CVE-2022-40769---Profanity

DONATE: bc1qps62cyk9f9unmdkc9k3ccj9e2h8ywfhg2j53ec Built with ❤️ for the crypto research community. ============================================================ CVE-2023-39910 + CVE-2022-40769 - キー生成ツール → TXT 説明:...

You-re-Doing-IoT-RNG

IoT RNG을 잘못하고 있습니다 이 저장소에는 여러 기기에서 난수를 생성하는 데 사용된 기기 코드와 당사의 결과물이 포함되어 있습니다. 취약점과 문제에 대한 보다 완전한 설명은 여기에서 DEF CON 21 발표를 확인하세요: https://www.youtube.com/watch?v=Zuqw0-jZh9Y 또는 원하신다면, 여기에서 이 문제에 대한 모든 내용을 읽을 수 있습니다: https://labs.bishopfox.com/tech-blog/youre-doing-iot-rng 자세한 내용은 개별 기기 폴더의 README를...

CVE-2026-80835

In the Linux kernel, the following vulnerability has been resolved: crypto: qcom-rng - Remove cryptorng interface qcom-rng.c exposes the same hardware through two completely separate interfaces, cryptorng and hwrng. However, the implementation of this is buggy because it permits generation...

EUVD-2026-71285

In the Linux kernel, the following vulnerability has been resolved: crypto: qcom-rng - Remove cryptorng interface qcom-rng.c exposes the same hardware through two completely separate interfaces, cryptorng and hwrng. However, the implementation of this is buggy because it permits generation...

CVE-2026-80835 crypto: qcom-rng - Remove crypto_rng interface

In the Linux kernel, the following vulnerability has been resolved: crypto: qcom-rng - Remove cryptorng interface qcom-rng.c exposes the same hardware through two completely separate interfaces, cryptorng and hwrng. However, the implementation of this is buggy because it permits generation...

CVE-2026-80835

CVE-2026-80835 affects the Linux kernel 's qcom-rng crypto driver, which exposes a Qualcomm hardware RNG through two separate interfaces (crypto_rng and hwrng). The root cause is a lack of synchronization between qcom_rng_generate() and qcom_hwrng_read(), allowing concurrent access to the same ha...

CVE-2026-21009-ECDSA-Nonce-Reuse-in-IoT-Firmware-Signing

CVE-2026-21009 – IoTファームウェア署名におけるECDSAナンス再利用 プログラムコード Python root@kitploit: ecdsanoncereusesim.py - Signing firmware with repeated nonce k import ecdsa, hashlib sk = ecdsa.SigningKey.generatecurve=ecdsa.NIST256p vk = sk.getverifyingkey Sign two different firmware images with same nonce due to bad...

Linux Distros Unpatched Vulnerability : CVE-2026-80835

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - crypto: qcom-rng - Remove cryptorng interface qcom-rng.c exposes the same hardware through two completely separate interfaces, cryptorng and hwrng. However, the...

BLEBoy

BLEBoy 목표 교육 및 테스트에 사용할 수 있는 모든 BLE 페어링 방식을 지원하는 BLE 주변기기를 만드는 것입니다. 여기에는 대역외OOB 페어링도 포함됩니다. 주변기기는 구성이 가능해야 하며 일반 소비자용 부품으로 쉽게 재현할 수 있어야 합니다. 소개 BLEBoy는 Adafruit nRF52 Feather 보드를 사용하여 구현된 BLE 주변기기로, Bluetooth 사양https://www.bluetooth.com/specifications/bluetooth-core-specification에 설명된 모든 BLE 페어링...

ML-for-RNGs

ML-for-RNGs 머신러닝을 사용하여 RNG 시퀀스 예측하기...

CVE-2022-40769

CVE-2022-40769 profanity 1.60 以前のバージョンでは、可能なRNG初期化はわずか40億通りしかありません。そのため、攻撃者はイーサリアムのバニティアドレスから秘密鍵を復元し、暗号通貨を盗むことができ、これは2022年6月に実際に悪用されました。 認証| 複雑さ| ベクトル ---|---|--- 利用不可| 利用不可| 利用不可...

weakrng-sweep

weak-rng スイープ（CVE-2026-71851 クラス） 調査ツール：PRNG スキーム × uint32 シードを列挙し、BIP39 ウォレットを導出し、 被害者アドレス集合に対するメンバーシップをチェックします（防御的調査、illbloom スタイル）。 スキーム：0-10（illbloom：MT19937/glibc/Java/LCG/xorshift）、11-13（glibc-31 LCG）、 14-15（crypto-js 3.3.0 WordArray.random MWC 移植版、node とのバイト検証済み）。 実行方法：Actions - mwc-sweep ...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098904)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098904 advisory. In the Linux kernel, the following vulnerability has been resolved: hwrng: virtio: clamp device-reported used.len at copydata randomrecvdone stores the device-report...

The vulnerability of the `cavium_map_pf regs()` function in the `drivers/char/hw_random/cavium-rng-vf.c` driver module, which is part of the Linux kernel’s support for alphanumeric devices. This vulnerability allows a attacker to cause a service failure.

The vulnerability of the caviummappf regs function in the drivers/char/hwrandom/cavium-rng-vf.c driver module, which is part of the Linux kernel’s character-to-digit device support mechanism, relates to the pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a...

Astra Linux – Vulnerabilities in Linux, Linux-5.10, Linux-5.15, Linux-6.1

In the Linux kernel, the following vulnerabilities have been resolved: hwrng: virtio – Fixed a race condition related to dataavail and actual data. The virtio rng device initiates a new entropy request whenever the data available becomes zero. When a new request occurs at the end of a read...

Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: crypto: qcom-rng – ensure the buffer for generate is completely filled The generate function in struct rngalg expects that the destination buffer is completely filled if the function returns 0. The qcomrngread function may...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: x86/coco: Requires seeding the RNG with RDRAND on CoCo systems. There are few uses of CoCo that do not rely on functional cryptography and, consequently, a functioning RNG. Unfortunately, the CoCo threat model means that the VM...

Astra Linux – Vulnerability found in Linux 5.15, Linux 5.10

In the Linux kernel, the following vulnerabilities have been resolved: hwrng: geode – Fixed the PCI device reference count leak issue. The function foreachpcidev is implemented through pcigetdevice. The comment accompanying pcigetdevice indicates that it will increase the reference count of the...

Astra Linux – Vulnerability found in Linux 5.15, Linux 5.10

In the Linux kernel, the following vulnerabilities have been resolved: hwrng: amd – Fixed the PCI device reference count leak. foreachpcidev is implemented through pcigetdevice. The comment for pcigetdevice states that it will increase the reference count of the returned pcidev, and also decrease...

CVE-2026-74438

A flaw was found in the Linux kernel's sun4i-ss cryptographic random number generator RNG. This component contains multiple vulnerabilities, including a buffer overflow in the sun4issprngseed function that could lead to a denial of service. Furthermore, the sun4issprnggenerate function may not...