CVE-2021-3689

yii2 is vulnerable to Use of Predictable Algorithm in Random Number Generator...

Code injection

yii2 is vulnerable to Use of Predictable Algorithm in Random Number Generator...

CVE-2021-3689

yii2 is vulnerable to Use of Predictable Algorithm in Random Number Generator...

CVE-2021-3689

CVE-2021-3689 affects yiisoft/yii2 and is caused by use of a Predictable Algorithm in the Random Number Generator (RNG). The entry consolidates multiple sources indicating insecure RNG usage (notably mt_rand-based implementation in Yii2 components such as BaseMailer.php) that leads to potential i...

CVE-2021-3689 Use of Predictable Algorithm in Random Number Generator in yiisoft/yii2

yii2 is vulnerable to Use of Predictable Algorithm in Random Number Generator...

CVE-2021-3692: Use of Predictable Algorithm in Random Number Generator

yii2 is vulnerable to Use of Predictable Algorithm in Random Number Generator...

CVE-2021-3689: Use of Predictable Algorithm in Random Number Generator

yii2 is vulnerable to Use of Predictable Algorithm in Random Number Generator...

Twitter Algorithmic Bias: Underrepresentation Bias through Twitter's Cropping Algorithm #2: Favoring Animals over Black People

Bounty Hunter Name: CyberQueenMeg About You: Megan, also known as CyberQueenMeg, is a passionate rising cybersecurity professional who is interested in programming, cybersecurity, and web development. Megan is a high school senior in a rigorous computer science program at her high school where sh...

Twitter Algorithmic Bias: Underrepresentation Bias through Twitter's Cropping Algorithm

Bounty Hunter Name: CyberQueenMeg About You: Megan, also known as CyberQueenMeg, is a passionate rising cybersecurity professional who is interested in programming, cybersecurity, and web development. Megan is a high school senior in a rigorous computer science program at her high school where sh...

CVE-2021-37625

Skytable is an open source NoSQL database. In versions prior to 0.6.4 an incorrect check of return value of the accept function in the run-loop for a TCP socket/TLS socket/TCP+TLS multi-socket causes an early exit from the run loop that should continue infinitely unless terminated by a local user...

Twitter Algorithmic Bias: Economic Harm through Twitter's Cropping Algorithm

Bounty Hunter Name: CyberQueenMeg About You: Megan, also known as CyberQueenMeg, is a passionate rising cybersecurity professional who is interested in programming, cybersecurity, and web development. Megan is a high school senior in a rigorous computer science program at her high school where sh...

JetBrains YouTrack encryption issue vulnerabilities

JetBrains YouTrack is a browser-based bug tracking and project management software from JetBrains Czech Republic. JetBrains YouTrack is vulnerable to an encryption issue prior to version 2021.2.16363, which stems from the software's use of the SHA-256 algorithm for password hashing. An attacker...

CVE-2021-37625: Unchecked Return Value

Skytable is an open source NoSQL database. In versions prior to 0.6.4 an incorrect check of return value of the accept function in the run-loop for a TCP socket/TLS socket/TCP+TLS multi-socket causes an early exit from the run loop that should continue infinitely unless terminated by a local user...

Uchihash - A Small Utility To Deal With Malware Embedded Hashes

Uchihash is a small utility that can save malware analysts the time of dealing with embedded hash values used for various things such as: Dynamically importing APIs especially in shellcode Checking running process used by analysts Anti-Analysis Checking VM or Antivirus artifacts Anti-Analysis...

Use of a Broken or Risky Cryptographic Algorithm in hdinnovations/unit3d-community-edition

✍️ Description The referenced code block uses PHP's native md5 and uniqid functions to generate the attributes named passkey and rsskey - both of which are to be considered cryptographically insecure due to their usage of uniqid which is not to be considered cryptographically secure. 🕵️‍♂️ Proof of...

Security Bulletin: A vulnerability is identified in IBM Cloud Pak for Applications v4.3 which uses an inadequate encryption algorithm.

Summary A vulnerability is identified in IBM Cloud Pak for Applications v4.3 which uses an inadequate encryption algorithm. Vulnerability Details CVEID: CVE-2021-20369 DESCRIPTION: IBM Cloud Pak for Applications uses weaker than expected cryptographic algorithms that could allow an attacker to...

Updated filezilla packages fix security vulnerability

filezilla embeds a PuTTY client that was vulnerable: PuTTY 0.68 through 0.73 has an Observable Discrepancy leading to an information leak in the algorithm negotiation. This allows man-in-the-middle attackers to target initial connection attempts where no host key for the server has been cached by...

CVE-2021-37588: Use of a Broken or Risky Cryptographic Algorithm

In Charm 0.43, any two users can collude to achieve the ability to decrypt YCT14 data...

CVE-2021-37587: Use of a Broken or Risky Cryptographic Algorithm

In Charm 0.43, any single user can decrypt DAC-MACS or MA-ABE-YJ14 data...

CVE-2021-20337: Use of a Broken or Risky Cryptographic Algorithm

IBM QRadar SIEM 7.3.0 to 7.3.3 Patch 8 and 7.4.0 to 7.4.3 GA uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 194448...