Lucene search
+L

69 matches found

Kitploit
Kitploit
added 2026/09/01 9:36 a.m.5 views

sharemylogin

ShareMyLogin Open Source This is the public source code for ShareMyLogin.com. What is ShareMyLogin? ShareMyLogin is a secure tool for sharing sensitive information like passwords, API keys, or config secrets. The Problem Sending a password over Slack, Email, or WhatsApp creates a permanent record...

5.9AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/01 8:59 a.m.4 views

CloakBin

CloakBin Zero-Knowledge Encrypted Pastebin Your data is encrypted before it leaves your browser. We can't read it. No one can. Live Demo • Report Bug • Request Feature Why Zero-Knowledge? Traditional pastebins store your data in plaintext. Server admins, hackers, or anyone with database access ca...

5.9AI score
SaveExploits0References5
Kitploit
Kitploit
added 2026/09/01 6:02 a.m.4 views

xtrace-sdk

The encrypted vector database. Your data never leaves your machine in plaintext. Documentation | X | LinkedIn Manage your AI memory → mem.xtrace.ai What is XTrace? Every vector database on the market requires you to hand your data to a third party in plaintext. XTrace doesn't. Your documents and...

5.8AI score
SaveExploits0References3
Kitploit
Kitploit
added 2026/08/31 1:45 a.m.5 views

PublicSafe

PublicSafe Your Browser, Your Safe Space PublicSafe is a free and open-source browser extension focused on privacy, encryption, and user control. It provides client-side encryption tools designed to help users protect sensitive information before it leaves their browser. PublicSafe is built aroun...

5.8AI score
SaveExploits0References1
NVD
NVD
added 2026/08/27 8:18 p.m.8 views

CVE-2026-81530

A weakness in the client-side encryption configuration surface of the MongoDB C Driver causes sensitive key-management credential material supplied by the application to be reproduced verbatim in the driver's human-readable diagnostic representation of its client settings, instead of being masked...

6.8CVSS0.00066EPSS
SaveExploits0References2
EUVD
EUVD
added 2026/08/27 6:32 p.m.6 views

EUVD-2026-67214

A weakness in the client-side encryption configuration surface of the MongoDB C Driver causes sensitive key-management credential material supplied by the application to be reproduced verbatim in the driver's human-readable diagnostic representation of its client settings, instead of being masked...

6.8CVSS5.3AI score0.00066EPSS
SaveExploits0References2
MongoDB
MongoDB
added 2026/08/27 6:32 p.m.11 views

KMS master key exposure via unredacted credential serialization in driver settings string

A weakness in the client-side encryption configuration surface of the MongoDB C Driver causes sensitive key-management credential material supplied by the application to be reproduced verbatim in the driver's human-readable diagnostic representation of its client settings, instead of being masked...

6.8CVSS5.8AI score0.00066EPSS
SaveExploits0References2Affected Software1
Positive Technologies
Positive Technologies
added 2026/08/27 12:00 a.m.11 views

PT-2026-82744

A weakness in the client-side encryption configuration surface of the MongoDB C Driver causes sensitive key-management credential material supplied by the application to be reproduced verbatim in the driver's human-readable diagnostic representation of its client settings, instead of being masked...

6.8CVSS5.3AI score0.00066EPSS
SaveExploits0References2
NVD
NVD
added 2026/08/06 10:17 p.m.12 views

CVE-2026-48081

OpenReception's appointment booking software provides an end-to-end encrypted appointment booking platform. Prior to version 1.0.2, a TENANTADMIN can store javascript: URLs in the tenant links configuration website, imprint, privacyStatement. These values are returned to the patient-facing landin...

8.1CVSS0.00143EPSS
SaveExploits0References2
CVE
CVE
added 2026/08/06 9:10 p.m.61 views

CVE-2026-48081

OpenReception's appointment-booking software is affected by a stored cross-site scripting (XSS) flaw in versions prior to 1.0.2. TENANT_ADMINs can inject javascript: URLs into tenant links (website, imprint, privacyStatement); these links are returned on the patient-facing landing page via /api/p...

8.1CVSS5.5AI score0.00143EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2026/08/06 9:10 p.m.32 views

CVE-2026-48081 OpenReception vulnerable to stored click-triggered XSS via javascript: tenant links rendered into patient-facing footer

OpenReception's appointment booking software provides an end-to-end encrypted appointment booking platform. Prior to version 1.0.2, a TENANTADMIN can store javascript: URLs in the tenant links configuration website, imprint, privacyStatement. These values are returned to the patient-facing landin...

