PT-2022-24817 · Unknown · Js Compute Runtime

Name of the Vulnerable Software and Affected Versions: JS Compute Runtime versions prior to 0.5.3 Description: The Math.random and crypto.getRandomValues methods fail to use sufficiently random values, making the sequence of random values predictable. An attacker can use the fixed seed to predict...

CVE-2022-40769

profanity through 1.60 has only four billion possible RNG initializations. Thus, attackers can recover private keys from Ethereum vanity addresses and steal cryptocurrency, as exploited in the wild in June 2022...

VulnCheck KEV: CVE-2022-40769

profanity through 1.60 has only four billion possible RNG initializations. Thus, attackers can recover private keys from Ethereum vanity addresses and steal cryptocurrency, as exploited in the wild in June 2022...

profanity 安全特征问题漏洞

profanity is an ethereum vanity address generator from BlackTrace Personal Developers. A security vulnerability exists in profanity versions 1.60 and earlier, which stems from the fact that it has only 4 billion possible RNG initializations leading to an attacker being able to recover private key...

PT-2022-25527

Name of the Vulnerable Software and Affected Versions profanity versions 1.60 and earlier Description The issue allows attackers to recover private keys from Ethereum vanity addresses and steal cryptocurrency due to only four billion possible RNG initializations. This has been exploited in the...

WordPress plugin Craw Data 代码问题漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A code issue vulnerability exists i...

SUSE: Security Advisory (SUSE-SU-2022:3270-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE-SU-2022:3270-1 Security update for samba

This update for samba fixes the following issues: - CVE-2022-1615: Fixed error handling in random number generation bso15103bsc1202976. Bugfixes: - Fixed use after free when iterating smbdserverconnection-connections after tree disconnect failure bso15128bsc1200102...

SUSE-SU-2022:3244-1 Security update for samba

This update for samba fixes the following issues: - CVE-2022-1615: Fixed error handling in random number generation bso15103bsc1202976. - CVE-2022-32743: Implement validated dnsHostName write rights bso14833bsc1202803. Bugfixes: - Fixed use after free when iterating smbdserverconnection-connectio...

CVE-2022-36045

NodeBB Forum Software is powered by Node.js and supports either Redis, MongoDB, or a PostgreSQL database. It utilizes web sockets for instant interactions and real-time notifications. utils.generateUUID, a helper function available in essentially all versions of NodeBB as far back as v1.0.1 and...

Code injection

NodeBB Forum Software is powered by Node.js and supports either Redis, MongoDB, or a PostgreSQL database. It utilizes web sockets for instant interactions and real-time notifications. utils.generateUUID, a helper function available in essentially all versions of NodeBB as far back as v1.0.1 and...

CVE-2022-36045 Account takeover via cryptographically weak PRNG in NodeBB Forum

NodeBB Forum Software is powered by Node.js and supports either Redis, MongoDB, or a PostgreSQL database. It utilizes web sockets for instant interactions and real-time notifications. utils.generateUUID, a helper function available in essentially all versions of NodeBB as far back as v1.0.1 and...

WordPress plugin Yotpo Reviews for WooCommerce 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site request forger...

rng-tools bug fix and enhancement update

An update is available for rng-tools. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The rng-tools packages contain random number generator user-space utilities...

PT-2022-9398 · Unknown · Otp-Generator

Name of the Vulnerable Software and Affected Versions: otp-generator versions prior to 3.0.0 Description: The issue is related to insecure randomness in the generation of one-time passwords, which could potentially allow a brute-force attack. Recommendations: For versions prior to 3.0.0, update t...

WordPress plugin DX Share Selection 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A cross-site request forgery...

rng-tools bug fix and enhancement update

An update is available for rng-tools. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The rng-tools packages contain random number generator user-space utilities...

WordPress Mobile browser color select plugin cross-site request forgery vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site request forger...

WordPress ToolBar to Share plugin跨站点请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed using the PHP language. WordPress plugin is an application plugin. WordPress ToolBar to Share plugin version 2.0 and prior versions are vulnerable to cross-site request forgery...

WordPress plugin Collaboration E-mails 跨站请求伪造漏洞

WordPress is a set of blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL. WordPress plugin Collaboration E-mails 2.2.0 and earlier versions are vulnerable to cross-site request forgery, which stems from a lack of...