You-re-Doing-IoT-RNG

Estás haciendo RNG de IoT Este repositorio contiene nuestros resultados y también el código de los dispositivos utilizado para generar los números aleatorios en varios dispositivos. Para una explicación más completa de las vulnerabilidades y problemas, echa un vistazo a nuestra charla de DEF CON ...

keypairvuln

keypair 漏洞密钥（CVE-2021-41117） 使用受 CVE-2021-41117 影响的 keypair JavaScript 库版本生成的密钥。 由于随机数生成器中的缺陷，该库生成某些密钥的概率更高。使用存在漏洞的版本生成此仓库中某个密钥的概率约为 70%。 t1 t1 包含 256 个最常见的密钥。生成其中之一密钥的概率约为 33%。 t2 t2 包含 71424 个密钥，这些密钥不如 t1 中的密钥常见，但出现频率仍然相对较高。生成其中之一密钥的概率约为 37%。 misc 此集合由 Hanno Böck 为 badkeys 项目创建。 本工作部分由...

php-mt_rand

Este repositorio no tiene un README...

dual-ec-drbg

Backdoor DualECDRBG: Prueba de concepto educativa Para profesionales de la seguridad | Solo con fines educativos ⚠️ Descargo de responsabilidad Este repositorio contiene una demostración educativa de la puerta trasera criptográfica DualECDRBG CVE-2014-8610, una vulnerabilidad bien documentada...

challenge_repo

🎲 熵挑战 🇬🇧 英文阅读 | 🇹🇷 Türkçe Oku 引言 我们开发了一款下一代随机数生成器，通过专有的神经网络架构 处理射频噪声 ，并经过SHA-3后处理。我们声称该源提供真正随机性 质量，与理想噪声源不可区分。 我们公开输出结果和验证报告，但不公开源代码 。挑战很简单：证明我们是错的。 数据 样本文件: data/randomsample.bin 17 MB 质量: 通过NIST STS SP 800-22 和 NIST SP 800-90B 验证。 熵: 0.999 比特/比特。 详细报告见 NISTREPORT.md。 🏆 挑战 我们向任何能成功“破解”此生成器的人提供赏金。...

DEBIAN-CVE-2026-80922

In the Linux kernel, the following vulnerability has been resolved: crypto: qcom-rng - Allow zero as a random number Zero is a valid random number and needs to be allowed. Otherwise the output is distinguishable from random...

EUVD-2026-75099

In the Linux kernel, the following vulnerability has been resolved: crypto: qcom-rng - Allow zero as a random number Zero is a valid random number and needs to be allowed. Otherwise the output is distinguishable from random...

CVE-2026-80922 crypto: qcom-rng - Allow zero as a random number

In the Linux kernel, the following vulnerability has been resolved: crypto: qcom-rng - Allow zero as a random number Zero is a valid random number and needs to be allowed. Otherwise the output is distinguishable from random...

PT-2026-89092

In the Linux kernel, the following vulnerability has been resolved: crypto: qcom-rng - Allow zero as a random number Zero is a valid random number and needs to be allowed. Otherwise the output is distinguishable from random...

Linux Distros Unpatched Vulnerability : CVE-2026-80922

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - crypto: qcom-rng - Allow zero as a random number Zero is a valid random number and needs to be allowed. Otherwise the output is distinguishable from random...

CVE-2026-62647

Reyrolle 7SR5 (all versions prior to V2.70 ) contains a weak random number generator that is not seeded by a True Random Number Generator (TRNG), producing a predictable sequence of security-relevant values such as session identifiers. An unauthenticated remote attacker could predict these values...

EUVD-2026-71501

In the Linux kernel, the following vulnerability has been resolved: crypto: xilinx-trng - Remove cryptorng interface Implementing the cryptorng interface has no purpose, as it isn't used in practice. It's being removed from other drivers too. Just remove it. This leaves hwrng, which is actually...

CVE-2026-80835

In the Linux kernel, the following vulnerability has been resolved: crypto: qcom-rng - Remove cryptorng interface qcom-rng.c exposes the same hardware through two completely separate interfaces, cryptorng and hwrng. However, the implementation of this is buggy because it permits generation...

Astra Linux – Vulnerability found in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: Netfilter: Use getrandomu32 instead of prandom. This issue may occur when updating the per-cpu rndstate from the user context, i.e., at the localout path. BUG: Using smpprocessorid in preemptible 00000000 code: nginx/2725 Caller:...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerabilities have been resolved: hwrng: cavium – fixed the NULL but dereferenced coccicheck error. Fixed the following coccicheck warnings: ./drivers/char/hwrandom/cavium-rng-vf.c:182:17-20: ERROR: pdev is NULL but was dereferenced...

Astra Linux – Vulnerability in pgagent

When batch jobs are executed by pgAgent, a script is created in a temporary directory and then executed. In versions of pgAgent prior to 4.2.3, an insufficiently seeded random number generator was used when generating the directory name, which allows a local attacker to pre-create the directory a...

CVE-2026-74438 crypto: sun4i-ss - Remove insecure and unused rng_alg

In the Linux kernel, the following vulnerability has been resolved: crypto: sun4i-ss - Remove insecure and unused rngalg Remove sun4issrng, as it is insecure and unused: - It has multiple vulnerabilities. sun4issprngseed is missing locking and has a buffer overflow. sun4issprnggenerate fails to...

openSUSE 16 Security Update : librest0_7 (openSUSE-SU-2026:21563-1)

The remote openSUSE 16 host has packages installed that are affected by a vulnerability as referenced in the openSUSE- SU-2026:21563-1 advisory. Changes in librest07: - CVE-2026-16615: Fix weak random number generation bsc1272399, glgoGNOME/librest!44. Tenable has extracted the preceding...

nanoid: nanoid: Predictable ID generation due to integer overflow

A flaw was found in nanoid, a JavaScript library for generating unique string IDs. A remote attacker could exploit an integer overflow vulnerability by providing a specific input to the nanoidsize function. This issue causes the internal random number generator to become predictable, leading to t...

OPENSUSE-SU-2026:21563-1 Security update for librest0_7

This update for librest07 fixes the following issues: Changes in librest07: - CVE-2026-16615: Fix weak random number generation bsc1272399, glgoGNOME/librest!44...