4207 matches found
CVE-2008-0166-BTC-satoshi-mining-wallets
GhostRNG — 漏洞分析：Bitcoin 2009-2012 中的 OpenSSL 0.9.8c CVE-2008-0166 作者： 基于 bitcoin-code-r252 0.1.5 / 0.2.0 / 0.3.24 以及 原始 make-OpenSSL-0-9-8c-vulnerable-again.diff THC 的分析 日期： 2026-09-10 1. 引言 Bitcoin 0.1.5（2009 年 1 月）仅在 Windows 上运行，使用 OpenSSL 0.9.8c 进行 EC 密钥生成（ECKEYgeneratekey）。2008 年，...
DRUPAL-CONTRIB-2026-144
This module allows you to configure your Drupal site as a SAML 2.0 Service Provider so that users can authenticate through an external identity provider. The module uses cryptographic constructions that do not align with current security best practices. The module performs certain signature...
Exploit for CVE-2026-73320
CVE-2026-73320 XenForo before 2.3.13 exposes pending rich-lin...
CVE-2026-73320
XenForo before 2.3.13 contains an unauthenticated information disclosure vulnerability that allows unauthenticated attackers to retrieve private unfurl records by supplying predictable auto-increment primary key IDs to the unfurl endpoint. Attackers can enumerate or predict result IDs and query t...
EUVD-2026-72757
XenForo before 2.3.13 contains an unauthenticated information disclosure vulnerability that allows unauthenticated attackers to retrieve private unfurl records by supplying predictable auto-increment primary key IDs to the unfurl endpoint. Attackers can enumerate or predict result IDs and query t...
CVE-2026-62647
A vulnerability has been identified in Reyrolle 7SR5 All versions V2.70. A random number generator is used to generate security-relevant values such as session identifiers used for authentication purposes that is not initialized with a True Random Number Generator TRNG, resulting in a predictable...
CVE-2026-62647
A vulnerability has been identified in Reyrolle 7SR5 All versions V2.70. A random number generator is used to generate security-relevant values such as session identifiers used for authentication purposes that is not initialized with a True Random Number Generator TRNG, resulting in a predictable...
EUVD-2026-72662
A vulnerability has been identified in Reyrolle 7SR5 All versions V2.70. A random number generator is used to generate security-relevant values such as session identifiers used for authentication purposes that is not initialized with a True Random Number Generator TRNG, resulting in a predictable...
CVE-2026-62647
A vulnerability has been identified in Reyrolle 7SR5 All versions V2.70. A random number generator is used to generate security-relevant values such as session identifiers used for authentication purposes that is not initialized with a True Random Number Generator TRNG, resulting in a predictable...
CVE-2026-62646
CVE-2026-62646 affects Reyrolle 7SR5 (all versions prior to V2.70 ), a Siemens industrial communication gateway. The vulnerability resides in the session identifier generation mechanism: an algorithm with insufficient randomness produces low-entropy tokens that can be predicted or brute-forced. A...
PT-2026-87113
The JWT signing secret in yfexam-exam v2.0 is derived from the username and the current month instead of a random server-side key, making the secret key easily obtainable via a bruteforce attack...
CVE-2026-62647: Improper Input Validation
A vulnerability has been identified in Reyrolle 7SR5 All versions V2.70. A random number generator is used to generate security-relevant values such as session identifiers used for authentication purposes that is not initialized with a True Random Number Generator TRNG, resulting in a predictable...
PT-2026-87006
Name of the Vulnerable Software and Affected Versions Reyrolle 7SR5 versions prior to V2.70 Description An issue exists where a random number generator used for security-relevant values, such as session identifiers for authentication, is not initialized with a True Random Number Generator TRNG...
CVE-2026-73320: Authorization Bypass Through User-Controlled Key
XenForo before 2.3.13 contains an unauthenticated information disclosure vulnerability that allows unauthenticated attackers to retrieve private unfurl records by supplying predictable auto-increment primary key IDs to the unfurl endpoint. Attackers can enumerate or predict result IDs and query t...
CVE-2026-79575
The JWT signing secret in yfexam-exam v2.0 is derived from the username and the current month instead of a random server-side key, making the secret key easily obtainable via a bruteforce attack...
CVE-2026-79575
The JWT signing secret in yfexam-exam v2.0 is derived from the username and the current month instead of a random server-side key, making the secret key easily obtainable via a bruteforce attack...
SUSE CVE-2026-6046
Mattermost versions 11.6.x = 11.6.1, 11.5.x = 11.5.4, 10.11.x = 10.11.15, 10.11.x = 10.11.16 fail to validate that a username returned during bot registration belongs to a bot account, which allows an unprivileged attacker to intercept private messages sent by plugins via direct message channels ...
Security Bulletin: Vulnerability in Netty's DnsResolveContext affects IBM watsonx Assistant Cartridge and IBM watsonx Orchestrate with watsonx Assistant Cartridge.
Summary Potential vulnerability in Netty's DnsResolveContext has been identified that affects IBM watsonx Assistant Cartridge and IBM watsonx Orchestrate with watsonx Assistant Cartridge - Assistant Builder Component. . The vulnerability have been addressed. Refer to details for additional...