196 matches found
You-re-Doing-IoT-RNG
IoT RNG을 잘못하고 있습니다 이 저장소에는 여러 기기에서 난수를 생성하는 데 사용된 기기 코드와 당사의 결과물이 포함되어 있습니다. 취약점과 문제에 대한 보다 완전한 설명은 여기에서 DEF CON 21 발표를 확인하세요: https://www.youtube.com/watch?v=Zuqw0-jZh9Y 또는 원하신다면, 여기에서 이 문제에 대한 모든 내용을 읽을 수 있습니다: https://labs.bishopfox.com/tech-blog/youre-doing-iot-rng 자세한 내용은 개별 기기 폴더의 README를...
MGASA-2026-0436 Updated rest packages fix a security vulnerability
Weak random number generation in pkce implementation. CVE-2026-16615...
Updated rest packages fix a security vulnerability
Weak random number generation in pkce implementation. CVE-2026-16615...
SUSE CVE-2026-80922
In the Linux kernel, the following vulnerability has been resolved: crypto: qcom-rng - Allow zero as a random number Zero is a valid random number and needs to be allowed. Otherwise the output is distinguishable from random...
openSUSE 16 Security Update : librest0_7 (openSUSE-SU-2026:21563-1)
The remote openSUSE 16 host has packages installed that are affected by a vulnerability as referenced in the openSUSE- SU-2026:21563-1 advisory. Changes in librest07: - CVE-2026-16615: Fix weak random number generation bsc1272399, glgoGNOME/librest!44. Tenable has extracted the preceding...
OPENSUSE-SU-2026:21563-1 Security update for librest0_7
This update for librest07 fixes the following issues: Changes in librest07: - CVE-2026-16615: Fix weak random number generation bsc1272399, glgoGNOME/librest!44...
RHEL 10 : rest (RHSA-2026:47085)
The remote Redhat Enterprise Linux 10 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:47085 advisory. The rest packages provide a library for access to the RESTful web services. Security Fixes: librest: weak random number generation in PKCE...
CVE-2026-16615 Librest: weak random number generation in pkce implementation
A flaw was found in librest. The PKCE implementation for OAuth authorization uses the GRand function from the GLib API, a cryptographically insecure pseudo-random number generator. Because the generated "code verifier" lacks sufficient cryptographic entropy, a malicious actor can reverse-engineer...
PT-2026-52258
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the memory control group memcg where the get random u32 below function is called during memcg charge draining, which can occur in the Non-Maskable Interrupt NMI contex...
WordPress plugin wpDiscuz 安全漏洞
WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. There wa...
Libgcrypt 1.12.0
Libgcrypt is a general-purpose cryptographic library based on the code from GnuPG. It provides functions for all cryptographic building blocks: symmetric ciphers AES, DES, Blowfish, CAST5, Twofish, and Arcfour, hash algorithms MD4, MD5, RIPE-MD160, SHA-1, and TIGER-192, MACs HMAC for all hash...
CVE-2019-11842
An issue was discovered in Matrix Sydent before 1.0.3 and Synapse before 0.99.3.1. Random number generation is mishandled, which makes it easier for attackers to predict a Sydent authentication token or a Synapse random ID...
Linux kernel 安全漏洞
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a problem with the implementation of the RDSEED instruction, which could lead to a random number generation...
Linux kernel 安全漏洞
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from not ensuring that setent is always present, which could lead to problems with cryptographic random number...
EUVD-2002-1095
Malware in sbrugna...
EUVD-2017-14597
Malware in sbrugna...
EUVD-2018-11132
Malware in sbrugna...
EUVD-2020-30268
Malware in sbrugna...