1669 matches found
You-re-Doing-IoT-RNG
你的IoT RNG做法不对 本仓库包含我们的研究结果，以及用于在多个设备上生成随机数的设备代码。如需更完整地了解相关漏洞和问题，请观看我们在DEF CON 21上的演讲： https://www.youtube.com/watch?v=Zuqw0-jZh9Y 或者，如果你更喜欢阅读文字，可以在此处了解该问题的全部细节： https://labs.bishopfox.com/tech-blog/youre-doing-iot-rng 点击进入各个设备文件夹的README以了解详情。...
keypairvuln
keypair 脆弱なキー CVE-2021-41117 CVE-2021-41117 の影響を受ける keypair JavaScript ライブラリのバージョンで 生成されたキー。 乱数生成器のバグにより、このライブラリは特定のキーをより高い確率で生成します。 脆弱なバージョンでこのリポジトリ内のいずれかのキーが生成される確率は 約 70% です。 t1 t1 には最も一般的な 256 個のキーが含まれています。これらのキーのいずれかが 生成される確率は約 33% です。 t2 t2 には、t1 のキーほど一般的ではありませんが、それでも比較的高頻度で出現する 71424...
dual-ec-drbg
DualECDRBG バックドア: 教育用 Proof-of-Concept セキュリティ専門家向け | 教育目的のみ ⚠️ 免責事項 このリポジトリには、DualECDRBG 暗号バックドア CVE-2014-8610 の教育用デモンストレーションが含まれています。これは、スノーデンの暴露後に公開された、十分に文書化された脆弱性です。 これは教育目的のみのものです: 10年以上前の、非推奨の脆弱性を実証 公知のパラメータと数学的関係を使用 セキュリティトレーニングと意識向上を目的とする 責任ある開示慣行に従う 📚 学べること 1. 歴史的背景 :...
challenge_repo
🎲 エントロピーチャレンジ 🇬🇧 英語で読む | 🇹🇷 Türkçe Oku はじめに 私たちは、無線周波数 RF ノイズ を独自のニューラルネットワークアーキテクチャ で処理し、その後SHA-3後処理を施した次世代乱数生成器を開発しました。このソースは理想的なノイズ源と区別がつかない真のランダム性 品質を提供すると主張しています。出力と検証レポートを公開しますが、ソースコードは公開しません 。挑戦は簡単です：間違いを証明してください。 データ サンプルファイル: data/randomsample.bin 17 MB 品質: NIST STS SP 800-22 および NIST SP...
MGASA-2026-0436 Updated rest packages fix a security vulnerability
Weak random number generation in pkce implementation. CVE-2026-16615...
Updated rest packages fix a security vulnerability
Weak random number generation in pkce implementation. CVE-2026-16615...
Astra Linux – Vulnerability in Linux 5.10
In the Linux kernel, the following vulnerabilities have been resolved: hwrng: cavium – fixed the NULL but dereferenced coccicheck error. Fixed the following coccicheck warnings: ./drivers/char/hwrandom/cavium-rng-vf.c:182:17-20: ERROR: pdev is NULL but was dereferenced...
Astra Linux – Vulnerability found in Linux 5.10, Linux 5.15
In the Linux kernel, the following vulnerability has been resolved: Netfilter: Use getrandomu32 instead of prandom. This issue may occur during the update of per-cpu rndstate from the user context, i.e., at the localout path. BUG: Using smpprocessorid in preemptible 00000000 code: nginx/2725...
SUSE CVE-2026-80922
In the Linux kernel, the following vulnerability has been resolved: crypto: qcom-rng - Allow zero as a random number Zero is a valid random number and needs to be allowed. Otherwise the output is distinguishable from random...
CVE-2026-80922
In the Linux kernel, the following vulnerability has been resolved: crypto: qcom-rng - Allow zero as a random number Zero is a valid random number and needs to be allowed. Otherwise the output is distinguishable from random...
DEBIAN-CVE-2026-80922
In the Linux kernel, the following vulnerability has been resolved: crypto: qcom-rng - Allow zero as a random number Zero is a valid random number and needs to be allowed. Otherwise the output is distinguishable from random...
CVE-2026-80922 crypto: qcom-rng - Allow zero as a random number
In the Linux kernel, the following vulnerability has been resolved: crypto: qcom-rng - Allow zero as a random number Zero is a valid random number and needs to be allowed. Otherwise the output is distinguishable from random...
EUVD-2026-75099
In the Linux kernel, the following vulnerability has been resolved: crypto: qcom-rng - Allow zero as a random number Zero is a valid random number and needs to be allowed. Otherwise the output is distinguishable from random...
CVE-2026-80922 crypto: qcom-rng - Allow zero as a random number
In the Linux kernel, the following vulnerability has been resolved: crypto: qcom-rng - Allow zero as a random number Zero is a valid random number and needs to be allowed. Otherwise the output is distinguishable from random...
PT-2026-89092
In the Linux kernel, the following vulnerability has been resolved: crypto: qcom-rng - Allow zero as a random number Zero is a valid random number and needs to be allowed. Otherwise the output is distinguishable from random...
Linux Distros Unpatched Vulnerability : CVE-2026-80922
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - crypto: qcom-rng - Allow zero as a random number Zero is a valid random number and needs to be allowed. Otherwise the output is distinguishable from random...
CVE-2026-62647
Reyrolle 7SR5 (all versions prior to V2.70 ) contains a weak random number generator that is not seeded by a True Random Number Generator (TRNG), producing a predictable sequence of security-relevant values such as session identifiers. An unauthenticated remote attacker could predict these values...
EUVD-2026-71501
In the Linux kernel, the following vulnerability has been resolved: crypto: xilinx-trng - Remove cryptorng interface Implementing the cryptorng interface has no purpose, as it isn't used in practice. It's being removed from other drivers too. Just remove it. This leaves hwrng, which is actually...
CVE-2026-80835
In the Linux kernel, the following vulnerability has been resolved: crypto: qcom-rng - Remove cryptorng interface qcom-rng.c exposes the same hardware through two completely separate interfaces, cryptorng and hwrng. However, the implementation of this is buggy because it permits generation...