CVE-2026-25726

CVE-2026-25726 (Cloudreve) : Prior to 4.13.0, Cloudreve uses the weak Go PRNG math/rand seeded with time.Now().UnixNano() to generate critical secrets (secret_key, hash_id_salt) stored in the DB. An attacker can fetch the administrator account creation time via public APIs, brute-force the PRNG s...

CVE-2025-15578

CVE-2025-15578 affects Maypole for Perl versions 2.10–2.13 where session IDs are generated using system time, rand(), and PID, making them potentially predictable. This could enable session-related security risks. The connected documents do not provide a remediation or patch details; refer to May...