190 matches found
You-re-Doing-IoT-RNG
你的IoT RNG做法不对 本仓库包含我们的研究结果，以及用于在多个设备上生成随机数的设备代码。如需更完整地了解相关漏洞和问题，请观看我们在DEF CON 21上的演讲： https://www.youtube.com/watch?v=Zuqw0-jZh9Y 或者，如果你更喜欢阅读文字，可以在此处了解该问题的全部细节： https://labs.bishopfox.com/tech-blog/youre-doing-iot-rng 点击进入各个设备文件夹的README以了解详情。...
openSUSE 16 Security Update : librest0_7 (openSUSE-SU-2026:21563-1)
The remote openSUSE 16 host has packages installed that are affected by a vulnerability as referenced in the openSUSE- SU-2026:21563-1 advisory. Changes in librest07: - CVE-2026-16615: Fix weak random number generation bsc1272399, glgoGNOME/librest!44. Tenable has extracted the preceding...
OPENSUSE-SU-2026:21563-1 Security update for librest0_7
This update for librest07 fixes the following issues: Changes in librest07: - CVE-2026-16615: Fix weak random number generation bsc1272399, glgoGNOME/librest!44...
RHEL 10 : rest (RHSA-2026:47085)
The remote Redhat Enterprise Linux 10 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:47085 advisory. The rest packages provide a library for access to the RESTful web services. Security Fixes: librest: weak random number generation in PKCE...
CVE-2026-16615 Librest: weak random number generation in pkce implementation
A flaw was found in librest. The PKCE implementation for OAuth authorization uses the GRand function from the GLib API, a cryptographically insecure pseudo-random number generator. Because the generated "code verifier" lacks sufficient cryptographic entropy, a malicious actor can reverse-engineer...
PT-2026-52258
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the memory control group memcg where the get random u32 below function is called during memcg charge draining, which can occur in the Non-Maskable Interrupt NMI contex...
WordPress plugin wpDiscuz 安全漏洞
WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. There wa...
Libgcrypt 1.12.0
Libgcrypt is a general-purpose cryptographic library based on the code from GnuPG. It provides functions for all cryptographic building blocks: symmetric ciphers AES, DES, Blowfish, CAST5, Twofish, and Arcfour, hash algorithms MD4, MD5, RIPE-MD160, SHA-1, and TIGER-192, MACs HMAC for all hash...
CVE-2019-11842
An issue was discovered in Matrix Sydent before 1.0.3 and Synapse before 0.99.3.1. Random number generation is mishandled, which makes it easier for attackers to predict a Sydent authentication token or a Synapse random ID...
Linux kernel 安全漏洞
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a problem with the implementation of the RDSEED instruction, which could lead to a random number generation...
Linux kernel 安全漏洞
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from not ensuring that setent is always present, which could lead to problems with cryptographic random number...
EUVD-2014-6107
Malware in sbrugna...
EUVD-2020-30268
Malware in sbrugna...
EUVD-2002-1095
Malware in sbrugna...
EUVD-2018-11132
Malware in sbrugna...
EUVD-2018-9726
Malware in sbrugna...
EUVD-2017-3934
Malware in sbrugna...
EUVD-2014-0068
Malware in sbrugna...