CVE-2024-29868

CVE-2024-29868: 恢复令牌生成中使用密码学弱伪随机数生成器 此仓库包含与 CVE-2024-29868 相关的概念验证，该漏洞影响从 v0.69.0 到 0.93.0 版本的 Apache StreamPipes。 描述 ：Apache StreamPipes 用户自助注册和密码恢复机制中使用了密码学弱的伪随机数生成器（PRNG）。攻击者可以在合理时间内猜出恢复令牌，进而接管被攻击用户的账户。 此 POC 展示了如何接管受影响应用程序的管理员账户。 仓库结构： /lab-setup 目录包含启动本地测试环境所需的文件，可在该环境中复现此漏洞： 包含所有必要服务的...

Bluetooth-Attacks-CVE-2025-27840

تناقش هذه الورقة كيف يمكن للمهاجم إدخال قائمة مخفية من الثغرات الأمنية من خلال تحديثات الوحدات، مما قد يؤدي إلى اختراق أجهزة ESP32 والحصول على وصول غير مصرح به إلى المفاتيح الخاصة، مما يؤثر على مليارات الأجهزة التي تستخدم هذا المتحكم الدقيق. إحدى المشكلات الرئيسية هي ثغرة CVE-2025-27840 التي تم...

CVE-2026-19718

The BlogVault Backup & Staging WordPress plugin before 6.65, MalCare WordPress Security Plugin WordPress plugin before 6.65, The WP Remote WordPress Plugin WordPress plugin before 6.65 do not prevent unauthenticated users from obtaining data derived from the secret that binds a site to its remote...

CVE-2026-19718 BlogVault, MalCare and WP Remote 5.16 - 6.62 - Unauthenticated Site Takeover via Connection Key Recovery

The BlogVault Backup & Staging WordPress plugin before 6.65, MalCare WordPress Security Plugin WordPress plugin before 6.65, The WP Remote WordPress Plugin WordPress plugin before 6.65 do not prevent unauthenticated users from obtaining data derived from the secret that binds a site to its remote...

CVE-2026-19718

CVE-2026-19718 affects three WordPress plugins — BlogVault Backup & Staging , MalCare WordPress Security , and The WP Remote (versions 5.16–6.62) — where a weak pseudo-random number generator is used to create the connection key secret that binds a site to its remote management service. Unauthent...

EUVD-2026-66276

The BlogVault Backup & Staging WordPress plugin before 6.65, MalCare WordPress Security Plugin WordPress plugin before 6.65, The WP Remote WordPress Plugin WordPress plugin before 6.65 do not prevent unauthenticated users from obtaining data derived from the secret that binds a site to its remote...

GO-2026-6278 Gorilla WebSocket Uses Cryptographically Weak PRNG for WebSocket Mask Key in github.com/gorilla/websocket

Gorilla WebSocket Uses Cryptographically Weak PRNG for WebSocket Mask Key in github.com/gorilla/websocket...

sslWeakness

sslWeakness Beispielskript, das einen schwachen PRNG demonstriert, CVE-2008-0166...

GHSA-W67G-5RQW-F597 Gorilla WebSocket Uses Cryptographically Weak PRNG for WebSocket Mask Key

gorilla/websocket used math/rand cryptographically weak pseudo-random number generator to generate WebSocket frame mask keys prior to commit d67f4185. WebSocket masking keys MUST be unpredictable to prevent frame content injection attacks. math/rand produces deterministic output when seeded with ...

CVE-2026-74874 openssl_encrypt before 1.4.0 Weak PRNG Steganography Pixel Selection

opensslencrypt versions before 1.4.0 use Python's non-cryptographic random module for steganographic pixel selection in the generatepseudorandomsequence function. Attackers who know the password can recover the Mersenne Twister state from approximately 624 outputs and predict pixel locations...

CVE-2026-74874

openssl_encrypt versions before 1.4.0 use Python's non-cryptographic random module (Mersenne Twister) for steganographic pixel selection in the generate_pseudorandom_sequence() function (openssl_encrypt/plugins/steganography/core/utils.py, lines 89–91). The Mersenne Twister state is recoverable f...

CVE-2026-74874 openssl_encrypt before 1.4.0 Weak PRNG Steganography Pixel Selection

opensslencrypt versions before 1.4.0 use Python's non-cryptographic random module for steganographic pixel selection in the generatepseudorandomsequence function. Attackers who know the password can recover the Mersenne Twister state from approximately 624 outputs and predict pixel locations...

CVE-2026-73567

sm-crypto provides JavaScript implementations of the Chinese cryptographic algorithms SM2, SM3, and SM4. Prior to 0.5.0, the default no-argument sm2.generateKeyPairHex path in Node.js uses the module-wide SecureRandom instance in src/sm2/utils.js, supplied by [email protected], which seeds an ARC4 strea...

CVE-2026-73576

CVE-2026-73576 affects Zimbra Collaboration (ZCS) before 10.1.17 via the OnlyOffice integration. The zimbraDocumentEditingJwtSecret is generated with an insecure RNG, yielding insufficient entropy. This may allow offline brute-forcing to recover the JWT signing secret, enabling JWT forgery and po...

PT-2026-71715

sm-crypto provides JavaScript implementations of the Chinese cryptographic algorithms SM2, SM3, and SM4. Prior to 0.5.0, the default no-argument sm2.generateKeyPairHex path in Node.js uses the module-wide SecureRandom instance in src/sm2/utils.js, supplied by [email protected], which seeds an ARC4 strea...

CVE-2026-18611

A flaw was found in the Data Science Pipelines Operator. This vulnerability allows an unauthenticated attacker to derive sensitive credentials, such as MariaDB root/user passwords and MinIO access/secret keys, if they can access the MinIO Route or MariaDB Service. The flaw occurs because the...

CVE-2026-18611 Data-science-pipelines-operator: dspo: cryptographically weak secret generation (math/rand) for db and s3 credentials

A flaw was found in the Data Science Pipelines Operator. This vulnerability allows an unauthenticated attacker to derive sensitive credentials, such as MariaDB root/user passwords and MinIO access/secret keys, if they can access the MinIO Route or MariaDB Service. The flaw occurs because the...

CVE-2026-18611

A flaw was found in the Data Science Pipelines Operator. This vulnerability allows an unauthenticated attacker to derive sensitive credentials, such as MariaDB root/user passwords and MinIO access/secret keys, if they can access the MinIO Route or MariaDB Service. The flaw occurs because the...

CVE-2026-18611

The CVE-2026-18611 entry affects the Data Science Pipelines Operator. The root cause is the use of a cryptographically weak pseudo-random number generator to generate credentials (MariaDB root/user passwords and MinIO access/secret keys). An unauthenticated attacker who can access the MinIO Route...

CVE-2026-18611 Data-science-pipelines-operator: dspo: cryptographically weak secret generation (math/rand) for db and s3 credentials

A flaw was found in the Data Science Pipelines Operator. This vulnerability allows an unauthenticated attacker to derive sensitive credentials, such as MariaDB root/user passwords and MinIO access/secret keys, if they can access the MinIO Route or MariaDB Service. The flaw occurs because the...