1777 matches found
challenge_repo
English · Türkçe The claim We built a random number generator that takes RF noise , runs it through a proprietary neural conditioning stage , and post-processes the result with SHA-3 / SHAKE-256. We claim the output is indistinguishable from an ideal random source — that no statistical or learned...
keypairvuln
keypair vulnerable keys CVE-2021-41117 Keys generated with versions of the keypair javascript library vulnerable to CVE-2021-41117. Due to bugs in the random number generator this library will generate certain keys with higher likelyhood. The likelyhood of generating one of the keys in this repo...
You-re-Doing-IoT-RNG
You're Doing IoT RNG This repository contains our results and also the device code used to generate the random numbers across several devices. For a more complete explanation of the vulnerabilities and issues, check out our DEF CON 21 talk here: https://www.youtube.com/watch?v=Zuqw0-jZh9Y Or if y...
php-mt_rand
This repository does not have a README...
dual-ec-drbg
DualECDRBG Backdoor: Educational Proof-of-Concept For Security Professionals | Educational Purposes Only ⚠️ Disclaimer This repository contains an educational demonstration of the DualECDRBG cryptographic backdoor CVE-2014-8610, a well-documented vulnerability disclosed following the Snowden...
EUVD-2025-211286
Incorrect usage of seeds in pseudo-random number generator in the Secure Encrypted Virtualization SEV firmware could allow a malicious hypervisor or migration agent to import a forged guest context potentially resulting in loss of confidentiality for derived guest keys...
CVE-2025-29941
Incorrect usage of seeds in pseudo-random number generator in the Secure Encrypted Virtualization SEV firmware could allow a malicious hypervisor or migration agent to import a forged guest context potentially resulting in loss of confidentiality for derived guest keys...
CVE-2025-29941
Incorrect usage of seeds in pseudo-random number generator in the Secure Encrypted Virtualization SEV firmware could allow a malicious hypervisor or migration agent to import a forged guest context potentially resulting in loss of confidentiality for derived guest keys...
CVE-2025-29941
The AMD Secure Encrypted Virtualization (SEV) firmware is affected by a vulnerability where incorrect usage of seeds in the pseudo-random number generator (PRNG) occurs. This flaw could enable a malicious hypervisor or migration agent to import a forged guest context. The practical consequence of...
CVE-2026-111259
The embedded server generates HTTP session identifiers with a non-cryptographic random number generator by default. A remote attacker who observes a session identifier can predict the identifiers issued to other users and hijack their sessions, if the application relies on HTTP sessions for...
CVE-2026-111259
The Apache TomEE embedded server is vulnerable to session hijacking because it uses a non-cryptographic random number generator by default to create HTTP session identifiers. A remote attacker can observe a session identifier to predict those issued to other users, potentially compromising accoun...
EUVD-2026-121222
The embedded server generates HTTP session identifiers with a non-cryptographic random number generator by default. A remote attacker who observes a session identifier can predict the identifiers issued to other users and hijack their sessions, if the application relies on HTTP sessions for...
CVE-2026-111259 Apache TomEE: Predictable HTTP session identifiers in embedded server
The embedded server generates HTTP session identifiers with a non-cryptographic random number generator by default. A remote attacker who observes a session identifier can predict the identifiers issued to other users and hijack their sessions, if the application relies on HTTP sessions for...
EUVD-2026-121221
The Jakarta Security OpenID Connect authentication mechanism generates the state and nonce values with a non-cryptographic random number generator and insufficient entropy. A remote attacker who predicts these values can forge an authentication callback that logs a victim into the attacker's...
CVE-2026-111259: Apache Software Foundation Apache TomEE: The embedded server generates HTTP session identifiers with a non-cryptographic random number generator by default
The embedded server generates HTTP session identifiers with a non-cryptographic random number generator by default. A remote attacker who observes a session identifier can predict the identifiers issued to other users and hijack their sessions, if the application relies on HTTP sessions for...
CVE-2025-29941: AMD: Incorrect usage of seeds in pseudo-random number generator in the Secure Encrypted Virtualization (SEV) firmware could…
Incorrect usage of seeds in pseudo-random number generator in the Secure Encrypted Virtualization SEV firmware could allow a malicious hypervisor or migration agent to import a forged guest context potentially resulting in loss of confidentiality for derived guest keys...
PT-2026-144837
Name of the Vulnerable Software and Affected Versions Secure Encrypted Virtualization SEV firmware affected versions not specified Description Incorrect usage of seeds in the pseudo-random number generator within the firmware could allow a malicious hypervisor or migration agent to import a forge...
PT-2026-141738
The Jakarta Security OpenID Connect authentication mechanism generates the state and nonce values with a non-cryptographic random number generator and insufficient entropy. A remote attacker who predicts these values can forge an authentication callback that logs a victim into the attacker's...
CVE-2026-111260: Apache Software Foundation Apache TomEE: The Jakarta Security OpenID Connect authentication mechanism generates the state and nonce values with a…
The Jakarta Security OpenID Connect authentication mechanism generates the state and nonce values with a non-cryptographic random number generator and insufficient entropy. A remote attacker who predicts these values can forge an authentication callback that logs a victim into the attacker's...