CVE-2024-27632

CVE-2024-27632 Vulnerability Details Overview In Savane v3.12 and prior, the Unix timestamp is used as a seed in the Pseudo-Random Number Generator PRNG used to generate Cross-Site Request Forgery CSRF protection tokens formid. As a result, an attacker may be able to independently generate the sa...

ngrev

ngrev Graphical tool for reverse engineering of Angular projects. It allows you to navigate in the structure of your application and observe the relationship between the different modules, providers, and directives. The tool performs static code analysis which means that you don't have to run you...

fuzztruction

Fuzztruction Fuzztruction is an academic prototype of a fuzzer that does not directly mutate inputs as most fuzzers do but instead uses a so-called generator application to produce an input for our fuzzing target. As programs generating data usually produce the correct representation, our fuzzer...

weakrng-sweep

barrido weak-rng clase CVE-2026-71851 Herramienta de investigación: enumera esquemas PRNG x semillas uint32, deriva carteras BIP39, comprueba pertenencia contra un conjunto de direcciones víctima investigación defensiva, estilo illbloom. Esquemas: 0-10 illbloom: MT19937/glibc/Java/LCG/xorshift,...

CVE-2023-0748

CVE-2023-0748 BTCPayServer 1.7.5 and lower version is vulnerable for Open Redirection attack. Step to Reproduce 1. Login your account on https://mainnet.demo.btcpayserver.org/login 2. Then Click the link below...

stegcrack

Stegcrack Stegcrack is an open-source program for exploiting a vulnerability in Steghide specifically CVE-2021-27211. Stegcrack detects whether a given file contains data hidden with Steghide, and can sometimes fully extract the hidden data, all with no password. Installation Clone this repositor...

passwordcheck

passwordcheck for rclone config files In https://github.com/rclone/rclone/issues/4783 a security issue was found which meant that passwords generated by "rclone config" might be insecure. This program checks your rclone config file for any of those passwords. Installation Download the relevant zi...

vuke

vuke Forschungswerkzeug zur Analyse und Reproduktion angreifbarer Bitcoin-Schlüsselerzeugung. Funktionen Modulare Architektur – steckbare Quellen und Transformationen Mehrere Eingabequellen Zahlenbereiche schwache Seeds testen Wortlisten Brainwallet-Analyse Zeitstempel zeitbasierte PRNG-Ausnutzun...

CVE-2026-22020-Weak-Seed-in-Quantum-Key-Distribution-Error-Correction

CVE-2026-22020 – Seme debole nella correzione degli errori della distribuzione quantistica di chiavi Codice del programma Python root@kitploit: qkdweakseed.py - Simulated QKD privacy amplification with weak seed import hashlib, os, time def privacyamplificationsiftedkey, seed: Weak: seed derived...

SSR-DNSSEC

Die für diesen PoC verwendete DNS-Infrastruktur war die auf den SEED Labs vorgeschlagene, verfügbar unter: https://seedsecuritylabs.org/Labs20.04/Networking/DNS/DNSSEC/, mit einigen kleineren Änderungen. Die Infrastruktur besteht aus einem Root-Server, einem Top-Level-Domain-Server für edu, einem...

cve-2023-31355-poc

Vulnerabilità del firmware SEV Questo repository contiene un exploit per una vulnerabilità nel firmware SEV. L'exploit consente di decrittare memoria arbitraria di un guest SEV-SNP dopo che è stato decommissionato. Testato sulla versione 1.55.16 la più recente al momento della stesura. Causa...

LibPNG_OSS-Fuzz

Fuzzing und Schwachstellenanalyse von libpng Gruppen-Sicherheitsforschungsprojekt Über Fuzzing: Fuzzing ist eine automatisierte Softwaretesttechnik, die ungültige, unerwartete oder zufällige Daten als Eingaben für ein Programm bereitstellt, um Fehler und Schwachstellen zu entdecken...

php_mt_seed

phpmtseed phpmtseed è un cracker di seed per mtrand di PHP. Nella modalità di invocazione più semplice, trova i possibili seed a partire dal primo output di mtrand dopo un eventuale seeding con mtsrand. Con le modalità di invocazione avanzate, è anche in grado di confrontare più output di mtrand,...

MilkSad-Mnemonic-Generator

Generatore Mnemonico Milk Sad Questo strumento è progettato per generare frasi mnemoniche BIP-39 frasi seed di 24 parole basate su timestamp Unix, esplorando in particolare frasi che potrebbero essere state generate attraverso la vulnerabilità "Milk Sad" CVE2023-39910. Cosa Fa Questo Strumento Il...

CVE-2025-32965-xrpl-js-poc

CVE-2025-32965 — xrpl.js Supply Chain Attack PoC-Bericht Schwachstellenbeschreibung CVE Kodu: CVE-2025-32965 Schwachstellentyp: Supply Chain Attack CWE-506: Embedded Malicious Code Ziel: Versionen 4.2.1–4.2.4 und 2.14.2 der xrpl.js-Bibliothek Auswirkung: Die Seed-/Secret-Daten der Wallet des...

CVE-2017-11499

Vulnerabilità specifiche di Node.js Semi costanti delle tabelle hash CVE-2017-11499 Node.js era suscettibile ad attacchi DoS remoti tramite hash flooding poiché il seed della tabella hash era costante in una data versione pubblicata di Node.js. Ciò era dovuto alla compilazione con gli snapshot V8...

Pixnapping-Attack-on-Android

Questo articolo esamina l'evoluzione delle minacce alla sicurezza nel settore dello stoccaggio delle criptovalute, concentrandosi sui metodi moderni per compromettere chiavi private e frasi seed, che proteggono i portafogli digitali. L'ecosistema moderno delle criptovalute affronta una minaccia...

CVE-2023-31290-Scanner-

DONA: bc1qps62cyk9f9unmdkc9k3ccj9e2h8ywfhg2j53ec Costruito con ❤️ per la comunità di ricerca crypto. 🚀 Scanner CVE-2023-31290 - Exploit della vulnerabilità Bitcoin & Ethereum ⚡ Il più veloce scanner CVE-2023-31290 Milk Sad per Bitcoin & Ethereum 🔥 Fino a 150.000 seed/secondo su hardware moderno! 📌...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: x86/coco: Requires seeding the RNG with RDRAND on CoCo systems. There are few uses of CoCo that do not rely on functional cryptography and, consequently, a functioning RNG. Unfortunately, the CoCo threat model means that the VM...

Zabbix Server 7.4.x < 7.4.11 Authentication Bypass (ZBX-28071)

The version of Zabbix Server installed on the remote host is 7.4.x prior to 7.4.11. It is, therefore, affected by an authentication bypass vulnerability: - The cryptographic key used for signing Frontend sessions has been erroneously written to the database seed. In deployments that utilize both...