dpapi-ng

dpaping - Python DPAPI-NG De-/Encryption Library Library for DPAPI NG, also known as CNG DPAPI, de- and encryption in Python. It is designed to replicate the behaviour of NCryptUnprotectSecret and NCryptProtectSecret. This can be used on non-Windows hosts to de-/encrypt DPAPI NG protected secrets...

PKCS11SSHAgent

SRO PKCS11 – SSH Agent CNG Sovereign unification PKCS11 + SSH-agent + Pageant + CNG/Smartcard A single Windows executable that unifies four traditionally separate functions: Full PKCS11 module Firefox, OpenSC, ssh -I SSH agent compatible with OpenSSH/Git/VS/WSL Pageant server compatible with...

CVE-2023-28229

CVE-2023-28229 Windows CNG KeyIso RPC EoP/SBX Discovered by: @k0shl Reference: https://whereisk0shl.top/post/isolate-me-from-sandbox-explore-elevation-of-privilege-of-cng-key-isolation If compilation fails, rename rpc.h to something else because I didn't realise rpc.h is a standard include in...

CrackKeyIso

CVE 2023 28229 Windows CNG KeyIso RPC EoP/SBX Discovered by: @k0shl - @Y3A Educational purposes only!...

CVE-2026-111065 vulnerabilities

Vulnerabilities for packages: litellm-fips, metaflow-service, py3.13-scanner-test-libraries-aiohttp, kserve, commercial-gitlab-cng-ee, commercial-gitlab-cng-ee-fips...

CVE-2026-111066 vulnerabilities

Vulnerabilities for packages: litellm-fips, metaflow-service, py3.13-scanner-test-libraries-aiohttp, kserve, commercial-gitlab-cng-ee, commercial-gitlab-cng-ee-fips...

CVE-2026-111749 vulnerabilities

Vulnerabilities for packages: litellm-fips, metaflow-service, py3.13-scanner-test-libraries-aiohttp, kserve, commercial-gitlab-cng-ee, commercial-gitlab-cng-ee-fips...

GHSA-9XW5-W5JJ-PVCG vulnerabilities

Vulnerabilities for packages: litellm-fips, metaflow-service, py3.13-scanner-test-libraries-aiohttp, kserve, commercial-gitlab-cng-ee, commercial-gitlab-cng-ee-fips...

GHSA-F9XW-JH8M-3MWQ vulnerabilities

Vulnerabilities for packages: litellm-fips, metaflow-service, py3.13-scanner-test-libraries-aiohttp, kserve, commercial-gitlab-cng-ee, commercial-gitlab-cng-ee-fips...

GHSA-GX76-C99X-2C96 vulnerabilities

Vulnerabilities for packages: litellm-fips, metaflow-service, py3.13-scanner-test-libraries-aiohttp, kserve, commercial-gitlab-cng-ee, commercial-gitlab-cng-ee-fips...

CVE-2026-111748 vulnerabilities

Vulnerabilities for packages: litellm-fips, metaflow-service, py3.13-scanner-test-libraries-aiohttp, kserve, commercial-gitlab-cng-ee, commercial-gitlab-cng-ee-fips...

CVE-2026-111750 vulnerabilities

Vulnerabilities for packages: litellm-fips, metaflow-service, py3.13-scanner-test-libraries-aiohttp, kserve, commercial-gitlab-cng-ee, commercial-gitlab-cng-ee-fips...

GHSA-6CJC-53GC-5RQM vulnerabilities

Vulnerabilities for packages: litellm-fips, metaflow-service, py3.13-scanner-test-libraries-aiohttp, kserve, commercial-gitlab-cng-ee, commercial-gitlab-cng-ee-fips...

GHSA-PQXQ-W44R-73XW vulnerabilities

Vulnerabilities for packages: litellm-fips, metaflow-service, py3.13-scanner-test-libraries-aiohttp, kserve, commercial-gitlab-cng-ee, commercial-gitlab-cng-ee-fips...

ipg (0.2.0), ipg-cng (>=0.1.1, <=0.1.2) potentially affected by unknown CVE via ic-cipher (0.2.7)

ic-cipher CARGO version 0.2.7 is affected by a known vulnerability. The following packages have a transitive dependency on ic-cipher and may be impacted: - ipg 0.2.0 - ipg-cng =0.1.1, =0.1.2 Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2026-0337...

CVE-2026-71980

Belledonne Communications bcg729 through 1.1.2 contains an out-of-bounds read vulnerability in the decodeSIDframe function in src/cng.c that allows unauthenticated network-adjacent attackers to trigger a heap read beyond buffer boundaries by sending a zero-length comfort-noise RTP payload. A...

GO-2025-3900 vulnerabilities

Vulnerabilities for packages: k9s-fips, docker-compose-fips, boring-registry-fips, kyverno, zitadel, beats, neuvector-sigstore-interface-fips, rancher-security-scan, bank-vaults, kyverno-notation-aws-fips, ratify-fips, grafana, tkn-fips, istio-fips, pluto-fips, jitsucom-bulker, beats-fips,...

CVE-2026-69247 vulnerabilities

Vulnerabilities for packages: apache-beam-python-3.11-sdk, apache-beam-python-3.14-sdk, openstack-nova-2025.1, dask-kubernetes, mcp-atlassian, vast-csi, dask-kubernetes-fips, request-1276, openstack-glance-2025.2, crossplane-function-pythonic, openstack-tempest-2025.2, barman, opal, duplicity,...

GHSA-G6CJ-PR64-35W5 vulnerabilities

Vulnerabilities for packages: apache-beam-python-3.11-sdk, apache-beam-python-3.14-sdk, openstack-nova-2025.1, dask-kubernetes, mcp-atlassian, vast-csi, dask-kubernetes-fips, request-1276, openstack-glance-2025.2, crossplane-function-pythonic, openstack-tempest-2025.2, barman, opal, duplicity,...

CVE-2026-54297 vulnerabilities

Vulnerabilities for packages: logstash-fips, gitlab-rails-ce-fips, gitlab-rails-ce, gitlab-cng, logstash, cinc-auditor, kube-logging-operator, kube-fluentd-operator, ruby3.3-faraday...