8.1CVSS0.00143EPSS
SaveExploits0References2
OSV
OSV
added 2026/08/06 9:10 p.m.14 views

CVE-2026-48081 OpenReception vulnerable to stored click-triggered XSS via javascript: tenant links rendered into patient-facing footer

OpenReception's appointment booking software provides an end-to-end encrypted appointment booking platform. Prior to version 1.0.2, a TENANTADMIN can store javascript: URLs in the tenant links configuration website, imprint, privacyStatement. These values are returned to the patient-facing landin...

8.1CVSS5.4AI score
SaveExploits0References4
OSV
OSV
added 2026/06/22 5:47 a.m.26 views

BIT-MONGODB-2026-9741 Client side encryption fails to encrypt values in a $vectorSearch

A bug in query analysis processing of the $vectorSearch aggregation stage for Queryable Encryption QE or Client-Side Field Level Encryption CSFLE results in literal values for encrypted fields within the $vectorSearch stage filter expressions to be sent to the server as plaintext instead of...

7.1CVSS5.8AI score0.00103EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2026/06/12 12:00 a.m.65 views

MongoDB 7.0.x < 7.0.35 / 8.0.x < 8.0.24 / 8.2.x < 8.2.10 / 8.3.x < 8.3.3 / 9.0.0-rc0 Multiple Vulnerabilities

The version of MongoDB installed on the remote host is 7.0.x prior to 7.0.35, 8.0.x prior to 8.0.24, 8.2.x prior to 8.2.10, or 8.3.x prior to 8.3.3. It is, therefore, affected by multiple vulnerabilities: - A bug in query analysis processing of the $vectorSearch aggregation stage for Queryable...

7.1CVSS5.7AI score0.00368EPSS
SaveExploits0References10
Tenable Nessus
Tenable Nessus
added 2026/06/12 12:00 a.m.19 views

Linux Distros Unpatched Vulnerability : CVE-2026-9741

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A bug in query analysis processing of the $vectorSearch aggregation stage for Queryable Encryption QE or Client-Side Field Level Encryption CSFLE results in...

7.1CVSS5.4AI score0.00103EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
added 2026/06/11 2:59 a.m.19 views

CVE-2026-9741

A bug in query analysis processing of the $vectorSearch aggregation stage for Queryable Encryption QE or Client-Side Field Level Encryption CSFLE results in literal values for encrypted fields within the $vectorSearch stage filter expressions to be sent to the server as plaintext instead of...

7.1CVSS5.4AI score0.00103EPSS
SaveExploits0References1
OSV
OSV
added 2026/06/09 11:17 p.m.12 views

UBUNTU-CVE-2026-9741

A bug in query analysis processing of the $vectorSearch aggregation stage for Queryable Encryption QE or Client-Side Field Level Encryption CSFLE results in literal values for encrypted fields within the $vectorSearch stage filter expressions to be sent to the server as plaintext instead of...

7.1CVSS5.3AI score0.00103EPSS
SaveExploits0References3
UbuntuCve
UbuntuCve
added 2026/06/09 11:17 p.m.9 views

CVE-2026-9741

A bug in query analysis processing of the $vectorSearch aggregation stage for Queryable Encryption QE or Client-Side Field Level Encryption CSFLE results in literal values for encrypted fields within the $vectorSearch stage filter expressions to be sent to the server as plaintext instead of...

7.1CVSS6.1AI score0.00103EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2026/06/09 9:56 p.m.13 views

CVE-2026-9741 Client side encryption fails to encrypt values in a $vectorSearch

A bug in query analysis processing of the $vectorSearch aggregation stage for Queryable Encryption QE or Client-Side Field Level Encryption CSFLE results in literal values for encrypted fields within the $vectorSearch stage filter expressions to be sent to the server as plaintext instead of...

7.1CVSS5.4AI score0.00103EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/06/09 9:56 p.m.57 views

CVE-2026-9741 Client side encryption fails to encrypt values in a $vectorSearch

A bug in query analysis processing of the $vectorSearch aggregation stage for Queryable Encryption QE or Client-Side Field Level Encryption CSFLE results in literal values for encrypted fields within the $vectorSearch stage filter expressions to be sent to the server as plaintext instead of...

7.1CVSS0.00103EPSS
SaveExploits0References1
Rows per page
Query Builder