected Versions Orange AirBox Y858 FL 01.16 04 Description The issue allows remote attackers to discover information about currently connected devices, including hostnames, IP addresses, MAC addresses, and connection time, by exploiting the...

CVE-2018-18375: Use of Insufficiently Random Values

goform/getProfileList in Orange AirBox Y858FL01.1604 allows attackers to extract APN data name, number, username, and password via the rand parameter...

CVE-2018-18376: Exposure of Sensitive Information to an Unauthorized Actor

goform/getWlanClientInfo in Orange AirBox Y858FL01.1604 allows remote attackers to discover information about currently connected devices hostnames, IP addresses, MAC addresses, and connection time via the rand parameter...

Career Portal 1.0 - SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Career Portal v1.0 - SQL Injection Date: 2017-10-17 Exploit Author: 8bitsec Vendor Homepage: https://codecanyon.net/item/career-portal-online-job-search-script/20767278 Software Link:...

CVE-2016-6485

The construct function in Framework/Encryption/Crypt.php in Magento 2 uses the PHP rand function to generate a random number for the initialization vector, which makes it easier for remote attackers to defeat cryptographic protection mechanisms by guessing the value...

PT-2017-8982

Name of the Vulnerable Software and Affected Versions Magento 2 affected versions not specified Description The issue concerns the generation of a random number for the initialization vector in the construct function, located in Framework/Encryption/Crypt.php. This function utilizes the PHP rand...

CVE-2016-6485: Use of a Broken or Risky Cryptographic Algorithm

The construct function in Framework/Encryption/Crypt.php in Magento 2 uses the PHP rand function to generate a random number for the initialization vector, which makes it easier for remote attackers to defeat cryptographic protection mechanisms by guessing the value...

CVE-2016-5100

Froxlor before 0.9.35 uses the PHP rand function for random number generation, which makes it easier for remote attackers to guess the password reset token by predicting a value...

CVE-2016-5100

Froxlor before 0.9.35 uses the PHP rand function for random number generation, which makes it easier for remote attackers to guess the password reset token by predicting a value...

CVE-2016-5100

Summary: CVE-2016-5100 affects Froxlor prior to 0.9.35, where the code uses PHP’s rand() for random number generation, enabling a remote attacker to predict password reset tokens. The issue is documented across multiple advisories and security entries (openSUSE/OpenSUSE-SU-2021:0415/0450, GHSA-GH...

PT-2017-8695

Name of the Vulnerable Software and Affected Versions Froxlor versions prior to 0.9.35 Description The issue makes it easier for remote attackers to guess the password reset token by predicting a value, as the software uses the PHP rand function for random number generation. Recommendations For...

CVE-2016-5100: Use of Insufficiently Random Values

Froxlor before 0.9.35 uses the PHP rand function for random number generation, which makes it easier for remote attackers to guess the password reset token by predicting a value...

Insecure Random Number Generator

net-http-digestauth is vulnerable to insecure random number generation. The library uses Kernelrand which is a repeatable sequence of numbers, allowing a malicious user to guess the number under certain circumstances...

PT-2020-5620

Name of the Vulnerable Software and Affected Versions hostapd versions prior to 2.6 Description The issue is related to the use of deterministic values due to missing calls to srand or srandom before using rand and random standard library functions in EAP mode. This results in inappropriate use o...

NETGEAR WNR2000v5 - Remote Code Execution

NETGEAR WNR2000v5 - Remote Code Execution Remote code execution in NETGEAR WNR2000v5 - by Pedro Ribeiro [email protected] / Agile Information Security Released on 20/12/2016 NOTE: this exploit is "alpha" quality and has been deprecated. Please see the modules accepted into the Metasploit framework...

openssl: Crash in ssleay_rand_bytes due to locking regression

A regression was found in the ssleayrandbytes function in the versions of OpenSSL shipped with Red Hat Enterprise Linux 6 and 7. This regression could cause a multi-threaded application to crash...

ipmi-brute NSE Script

Performs brute force password auditing against IPMI RPC server. Script Arguments brute.credfile, brute.delay, brute.emptypass, brute.firstonly, brute.guesses, brute.mode, brute.passonly, brute.retries, brute.start, brute.threads, brute.unique, brute.useraspass See the documentation for the brute...

lib32-expat: multiple issues

CVE-2012-6702 predictable random numbers It was found that when calling XMLParse ahead of rand, it causes the pseudo random generator to generate non-random predictable numbers. - CVE-2016-5300 denial of service It was found that original fix for CVE-2012-0876 used too little entropy for the hash...

PT-2016-2121

Name of the Vulnerable Software and Affected Versions PHP versions prior to 5.4.44 PHP versions 5.5.x prior to 5.5.28 PHP versions 5.6.x prior to 5.6.12 Description The issue is related to the incorrect interaction of the openssl random pseudo bytes function with the deprecated RAND pseudo bytes...