n0Mac

n0Mac 또 다른 MAC 체인저!!! 이 스크립트는 crontab을 사용하여 시스템 시작 시 네트워크 인터페이스의 MAC 주소를 무작위로 생성된 주소로 변경합니다. 그런 다음 macchanger 명령을 사용하여 MAC 주소 공급업체 목록을 생성하고 무작위로 하나를 선택한 후, 해당 공급업체 접두어와 무작위로 생성된 접미어를 결합하여 새로운 MAC 주소를 만듭니다. 참고: 이 도구는 교육 목적으로만 제작되었습니다. 악의적인 활동이나 기타 불법적인 활동을 위해 사용해서는 안 됩니다. 이 도구를 사용함으로써 귀하는 면책 조항에 명...

SecGen

개발은 http://github.com/cliffe/SecGen/로 이동했습니다. 이 저장소는 더 이상 유지 관리되지 않으며 작동하지 않을 가능성이 높습니다! 보안 시나리오 생성기 SecGen 요약 SecGen은 학생들이 보안 침투 테스트 기술을 배울 수 있도록 취약한 가상 머신을 생성합니다. Metasploitable2 같은 박스는 항상 동일합니다. 이 프로젝트는 Vagrant, Puppet, Ruby를 사용하여 학습 또는 CTF 이벤트 개최에 사용할 수 있는 무작위로 취약한 가상 머신을 생성합니다. 최신 버전은 다음에서 확...

CVE-2026-66372

The affected products use insufficiently random values, which allows web session tokens to be predictable, bounding token entropy to the seed space...

Astra Linux – Vulnerability in PHP 7.3

In PHP versions 8.0. before 8.0.29, 8.1. before 8.1.20, and 8.2. before 8.2.7, when using SOAP HTTP Digest Authentication, the random value generator was not checked for failures. It used a narrower range of values than necessary. In the event of a random value generator failure, it could lead to...

CVE-2026-62647

A vulnerability has been identified in Reyrolle 7SR5 All versions V2.70. A random number generator is used to generate security-relevant values such as session identifiers used for authentication purposes that is not initialized with a True Random Number Generator TRNG, resulting in a predictable...

Important: Red Hat Security Advisory: rest security update

An update for rest is now available for Red Hat Enterprise Linux 10.0 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...

CVE-2026-27490 Combodo iTop: Weak secret generation for inline image

Combodo iTop is a web based IT service management tool. Prior to 3.2.3, inline images that are accessible without being authenticated are protected by a weak 24-bit pseudo-random secret. This issue has been fixed in version 3.2.3...

Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)

Overview org.webjars.npm:crypto-js is a library of crypto standards. Affected versions of this package are vulnerable to Use of Cryptographically Weak Pseudo-Random Number Generator PRNG in the WordArray.random function. An attacker can recover security-sensitive values by enumerating the reduced...

CVE-2026-13082

GD::SecurityImage versions through 1.75 for Perl use rand to generate secrets. The random method creates the challenge text used for the CAPTCHA by sampling characters from an array using Perl's built-in rand function, and generates a by default six-character string. The built-in rand function is...

CVE-2026-46474

The Trog::TOTP Perl module, used for generating time-based one-time passwords and two-factor authentication, is vulnerable in versions prior to 1.006 . The root cause is the use of Perl's built-in rand function to generate secrets, which is predictable and unsuitable for security-sensitive operat...

CVE-2026-5081

A flaw was found in Apache::Session::Generate::ModUniqueId, a Perl module designed to generate session identifiers. This module uses the Apache moduniqueid plugin's UNIQUEID environment variable directly as a session ID. The UNIQUEID is constructed from easily guessable information, such as the...

Crypt::SysRandom::XS 安全漏洞

Crypt::SysRandom::XS is a Perl library developed by LEONT’s individual developers, designed for generating encrypted random numbers. Versions of Crypt::SysRandom::XS prior to 0.010 contained security vulnerabilities. These vulnerabilities stemmed from the XS function randombytes, which did not...

CVE-2025-64429 DuckDB Encryption Crypto implementation is vulnerable

DuckDB is a SQL database management system. DuckDB implemented block-based encryption of DB on the filesystem starting with DuckDB 1.4.0. There are a few issues related to this implementation. The DuckDB can fall back to an insecure random number generator pcg32 to generate cryptographic keys or...

EUVD-2018-0767

Malware in sbrugna...

CVE-2025-40923

A random session id generation flaw has been discovered in Plack-Middleware-Session. By default, session ids are generated by a SHA-1 hash seeded with the built-in rand function, the epoch time, and the PID. The PID will come from a small set of numbers, and the epoch time may be guessed if it is...

CVE-2019-10755

The SAML identifier generated within SAML2Utils.java was found to make use of the apache commons-lang3 RandomStringUtils class which makes them predictable due to RandomStringUtils PRNG's algorithm not being cryptographically strong. This issue only affects the 3.X release of pac4j-saml...

CVE-2023-48082

Nagios XI before 2024R1 was discovered to improperly handle API keys generation randomly-generated, allowing attackers to possibly generate the same set of API keys for all users and utilize them to authenticate...

Weak Random String Generation

org.apache.linkis, linkis-engineplugin-spark is vulnerable to weak random string generation. The vulnerability is due to insecure random string generation via Commons Lang's RandomStringUtils, which allows an attacker to predict the generated token, potentially enabling unauthorized access or...

ZendFramework Information Disclosure and Insufficient Entropy vulnerability

In Zend Framework, ZendCaptchaWord v1 and Zend\Captcha\Word v2 generate a "word" for a CAPTCHA challenge by selecting a sequence of random letters from a character set. Prior to this advisory, the selection was performed using PHP's internal arrayrand function. This function does not generate...

GHSA-2FHR-8R8R-QP56 ZendFramework Information Disclosure and Insufficient Entropy vulnerability

In Zend Framework, ZendCaptchaWord v1 and Zend\Captcha\Word v2 generate a "word" for a CAPTCHA challenge by selecting a sequence of random letters from a character set. Prior to this advisory, the selection was performed using PHP's internal arrayrand function. This function does not generate...