chpwd

DEPRECATED This is an old version of a CLI password vault. The development has been shifted to vlt: https://codeberg.org/artich0ke/vlt GitHub mirror: https://github.com/b0lbas/vlt. You can still download the utility / use it as a personal password storage, however, neither is recommended. chpwd A...

Klip

Klip 最小限のターミナルベースのパスワードマネージャー。 機能 · インストール · 使用方法 · セキュリティ 機能 完全にオフライン での動作。 Argon2idによる鍵導出と、libsodiumによる認証付き暗号化で安全な 暗号化を実現。 安全なパスワードジェネレーター。 外部ライブラリに依存しないカスタムTUI。 インストール AppImage AppImageをリリースからダウンロードして実行： root@kitploit: chmod +x klip-x8664.appimage ./klip-x8664.appimage ソースからビルド 依存関係 : libsodiu...

envy

快速开始 • 配置 • 命令 • 键绑定 • 常见问题 • 文档 一个安全的加密保险库，用于管理 API 密钥、机密和环境变量。专为终端开发人员打造。 Envy 是什么？ 我构建 Envy 是因为厌倦了处理 .env 文件，以及让机密散落在密码管理器、便利贴和 Slack 会话中。它是一个单一二进制文件，既提供用于浏览机密的流畅 TUI，也提供用于自动化的 CLI。 以下是它的功能： 真正的加密 — 采用 AES-256-GCM 与 Argon2id，而非仅仅是 base64 混淆 快速访问 — 模糊搜索可在毫秒级内找到机密 按项目组织 — 将相关机密分组在一起 多环境支持 —...

keeper

keeper Keeper は、Go 向けの暗号化シークレットストアです。Argon2id キー導出と XChaCha20-Poly1305（デフォルト）認証暗号化を使用して任意のバイトペイロードを保存時に暗号化し、埋め込み bbolt データベースに格納します。 単独で使用できる3つのコンポーネントとして提供されます。 Go ライブラリ — 4つのセキュリティレベル、バケットごとの DEK 分離、改ざん検出可能な監査チェーンを備えた、堅牢なシークレットストアをプロセスに直接埋め込めます。 HTTP ハンドラ x/keephandler — 1回の呼び出しで任意の net/http...

pmanager

Pmanager Demostración Descripción Almacena y recupera tus contraseñas desde una base de datos local y segura. Verifica si tus contraseñas han sido filtradas anteriormente para evitar ataques de reutilización dirigida de contraseñas. ¿Por qué desarrollar otro gestor de contraseñas? Este proyecto...

EUVD-2026-67060

opensslencrypt versions before 1.4.9 contain a weak key derivation vulnerability in the D-Bus CryptoService.EncryptFile handler that uses unstretched SHA-256 instead of Argon2id. Attackers can perform offline password guessing against encrypted files roughly six to seven orders of magnitude faste...

CVE-2026-81704 openssl_encrypt before 1.4.9 Weak Key Derivation via D-Bus

opensslencrypt versions before 1.4.9 contain a weak key derivation vulnerability in the D-Bus CryptoService.EncryptFile handler that uses unstretched SHA-256 instead of Argon2id. Attackers can perform offline password guessing against encrypted files roughly six to seven orders of magnitude faste...

lsPass

lsPass — स्थानीय, एन्क्रिप्टेड पासवर्ड मैनेजर GTK4 / gtkmm-4 · C++23 · CMake · SQLite · libsodium lsPass लॉगिन, सुरक्षित नोट्स और API कुंजियाँ एक स्थानीय एन्क्रिप्टेड वॉल्ट में संग्रहीत करता है। कोई नेटवर्क नहीं, कोई क्लाउड नहीं, कोई टेलीमेट्री नहीं। कोई भी गोपनीय चीज़ कभी भी डिस्क पर प्लेनटेक्स्...

EUVD-2026-57461

SiYuan versions before v3.7.4 disclose encrypted-notebook key-derivation material and wrapped data keys through unauthenticated endpoints in publish mode. Attackers can retrieve Argon2id salt, cost parameters, password verifiers, and wrapped notebook keys to perform unlimited offline...

CVE-2026-72801 SiYuan before v3.7.4 Information Disclosure via Encryption Key Material

SiYuan versions before v3.7.4 disclose encrypted-notebook key-derivation material and wrapped data keys through unauthenticated endpoints in publish mode. Attackers can retrieve Argon2id salt, cost parameters, password verifiers, and wrapped notebook keys to perform unlimited offline...

CVE-2026-56124

phpUploader before 2.0.2 contains an unauthenticated information disclosure vulnerability that allows remote attackers to access the full contents of the uploaded-files database table by visiting any page of the application. The index model executes an unbounded SELECT query and embeds the comple...

CVE-2026-56124

CVE-2026-56124 affects phpUploader prior to 2.0.2. An unauthenticated information-disclosure flaw exists where the index model runs an unbounded SELECT and embeds the full JSON-encoded result set in an inline script, exposing uploader IP addresses, Argon2ID key hashes, internal filenames, and SHA...

CVE-2026-56124 phpUploader < 2.0.2 Unauthenticated Database Exposure via index model

phpUploader before 2.0.2 contains an unauthenticated information disclosure vulnerability that allows remote attackers to access the full contents of the uploaded-files database table by visiting any page of the application. The index model executes an unbounded SELECT query and embeds the comple...

PT-2026-53284

Name of the Vulnerable Software and Affected Versions phpUploader versions prior to 2.0.2 Description An unauthenticated information disclosure exists where remote attackers can access the full contents of the uploaded-files database table by visiting any page of the application. The index model...

PT-2026-48875

VeraCrypt provides disk encryption with strong security based on TrueCrypt. From 1.26.6 until 1.26.29, file-hosted hidden volume creation forces quick format and the FormatNoFs function in src/Common/Format.c and FormatFat function in src/Common/Fat.c use WriteFile to place raw zeroed sectors at...

PT-2026-48872

VeraCrypt provides disk encryption with strong security based on TrueCrypt. Prior to 1.26.29, non-default builds created with WOLFCRYPT=1 and WOLFCRYPT BACKEND route SHA-256 and SHA-512 volume-header key derivation through derive key sha256 and derive key sha512 in src/Crypto/wolfCrypt.c, where t...

PT-2026-46850

Summary There is a Proof of Concept which is able to enumerate the usernames of administrator users. This was possible by performing a timing attack. Details The faulty code exists in src/Core/Framework/Api/OAuth/UserRepository.php: public function getUserEntityByUserCredentials string $username,...

GHSA-R75M-26CQ-MJXC Serverpod improved security for stored password hashes

Description Improved security for stored password hashes Serverpod now uses the OWASP, source, recommended Argon2Id password hash algorithm to store password hashes for the email authentication module. Starting from Serverpod 1.2.6 all users that either creates an account or authenticates with th...

Serverpod improved security for stored password hashes

Description Improved security for stored password hashes Serverpod now uses the OWASP, source, recommended Argon2Id password hash algorithm to store password hashes for the email authentication module. Starting from Serverpod 1.2.6 all users that either creates an account or authenticates with th...

Serverpod improved security for stored password hashes

Serverpod now uses the OWASP recommended Argon2Id password hash algorithm to store password hashes for the email authentication module...