You-re-Doing-IoT-RNG

IoT RNG을 잘못하고 있습니다 이 저장소에는 여러 기기에서 난수를 생성하는 데 사용된 기기 코드와 당사의 결과물이 포함되어 있습니다. 취약점과 문제에 대한 보다 완전한 설명은 여기에서 DEF CON 21 발표를 확인하세요: https://www.youtube.com/watch?v=Zuqw0-jZh9Y 또는 원하신다면, 여기에서 이 문제에 대한 모든 내용을 읽을 수 있습니다: https://labs.bishopfox.com/tech-blog/youre-doing-iot-rng 자세한 내용은 개별 기기 폴더의 README를...

keypairvuln

уязвимые ключи keypair CVE-2021-41117 Ключи, сгенерированные с помощью версий библиотеки keypair javascript уязвимых к CVE-2021-41117. Из-за ошибок в генераторе случайных чисел эта библиотека будет генерировать определенные ключи с более высокой вероятностью. Вероятность генерации одного из ключе...

dual-ec-drbg

DualECDRBG 백도어: 교육용 개념 증명 보안 전문가용 | 교육 목적으로만 사용 ⚠️ 면책 조항 이 저장소에는 DualECDRBG 암호화 백도어CVE-2014-8610의 교육용 데모가 포함되어 있습니다. 이는 스노든 폭로 이후 공개된 잘 문서화된 취약점입니다. 이는 교육 목적으로만 제공됩니다: 10년 이상 된 비활성화된 취약점을 시연합니다. 공개적으로 알려진 매개변수와 수학적 관계를 사용합니다. 보안 교육 및 인식 제고를 위한 것입니다. 책임 있는 공개 관행을 따릅니다. 📚 배울 내용 1. 역사적 맥락 : NSA가 어떻게...

challenge_repo

🎲 Задача энтропии 🇬🇧 Читать на английском | 🇹🇷 Читать на турецком Введение Мы разработали генератор случайных чисел нового поколения, который обрабатывает радиочастотный РЧ шум через собственную архитектуру нейронной сети с последующей пост-обработкой SHA-3. Мы утверждаем, что этот источник...

DEBIAN-CVE-2026-80922

In the Linux kernel, the following vulnerability has been resolved: crypto: qcom-rng - Allow zero as a random number Zero is a valid random number and needs to be allowed. Otherwise the output is distinguishable from random...

EUVD-2026-75099

In the Linux kernel, the following vulnerability has been resolved: crypto: qcom-rng - Allow zero as a random number Zero is a valid random number and needs to be allowed. Otherwise the output is distinguishable from random...

CVE-2026-80922 crypto: qcom-rng - Allow zero as a random number

In the Linux kernel, the following vulnerability has been resolved: crypto: qcom-rng - Allow zero as a random number Zero is a valid random number and needs to be allowed. Otherwise the output is distinguishable from random...

Linux Distros Unpatched Vulnerability : CVE-2026-80922

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - crypto: qcom-rng - Allow zero as a random number Zero is a valid random number and needs to be allowed. Otherwise the output is distinguishable from random...

php-mt_rand

이 저장소에는 README가 없습니다...

CVE-2026-62647

Reyrolle 7SR5 (all versions prior to V2.70 ) contains a weak random number generator that is not seeded by a True Random Number Generator (TRNG), producing a predictable sequence of security-relevant values such as session identifiers. An unauthenticated remote attacker could predict these values...

EUVD-2026-71501

In the Linux kernel, the following vulnerability has been resolved: crypto: xilinx-trng - Remove cryptorng interface Implementing the cryptorng interface has no purpose, as it isn't used in practice. It's being removed from other drivers too. Just remove it. This leaves hwrng, which is actually...

CVE-2026-80835

In the Linux kernel, the following vulnerability has been resolved: crypto: qcom-rng - Remove cryptorng interface qcom-rng.c exposes the same hardware through two completely separate interfaces, cryptorng and hwrng. However, the implementation of this is buggy because it permits generation...

Astra Linux – Vulnerability found in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: Netfilter: Use getrandomu32 instead of prandom. This issue may occur when updating the per-cpu rndstate from the user context, i.e., at the localout path. BUG: Using smpprocessorid in preemptible 00000000 code: nginx/2725 Caller:...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerabilities have been resolved: hwrng: cavium – fixed the NULL but dereferenced coccicheck error. Fixed the following coccicheck warnings: ./drivers/char/hwrandom/cavium-rng-vf.c:182:17-20: ERROR: pdev is NULL but was dereferenced...

Astra Linux – Vulnerability in pgagent

When batch jobs are executed by pgAgent, a script is created in a temporary directory and then executed. In versions of pgAgent prior to 4.2.3, an insufficiently seeded random number generator was used when generating the directory name, which allows a local attacker to pre-create the directory a...

CVE-2026-74438 crypto: sun4i-ss - Remove insecure and unused rng_alg

In the Linux kernel, the following vulnerability has been resolved: crypto: sun4i-ss - Remove insecure and unused rngalg Remove sun4issrng, as it is insecure and unused: - It has multiple vulnerabilities. sun4issprngseed is missing locking and has a buffer overflow. sun4issprnggenerate fails to...

openSUSE 16 Security Update : librest0_7 (openSUSE-SU-2026:21563-1)

The remote openSUSE 16 host has packages installed that are affected by a vulnerability as referenced in the openSUSE- SU-2026:21563-1 advisory. Changes in librest07: - CVE-2026-16615: Fix weak random number generation bsc1272399, glgoGNOME/librest!44. Tenable has extracted the preceding...

nanoid: nanoid: Predictable ID generation due to integer overflow

A flaw was found in nanoid, a JavaScript library for generating unique string IDs. A remote attacker could exploit an integer overflow vulnerability by providing a specific input to the nanoidsize function. This issue causes the internal random number generator to become predictable, leading to t...

OPENSUSE-SU-2026:21563-1 Security update for librest0_7

This update for librest07 fixes the following issues: Changes in librest07: - CVE-2026-16615: Fix weak random number generation bsc1272399, glgoGNOME/librest!44...

CVE-2026-8470

IBM Langflow OSS 1.0.0 through 1.10.3, 1.0.0 through 1.10.3, 1.0.0 through 1.10.3, and 1.0.0 through 1.10.3 use Python's non-cryptographic random module for generating Fernet encryption keys from user secrets under 32 characters. The deterministic Mersenne Twister PRNG produces identical keys for...