debian-ssh

PRNG prévisible de l'OpenSSL de Debian Liens URL d'origine : http://metasploit.com/users/hdm/tools/debian-openssl/1 Miroir2 Exploit : https://www.exploit-db.com/exploits/5622/ Perl3 https://www.exploit-db.com/exploits/5720/ Python4 https://www.exploit-db.com/exploits/5632/ Ruby12 Outil recommandé...

CVE-2017-3000

CVE-2017-3000 Un exploit complet de CVE-2017-3000 sur le PRNG Constant Blinding de Flash Player Insérez WANG et wang dans le tas de code généré dynamiquement à la fin...

vuke

vuke Outil de recherche pour analyser et reproduire la génération de clés Bitcoin vulnérables. Fonctionnalités Architecture modulaire - sources et transformations enfichables Sources d'entrée multiples Plages numériques tester les seeds faibles Listes de mots analyse de brainwallet Horodatages...

Bluetooth-Attacks-CVE-2025-27840

Cet article traite de la manière dont un attaquant peut introduire une liste cachée de vulnérabilités via des mises à jour de modules, ce qui peut entraîner le compromis des appareils ESP32 et l'obtention d'un accès non autorisé aux clés privées, affectant des milliards d'appareils utilisant ce...

CVE-2024-27632

Détails de la vulnérabilité CVE-2024-27632 Aperçu Dans Savane v3.12 et versions antérieures, le timestamp Unix est utilisé comme germe dans le générateur de nombres pseudo-aléatoires PRNG utilisé pour générer les jetons de protection contre les failles de type Cross-Site Request Forgery CSRF...

CVE-2024-29868

CVE-2024-29868 : Utilisation d'un PRNG cryptographiquement faible dans la génération de jetons de récupération Ce dépôt contient la preuve de concept liée à CVE-2024-29868 qui affecte Apache StreamPipes de la version v0.69.0 à 0.93.0. Description : Vulnérabilité d'utilisation d'un générateur de...

juniper-cve-2015-7755

Juniper CVE-2015-7755 & CVE-2015-7756 Ce dépôt contient des notes, des binaires et des informations connexes issues de l'analyse des vulnérabilités CVE-2015-7755 & CVE-2015-7756 dans Juniper ScreenOS. Pour plus d'informations sur ces problèmes, veuillez consulter les URL ci-dessous :...

Exploit for CVE-2026-104356

CVE-2026-104356 — Predictable deletecode via rand in Pi...

MGASA-2026-0466 Updated python-urwid & python-wcwidth packages fixes a security vulnerability

Insecure PRNG and Information Exposure in urwid Web Display Backend...

Updated python-urwid & python-wcwidth packages fixes a security vulnerability

Insecure PRNG and Information Exposure in urwid Web Display Backend...

CVE-2026-104356 PictShare < 3.7.1 Predictable Delete Code via rand()

PictShare before version 3.7.1 contains a weak randomness vulnerability where the getRandomString function uses the non-cryptographic rand PRNG to generate the deletecode authorization token in src/inc/core.php. Attackers can predict or infer the PRNG state to guess valid deletecode values and...

Rocky Linux 9 [CIQ] Security Update: bind9.18 / bind9.18-chroot / bind9.18-debuginfo / etc Multiple Vulnerabilities (crlsa-2025_21111)

The Rocky Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202521111 advisory. bind: Cache poisoning attacks with unsolicited RRs CVE-2025-40778 bind: Cache poisoning due to weak PRNG CVE-2025-40780 bind: Resource exhaustion via...

Rocky Linux 9 [CIQ] Security Update: bind / bind-chroot / bind-debuginfo / bind-debugsource / bind-devel / etc Multiple Vulnerabilities (crlsa-2025_21110)

The Rocky Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202521110 advisory. bind: Cache poisoning attacks with unsolicited RRs CVE-2025-40778 bind: Cache poisoning due to weak PRNG CVE-2025-40780 Tenable has extracted the precedin...

Rocky Linux 8 [CIQ] Security Update: bind9.16 / bind9.16-chroot / bind9.16-debuginfo / etc Multiple Vulnerabilities (crlsa-2025_19793)

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202519793 advisory. bind: Cache poisoning attacks with unsolicited RRs CVE-2025-40778 bind: Cache poisoning due to weak PRNG CVE-2025-40780 Tenable has extracted the precedin...

sslWeakness

sslWeakness Exemple de script démontrant un PRNG faible, CVE-2008-0166...

weakrng-sweep

weak-rng sweep класс CVE-2026-71851 Исследовательский инструмент: перебирает схемы PRNG x uint32 сиды, выводит BIP39-кошельки, проверяет принадлежность к набору адресов жертвы оборонительное исследование, в стиле illbloom. Схемы: 0-10 illbloom: MT19937/glibc/Java/LCG/xorshift, 11-13 glibc-31 LCG,...

CVE-2026-61500

CVE-2026-61500: Rejetto HFS 세션 위조를 통한 RCE CVE-2026-61500은 Rejetto HFS 3.0.0부터 3.2.0까지의 인증되지 않은 세션 위조 취약점입니다. HFS는 Koa 세션 쿠키 서명 키를 JavaScript Math.random으로 생성했고, 인증되지 않은 SRP 로그인 핸드셰이크에서 동일한 V8 PRNG의 출력을 노출했습니다. 공격자는 PRNG 상태를 재구성하고, 서명 키를 복구하고, 관리자 세션을 위조하고, 문서화된 servercode 구성 기능을 사용하여 서버 측...

CVE-2026-94456

Postiz generates security-sensitive credentials using Math.random instead of a cryptographically secure source. The same helper is used for OAuth access tokens, authorization codes, client secrets, organization API keys, and PKCE verifiers, meaning these credentials depend entirely on V8’s...

CVE-2026-94456 Unauthenticated recovery of the Math.random() state behind OAuth tokens, authorization codes, client secrets and organization API keys

Postiz generates security-sensitive credentials using Math.random instead of a cryptographically secure source. The same helper is used for OAuth access tokens, authorization codes, client secrets, organization API keys, and PKCE verifiers, meaning these credentials depend entirely on V8’s...

CVE-2026-94456 Unauthenticated recovery of the Math.random() state behind OAuth tokens, authorization codes, client secrets and organization API keys

Postiz generates security-sensitive credentials using Math.random instead of a cryptographically secure source. The same helper is used for OAuth access tokens, authorization codes, client secrets, organization API keys, and PKCE verifiers, meaning these credentials depend entirely on V8’s...