Lucene search
K

9 matches found

Snyk
Snyk
added 2026/03/31 10:31 p.m.1 views

Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)

Overview Affected versions of this package are vulnerable to Use of Cryptographically Weak Pseudo-Random Number Generator PRNG seeded with predictable values in the secretkey and hashidsalt. An attacker can gain unauthorized access to any user account, including administrators, by brute-forcing t...

9.8CVSS5.8AI score0.00022EPSS
Exploits0References2
Snyk
Snyk
added 2026/03/31 10:31 p.m.0 views

Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)

Overview Affected versions of this package are vulnerable to Use of Cryptographically Weak Pseudo-Random Number Generator PRNG seeded with predictable values in the secretkey and hashidsalt. An attacker can gain unauthorized access to any user account, including administrators, by brute-forcing t...

9.8CVSS5.8AI score0.00022EPSS
Exploits0References2
NVD
NVD
added 2025/12/19 4:15 p.m.2 views

CVE-2025-34433

AVideo versions 14.3.1 prior to 20.1 contain an unauthenticated remote code execution vulnerability caused by predictable generation of an installation salt using PHP uniqid. The installation timestamp is exposed via a public endpoint, and a derived hash identifier is accessible through...

9.3CVSS0.41084EPSS
Exploits2References4
CVE
CVE
added 2025/12/19 3:37 p.m.7 views

CVE-2025-34433

AVideo 14.3.1–20.0.x isaffected by an unauthenticated RCE due to insecure salt generation: installation salt is created with PHP uniqid(), and the installation timestamp plus a derived hashId are exposed publicly, enabling offline brute-forcing of the remaining entropy to recover the salt. Attack...

9.3CVSS8.1AI score0.41084EPSS
Exploits2References4
Circl
Circl
added 2024/12/18 8:40 a.m.0 views

CVE-2024-47397

creationtimestamp| type| source ---|---|--- 2024-12-18 08:40:37+00:00| seen| https://t.me/cvedetector/13174...

7.5CVSS7.3AI score0.00035EPSS
Exploits0References1
Circl
Circl
added 2024/01/24 6:16 p.m.1 views

RHSA-2024:0416

creationtimestamp| type| source ---|---|--- 2024-01-24 18:16:30+00:00| seen| https://t.me/ctinow/172967...

4.8AI score
Exploits0References1
Code423n4
Code423n4
added 2022/09/19 12:0 a.m.7 views

Front-running of accept call

Lines of code Vulnerability details Description There is accept and veto functions in the PartyGovernance contract. The functions accepts the proposalId accept function also accepts snapIndex, which does not contain any information about the proposal itself. As a result, transactions of users can...

6.8AI score
Exploits0
Kitploit
Kitploit
added 2019/07/03 10:22 p.m.301 views

Hash-Identifier - Software To Identify The Different Types Of Hashes Used To Encrypt Data And Especially Passwords

Software to identify the different types of hashes used to encrypt data and especially passwords. Encryption formats supported: ADLER-32 CRC-32 CRC-32B CRC-16 CRC-16-CCITT DESUnix FCS-16 GHash-32-3 GHash-32-5 GOST R 34.11-94 Haval-160 Haval-192 110080 ,Haval-224 114080 ,Haval-256 Lineage II C4...

7.4AI score
Exploits0References1
Kitploit
Kitploit
added 2015/05/05 10:30 p.m.24 views

Password Cracking Suite

How To Use It: git clone https://github.com/TecnoHack/Password-Cracking-Suite.git chmod +x csuit.py ./csuit.py Dics Path: In this path, you can add any dictionary you would like to use. Tools Path: In this path, the script will install 3rd party tools. You can download some here:...

7.2AI score
Exploits0References3
Rows per page
Query Builder