keypairvuln

chaves vulneráveis keypair CVE-2021-41117 Chaves geradas com versões da biblioteca javascript keypair vulneráveis ao CVE-2021-41117. Devido a bugs no gerador de números aleatórios, esta biblioteca gerará certas chaves com maior probabilidade. A probabilidade de gerar uma das chaves neste...

php-mt_rand

इस रिपॉजिटरी में README नहीं है।...

dual-ec-drbg

Backdoor DualECDRBG: Proof-of-Concept Educativo Per Professionisti della Sicurezza | Solo a Scopo Educativo ⚠️ Disclaimer Questo repository contiene una dimostrazione educativa della backdoor crittografica DualECDRBG CVE-2014-8610, una vulnerabilità ben documentata resa nota dopo le rivelazioni di...

challenge_repo

🎲 Die Entropy-Challenge 🇬🇧 Auf Englisch lesen | 🇹🇷 Türkçe Oku Einleitung Wir haben einen neuartigen Zufallszahlengenerator entwickelt, der Radiofrequenzrauschen RF Noise durch eine proprietäre Neuronale Netzwerkarchitektur verarbeitet, gefolgt von SHA-3-Nachbearbeitung. Wir behaupten, dass diese...

You-re-Doing-IoT-RNG

Du machst IoT RNG Dieses Repository enthält unsere Ergebnisse sowie den Gerätecode, der zur Erzeugung der Zufallszahlen auf mehreren Geräten verwendet wird. Eine vollständigere Erklärung der Schwachstellen und Probleme findest du in unserem DEF CON 21-Vortrag hier:...

CVE-2026-74438 crypto: sun4i-ss - Remove insecure and unused rng_alg

In the Linux kernel, the following vulnerability has been resolved: crypto: sun4i-ss - Remove insecure and unused rngalg Remove sun4issrng, as it is insecure and unused: - It has multiple vulnerabilities. sun4issprngseed is missing locking and has a buffer overflow. sun4issprnggenerate fails to...

nanoid: nanoid: Predictable ID generation due to integer overflow

A flaw was found in nanoid, a JavaScript library for generating unique string IDs. A remote attacker could exploit an integer overflow vulnerability by providing a specific input to the nanoidsize function. This issue causes the internal random number generator to become predictable, leading to t...

CVE-2026-8470

IBM Langflow OSS 1.0.0 through 1.10.3, 1.0.0 through 1.10.3, 1.0.0 through 1.10.3, and 1.0.0 through 1.10.3 use Python's non-cryptographic random module for generating Fernet encryption keys from user secrets under 32 characters. The deterministic Mersenne Twister PRNG produces identical keys for...

RHEL 10 : rest (RHSA-2026:47085)

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:47085 advisory. The rest packages provide a library for access to the RESTful web services. Security Fixes: librest: weak random number generation in PKCE...

UBUNTU-CVE-2026-64311

In the Linux kernel, the following vulnerability has been resolved: crypto: loongson - Remove broken and unused loongson-rng The loongson-rng rngalg has several vulnerabilities, including not providing forward security, and a use-after-free bug due to the use of waitforcompletioninterruptible...

CVE-2026-64311

In the Linux kernel, the following vulnerability has been resolved: crypto: loongson - Remove broken and unused loongson-rng The loongson-rng rngalg has several vulnerabilities, including not providing forward security, and a use-after-free bug due to the use of waitforcompletioninterruptible...

EUVD-2026-49023

In the Linux kernel, the following vulnerability has been resolved: crypto: loongson - Remove broken and unused loongson-rng The loongson-rng rngalg has several vulnerabilities, including not providing forward security, and a use-after-free bug due to the use of waitforcompletioninterruptible...

CVE-2026-64311

The CVE concerns the Linux kernel: crypto: loongson - Remove broken and unused loongson-rng. The loongson-rng rng_alg reportedly has forward-security issues and a use-after-free bug linked to wait_for_completion_interruptible(), and the rng_alg framework is largely unused in-kernel. The advisory ...

CVE-2026-64306

The CVE-2026-64306 issue affects the Linux kernel crypto DRBG (CTR_DRBG). The root cause is in drbg_ctr_generate(), which could return success after a failure, leaving the output buffer uninitialized. This vulnerability is addressed by the kernel fix that prevents returning success on failure and...

Linux Distros Unpatched Vulnerability : CVE-2026-64306

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - crypto: drbg - Fix returning success on failure in CTRDRBG drbgctrgenerate sometimes returns success when it fails, leaving the output buffer uninitialized. Fix...

CVE-2026-16615 Librest: weak random number generation in pkce implementation

A flaw was found in librest. The PKCE implementation for OAuth authorization uses the GRand function from the GLib API, a cryptographically insecure pseudo-random number generator. Because the generated "code verifier" lacks sufficient cryptographic entropy, a malicious actor can reverse-engineer...

CVE-2026-16615

A flaw was found in librest. The PKCE implementation for OAuth authorization uses the GRand function from the GLib API, a cryptographically insecure pseudo-random number generator. Because the generated "code verifier" lacks sufficient cryptographic entropy, a malicious actor can reverse-engineer...

CVE-2026-13577 Dancer2 versions through 2.1.0 for Perl generate insecure session ids when required CSPRNG modules are unavailable

Dancer2 versions through 2.1.0 for Perl generate insecure session ids when required CSPRNG modules are unavailable. Dancer2::Core::Role::SessionFactory::generateid silently falls back to a built-in rand-derived session id unless both Math::Random::ISAAC::XS and Crypt::URandom are available. The...

CVE-2026-9323

The urwid web display backend urwid/display/web.py generates web session identifiers urwidid in Screen.start by concatenating two random.randrange109 calls that use Python's Mersenne Twister PRNG, which is not cryptographically secure. Each call consumes approximately 30 bits of PRNG state, and t...

CVE-2026-13082

GD::SecurityImage versions through 1.75 for Perl use rand to generate secrets. The random method creates the challenge text used for the CAPTCHA by sampling characters from an array using Perl's built-in rand function, and generates a by default six-character string. The built-in rand function is...