CVE-2025-68932

FreshRSS is a free, self-hostable RSS aggregator. Prior to version 1.28.0, FreshRSS uses cryptographically weak random number generators mtrand and uniqid to generate remember-me authentication tokens and challenge-response nonces. This allows attackers to predict valid session tokens, leading to...

ALTCHA 安全漏洞

ALTCHA is a self-hosted CAPTCHA software from ALTCHA Open Source. A security vulnerability exists in ALTCHA that stems from a cryptanalysis flaw that could lead to the recovery of random numbers through mathematical derivation...

CVE-2025-64429

A vulnerability was found in DuckDB’s database encryption design. In certain situations, DuckDB could generate encryption keys using a weak random number generator, fail to reliably wipe keys from memory, accept manipulated database headers that disable integrity protection, or miss detecting...

Important: bind9.16 security update

The Berkeley Internet Name Domain BIND is an implementation of the Domain Name System DNS protocols. BIND includes a DNS server named; a resolver library routines for applications to use when interfacing with DNS; and tools for verifying that the DNS server is operating correctly. Security Fixes:...

WordPress plugin Doppler Forms 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security vulnerabili...

EUVD-2019-19254

Malware in sbrugna...

EUVD-2012-2663

Malware in sbrugna...

EUVD-2000-0356

Malware in sbrugna...

EUVD-2011-2665

Malware in sbrugna...

EUVD-2014-0039

Malware in sbrugna...

EUVD-2009-1691

Malware in sbrugna...

EUVD-2012-2788

Malware in sbrugna...

EUVD-2013-4314

Malware in sbrugna...

EUVD-2020-0156

Malware in sbrugna...

EUVD-2025-5160

Malicious code in bioql PyPI...

EUVD-2022-52605

Malicious code in bioql PyPI...

CVE-2025-40925

Starch versions 0.14 and earlier are vulnerable to insecure session ID generation. The default generator produces a SHA-1 hash seeded with a counter, epoch time, the built-in rand function, the PID, and internal Perl reference addresses. Because the PID comes from a small range of numbers and the...

WordPress plugin Easy Digital Downloads 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation, a blogging platform developed in the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exists in WordPre...

Fedora 42 : perl-Crypt-CBC (2025-f7bc7b789f)

The remote Fedora 42 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2025-f7bc7b789f advisory. This update, to the current upstream release version, includes a fix to source random numbers using the Crypt::URandom module rather than trying to read...

CVE-2025-54883 Vision UI's security-kit Contains Cryptographic Weakness

Vision UI is a collection of enterprise-grade, dependency-free modules for modern web projects. In versions 1.4.0 and below, the getSecureRandomInt function in security-kit versions prior to 3.5.0 packaged in Vision-ui = 1.4.0 contains a critical cryptographic weakness. Due to a silent 32-bit...