vLLM 0.8.3 - 0.14.0 - Information Disclosure

vLLM 0.8.3 to - 0.14.1 contains an information disclosure caused by leaking a heap address in error messages from the multimodal endpoint when processing invalid images, letting remote attackers reduce ASLR entropy, exploit requires sending invalid images. id: CVE-2026-22778 info: name: vLLM 0.8....

CVE-2026-22001-SPHINCS-WOTS-Weak-Randomness-Forgeable-Signature

CVE-2026-22001 – SPHINCS+ WOTS+ Weak Randomness Signature Forgery Overview An implementation of the SPHINCS+ post‑quantum signature scheme uses a flawed random number generator during WOTS+ signature generation. The same nonce k is reused across multiple signatures, allowing an attacker to recove...

CVE-2025-7783-poc

form-data boundary randomness vulnerability CVE-2025-7783 Largely based on https://hackerone.com/reports/2913312 by https://hackerone.com/parrot409?type=user Installing: npm install Make sure you have python3 installed with the z3 module pip3 install -r requirements.txt -- the exploit code shells...

php_mt_seed

phpmtseed phpmtseed is a PHP mtrand seed cracker. In the most trivial invocation mode, it finds possible seeds given the very first mtrand output after possible seeding with mtsrand. With advanced invocation modes, it is also able to match multiple, non-first, and/or inexact mtrand outputs to...

java-insecure-random-cve-2021-27568

java-insecure-random-cve-2021-27568 Demo of CVE-2021-27568: Insecure randomness in token generation...

CVE-2024-27632

CVE-2024-27632 Vulnerability Details Overview In Savane v3.12 and prior, the Unix timestamp is used as a seed in the Pseudo-Random Number Generator PRNG used to generate Cross-Site Request Forgery CSRF protection tokens formid. As a result, an attacker may be able to independently generate the sa...

EUVD-2026-120525

Seahub through 14.0.10 contains a weak randomness vulnerability in MultiShareLinksBatch.post that generates batch share link passwords using Python's non-cryptographic random.choices. Authenticated users permitted to create share links can request many generated passwords via the multi-share-link...

CVE-2026-125362

Seahub through 14.0.10 contains a weak randomness vulnerability in MultiShareLinksBatch.post that generates batch share link passwords using Python's non-cryptographic random.choices. Authenticated users permitted to create share links can request many generated passwords via the multi-share-link...

CVE-2026-125362: haiwen seahub: Seahub through 14.0.10 contains a weak randomness vulnerability in MultiShareLinksBatch.post() that generates batch…

Seahub through 14.0.10 contains a weak randomness vulnerability in MultiShareLinksBatch.post that generates batch share link passwords using Python's non-cryptographic random.choices. Authenticated users permitted to create share links can request many generated passwords via the multi-share-link...

CVE-2026-125362 Seahub through 14.0.10 Predictable Share Link Passwords via Batch Endpoint

Seahub through 14.0.10 contains a weak randomness vulnerability in MultiShareLinksBatch.post that generates batch share link passwords using Python's non-cryptographic random.choices. Authenticated users permitted to create share links can request many generated passwords via the multi-share-link...

CVE-2026-125362

Seahub versions through 14.0.10 are vulnerable to a weak randomness issue in the MultiShareLinksBatch.post() function. The root cause is the use of Python's non-cryptographic random.choices() to generate batch share link passwords. An authenticated user with permissions to create share links can ...

CVE-2026-125362 Seahub through 14.0.10 Predictable Share Link Passwords via Batch Endpoint

Seahub through 14.0.10 contains a weak randomness vulnerability in MultiShareLinksBatch.post that generates batch share link passwords using Python's non-cryptographic random.choices. Authenticated users permitted to create share links can request many generated passwords via the multi-share-link...

PT-2026-141185

Seahub through 14.0.10 contains a weak randomness vulnerability in MultiShareLinksBatch.post that generates batch share link passwords using Python's non-cryptographic random.choices. Authenticated users permitted to create share links can request many generated passwords via the multi-share-link...

CLEANSTART-2025-VG20813 weak randomness in WebCrypto keygen vulnerability exists in Node

CVE-2022-35255 affects multiple packages. A weak randomness in WebCrypto keygen vulnerability exists in Node. See references for individual vulnerability details...

CVE-2026-38968

ntopng through 6.6 is vulnerable to Predictable Session Identifier which can lead to Session Hijacking. HTTP session identifiers in src/HTTPserver.cpp use weak time-seeded pseudo-randomness during session creation. As a result, fresh authenticated logins can receive deterministic or colliding...

CVE-2026-105996

The Booking Package WordPress plugin before 1.7.31 does not generate booking cancellation tokens using a secure source of randomness, deriving them instead from values it exposes publicly, so an unauthenticated attacker can reconstruct an arbitrary booking's token, disclose that booking's persona...

CLEANSTART-2026-DB79220 weak randomness in WebCrypto keygen vulnerability exists in Node

Security vulnerability affects the nodejs-24 package. A weak randomness in WebCrypto keygen vulnerability exists in Node...

PT-2026-120449

The Booking Package WordPress plugin before 1.7.31 does not generate booking cancellation tokens using a secure source of randomness, deriving them instead from values it exposes publicly, so an unauthenticated attacker can reconstruct an arbitrary booking's token, disclose that booking's persona...

CLSA-2023-1686651204 kernel: Fix of 28 CVEs

cgroup: Use open-time cgroup namespace for process migration perm checks CVE-2021-4197 - cgroup: Use open-time credentials for process migraton perm checks CVE-2021-4197 - vt: drop old FONT ioctls CVE-2021-33656 - fbmem: Check virtual screen sizes in fbsetvar CVE-2021-33655 - fbcon: Prevent that...

Astra Linux – vulnerability in linux-6.1

In the Linux kernel, the following vulnerability has been resolved: x86/coco: Require seeding RNG with RDRAND on CoCo systems There are few uses of CoCo that do not rely on working cryptography and thus a working RNG. Unfortunately, the CoCo threat model means that the VM host cannot be trusted a...