Search Vulnerabilities

Joomla Extension - regularlabs.com - Insecure login URL keys in IP login extension

Librest: weak random number generation in pkce implementation

ExtremeXOS Debug-Mode Privilege Escalation via Weak PRNG

Dancer2 versions through 2.1.0 for Perl generate insecure session ids when required CSPRNG modules are unavailable

Crypt::Password versions through 0.28 for Perl generate insecure random values for salts

Insecure PRNG and Information Exposure in urwid Web Display Backend

GD::SecurityImage versions through 1.75 for Perl use rand to generate secrets

WireGuard Easy Weak Token Generation Information Disclosure via OTL Route

Rejetto HFS < 3.2.1 Session Forgery via Predictable Signing Key

DoLogin Security <= 4.3 - Unauthenticated Authentication Bypass via Insufficient Randomness via 'dologin' Parameter Weak PRNG Token

CGI::Session::ID::md5 versions before 4.49 for Perl generate predictable session ids from low-entropy sources

UltraVNC MS-Logon II uses 64-bit Diffie-Hellman and seeded libc rand() enabling credential interception

UltraVNC vncauth.c uses time-seeded libc rand() to generate VNC authentication challenge bytes

Weak Cryptographic Key Derivation Exposed All Stored Credentials

Net::BitTorrent versions before 2.1.0 for Perl generate the MSE Diffie-Hellman private key with a non-cryptographic PRNG

Mojolicious::Plugin::Web::Auth::OAuth2 versions through 0.17 for Perl have an insecure default state parameter

In JetBrains Hub before 2026

Mojolicious::Sessions::Storable versions through 0.05 for Perl generate session ids insecurely

Dancer2::Plugin::Auth::OAuth versions before 0.22 for Perl default to a predictable nonce

Crypt::PBKDF2 versions before 0.261630 for Perl generate insecure random values for salts