CVE-2025-62774

On Mercku M6a devices through 2.1.0, the authentication system uses predictable session tokens based on timestamps...

PT-2025-43017

Name of the Vulnerable Software and Affected Versions Mercku M6a versions through 2.1.0 Description The authentication system on Mercku M6a devices generates predictable session tokens based on timestamps, potentially allowing unauthorized access. The affected devices are those running versions...

EUVD-2017-7105

Malware in sbrugna...

USN-4842-1: ntopng vulnerability

It was discovered that ntopng did not properly seed its random number generator, leading to predictable session tokens. An attacker could use this vulnerability to hijack a user's session...

Design/Logic Flaw

Highly predictable session tokens in the HTTPd server in all current versions = 3.0.0.4.380.7743 of Asus asuswrt allow gaining administrative router access...

PT-2018-5961

Name of the Vulnerable Software and Affected Versions: Asus asuswrt versions prior to 3.0.0.4.380.7743 Description: The issue concerns highly predictable session tokens in the HTTPd server, which can be exploited to gain administrative access to the router. Recommendations: For versions prior to...

CVE-2017-15654: Use of Insufficiently Random Values

Highly predictable session tokens in the HTTPd server in all current versions = 3.0.0.4.380.7743 of Asus asuswrt allow gaining administrative router access...

CVE-2015-0544: Undefined Security Weakness

EMC Secure Remote Services Virtual Edition ESRS VE 3.x before 3.06 does not properly generate random values for session cookies, which makes it easier for remote attackers to hijack sessions by predicting a value...