CVE-2026-9323

The CVE-2026-9323 issue affects the urwid web display backend (urwid/display/web.py), where web session IDs (urwid_id) are created by concatenating two random.randrange(10**9) calls that rely on Python’s Mersenne Twister PRNG. This is not cryptographically secure. An observer collecting ~334 sess...

CVE-2026-9323 Insecure PRNG and Information Exposure in urwid Web Display Backend

The urwid web display backend urwid/display/web.py generates web session identifiers urwidid in Screen.start by concatenating two random.randrange109 calls that use Python's Mersenne Twister PRNG, which is not cryptographically secure. Each call consumes approximately 30 bits of PRNG state, and t...

EUVD-2023-31527

Malicious code in bioql PyPI...

CVE-2023-27791

An issue found in IXP Data Easy Install 6.6.148840 allows a remote attacker to escalate privileges via insecure PRNG...

Design/Logic Flaw

An issue found in IXP Data Easy Install 6.6.148840 allows a remote attacker to escalate privileges via insecure PRNG...

CVE-2023-27791

CVE-2023-27791 affects IXP Data Easy Install v6.6.148840. The issue is a root-cause in the product’s PRNG that enables a remote attacker to escalate privileges. Connected sources confirm the vulnerability and its impact as privilege escalation; no explicit exploit details are provided, and there ...

CVE-2023-27791

An issue found in IXP Data Easy Install 6.6.148840 allows a remote attacker to escalate privileges via insecure PRNG...

CVE-2023-27791

An issue found in IXP Data Easy Install 6.6.148840 allows a remote attacker to escalate privileges via insecure PRNG...

Insecure PRNG use in random_password_generator

The randompasswordgenerator aka RandomPasswordGenerator gem through 1.0.0 for Ruby uses Kernelrand to generate passwords, which, due to its cyclic nature, can facilitate password prediction...

HashiCorp Terraform Amazon Web Services (AWS) uses an insecure PRNG

aws/resourceawsiamuserloginprofile.go in the HashiCorp Terraform Amazon Web Services AWS provider through v1.12.0 has an inappropriate PRNG algorithm and seeding, which makes it easier for remote attackers to obtain access by leveraging an IAM account that was provisioned with a weak password...

CVE-2021-37553

In JetBrains YouTrack before 2021.2.16363, an insecure PRNG was used...

CVE-2021-37553

In JetBrains YouTrack before 2021.2.16363, an insecure PRNG was used...

CVE-2021-37553

The CVE-2021-37553 affects JetBrains YouTrack (before version 2021.2.16363). The underlying issue is the use of an insecure PRNG in YouTrack’s security features, as documented across multiple sources (Red Hat, NVD, CNVD) and JetBrains’ Q2-2021 Security Bulletin, which notes the flaw and that it w...

JetBrains Security Bulletin Q2 2021

JetBrains News Security JetBrains Security Bulletin Q2 2021 Robert Demmer In the second quarter of 2021, we resolved a number of security issues in our products. Here’s a summary report that contains a description of each issue and the version in which it was resolved. Product | Description |...