CVE-2022-40769---Profanity

DONATE: bc1qps62cyk9f9unmdkc9k3ccj9e2h8ywfhg2j53ec Construído com ❤️ para a comunidade de pesquisa cripto. ============================================================ CVE-2023-39910 + CVE-2022-40769 - GERADOR DE CHAVES PARA TXT DESCRIÇÃO: Esta ferramenta gera chaves privadas a partir de duas...

ML-for-RNGs

ML-for-RNGs استخدام التعلم الآلي للتنبؤ بتسلسلات RNGs...

BLEBoy

BLEBoy Objetivo Crear un periférico BLE compatible con todos los métodos de emparejamiento BLE que puedan utilizarse para formación y pruebas, incluido el emparejamiento fuera de banda OOB. El periférico debe ser configurable y fácil de recrear con componentes comerciales. Acerca de BLEBoy es un...

CVE-2022-40769

CVE-2022-40769 profanity fino alla versione 1.60 ha solo quattro miliardi di possibili inizializzazioni RNG. Pertanto, gli attaccanti possono recuperare le chiavi private dagli indirizzi vanity di Ethereum e rubare criptovaluta, come sfruttato in the wild a giugno 2022. autenticazione| complessit...

CVE-2026-21009-ECDSA-Nonce-Reuse-in-IoT-Firmware-Signing

CVE-2026-21009 – ECDSA-Nonce-Wiederverwendung bei der IoT-Firmware-Signierung Programmcode Python root@kitploit: ecdsanoncereusesim.py - Signing firmware with repeated nonce k import ecdsa, hashlib sk = ecdsa.SigningKey.generatecurve=ecdsa.NIST256p vk = sk.getverifyingkey Sign two different...

CVE-2026-74438

A flaw was found in the Linux kernel's sun4i-ss cryptographic random number generator RNG. This component contains multiple vulnerabilities, including a buffer overflow in the sun4issprngseed function that could lead to a denial of service. Furthermore, the sun4issprnggenerate function may not...

You-re-Doing-IoT-RNG

Du machst IoT RNG Dieses Repository enthält unsere Ergebnisse sowie den Gerätecode, der zur Erzeugung der Zufallszahlen auf mehreren Geräten verwendet wird. Eine vollständigere Erklärung der Schwachstellen und Probleme findest du in unserem DEF CON 21-Vortrag hier:...

Linux Distros Unpatched Vulnerability : CVE-2026-74402

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - crypto: atmel-sha204a - fix blocking and non-blocking rng logic The blocking and non-blocking paths were failing to provide valid entropy due to improper buffer...

GHSA-92HR-GMR6-H8CP Etherpad addressed weak token RNG, login timing, plugin path handling, API request handling

Fix: PR 7906 ether/etherpad. A set of medium/low hardening fixes: - Weak RNG for tokens CWE-330: author/session/readonly IDs were generated with Math.random client and server. Now use crypto.getRandomValues. - Login timing / no failure delay CWE-208/CWE-307: the OIDC interaction login used a...

CVE-2026-74438

In the Linux kernel, the following vulnerability has been resolved: crypto: sun4i-ss - Remove insecure and unused rngalg Remove sun4issrng, as it is insecure and unused: - It has multiple vulnerabilities. sun4issprngseed is missing locking and has a buffer overflow. sun4issprnggenerate fails to...

UBUNTU-CVE-2026-74402

In the Linux kernel, the following vulnerability has been resolved: crypto: atmel-sha204a - fix blocking and non-blocking rng logic The blocking and non-blocking paths were failing to provide valid entropy due to improper buffer management. Reading the buffer starting from byte 1, only fetch the ...

CVE-2026-74402

In the Linux kernel, the following vulnerability has been resolved: crypto: atmel-sha204a - fix blocking and non-blocking rng logic The blocking and non-blocking paths were failing to provide valid entropy due to improper buffer management. Reading the buffer starting from byte 1, only fetch the ...

CVE-2026-74438

The CVE-2026-74438 issue concerns the Linux kernel crypto sun4i-ss RNG code, which has been removed because it was insecure and unused. The vulnerabilities include sun4i_ss_prng_seed() lacking proper locking and a buffer overflow, and sun4i_ss_prng_generate() failing to fill the full buffer due t...

EUVD-2026-59585

In the Linux kernel, the following vulnerability has been resolved: crypto: sun4i-ss - Remove insecure and unused rngalg Remove sun4issrng, as it is insecure and unused: - It has multiple vulnerabilities. sun4issprngseed is missing locking and has a buffer overflow. sun4issprnggenerate fails to...

CVE-2026-74438 crypto: sun4i-ss - Remove insecure and unused rng_alg

In the Linux kernel, the following vulnerability has been resolved: crypto: sun4i-ss - Remove insecure and unused rngalg Remove sun4issrng, as it is insecure and unused: - It has multiple vulnerabilities. sun4issprngseed is missing locking and has a buffer overflow. sun4issprnggenerate fails to...

CVE-2026-74402 crypto: atmel-sha204a - fix blocking and non-blocking rng logic

In the Linux kernel, the following vulnerability has been resolved: crypto: atmel-sha204a - fix blocking and non-blocking rng logic The blocking and non-blocking paths were failing to provide valid entropy due to improper buffer management. Reading the buffer starting from byte 1, only fetch the ...

CVE-2026-74402 crypto: atmel-sha204a - fix blocking and non-blocking rng logic

In the Linux kernel, the following vulnerability has been resolved: crypto: atmel-sha204a - fix blocking and non-blocking rng logic The blocking and non-blocking paths were failing to provide valid entropy due to improper buffer management. Reading the buffer starting from byte 1, only fetch the ...

EUVD-2026-59549

In the Linux kernel, the following vulnerability has been resolved: crypto: atmel-sha204a - fix blocking and non-blocking rng logic The blocking and non-blocking paths were failing to provide valid entropy due to improper buffer management. Reading the buffer starting from byte 1, only fetch the ...

CVE-2026-74402

Summary (CVE-2026-74402) : In the Linux kernel, the crypto driver for the Atmel SHA204A RNG had a bug in both blocking and non-blocking paths where entropy was not properly fed due to incorrect buffer management, causing reads to return partial or incorrect data. The issue manifested as reading 3...

Linux Distros Unpatched Vulnerability : CVE-2026-74438

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - crypto: sun4i-ss - Remove insecure and unused rngalg Remove sun4issrng, as it is insecure and unused: - It has multiple vulnerabilities. sun4issprngseed is...