72 matches found
CloakBin
CloakBin ゼロ知識暗号化ペーストビン データはブラウザを離れる前に暗号化されます。私たちは読めません。誰も読めません。 ライブデモ • バグ報告 • 機能リクエスト ゼロ知識とは？ 従来のペーストビンはデータを平文で保存します。サーバー管理者、ハッカー、データベースにアクセスできる誰でも、あなたが共有したすべてを読むことができます。 CloakBin は違います。 root@kitploit: ┌─────────────────────────────────────────────────────────────────┐ │ ゼロ知識フロー │...
sharemylogin
ShareMyLogin オープンソース これは ShareMyLogin.com の公開ソースコードです。 ShareMyLoginとは？ ShareMyLogin は、パスワード、APIキー、設定のシークレットなどの機密情報を安全に共有するためのツールです。 問題点 Slack、Eメール、WhatsAppでパスワードを送信すると、その秘密はチャットログやサーバーに永続的に記録されます。メッセージを削除しても、多くの場合、別の場所にバックアップされています。 解決策 ShareMyLogin は、あなたの秘密をデバイスから送信する前に、ブラウザ内で...
xtrace-sdk
暗号化ベクトルデータベース。 あなたのデータが平文のままマシンを離れることはありません。 ドキュメント | X | LinkedIn AIメモリを管理する → mem.xtrace.ai XTraceとは？ 市場にあるすべてのベクトルデータベースは、あなたのデータを平文で第三者に渡すことを要求します。XTraceはそうではありません。ドキュメントと埋め込みベクトルは、あなたのマシン上で 暗号化されてから送信されます。サーバーは暗号文を保存・検索し、平文を見ることなく最近傍検索結果を計算します。検索中も、データはあなたのものです。 SDKには2つのモジュールがあります： x-vec —...
CVE-2026-84962
An unauthorized user with key vault write access may cause an authorized client to issue arbitrary authenticated Google Cloud KMS API calls under the authorized user's identity, escalating database-level access into cloud key control and defeating client-side encryption...
CVE-2026-84962
CVE-2026-84962 is a CRLF injection vulnerability in MongoDB client-side encryption (tracked as MONGOCRYPT-960) affecting GCP key identifier strings . An unauthorized user with key vault write access can forge authenticated Google Cloud KMS API calls under an authorized user's identity by injectin...
EUVD-2026-70516
An unauthorized user with key vault write access may cause an authorized client to issue arbitrary authenticated Google Cloud KMS API calls under the authorized user's identity, escalating database-level access into cloud key control and defeating client-side encryption...
PublicSafe
PublicSafe あなたのブラウザ、あなたの安全な空間 PublicSafeは、プライバシー、暗号化、ユーザーコントロールに焦点を当てた、無料のオープンソースブラウザ拡張機能です。この拡張機能は、データがブラウザから送信される前に機密情報を保護するためのクライアントサイド暗号化ツールを提供します。PublicSafeは、透明性、セキュリティ、アクセシビリティ、コミュニティ主導の開発を基本理念としています。 このプロジェクトは、ゼロナレッジ設計、ローカルでの鍵管理、誰でも独立して監査可能なオープンソースコードを備えた、プライバシーファーストの哲学に従っています。 目標...
CVE-2026-81530
A weakness in the client-side encryption configuration surface of the MongoDB C Driver causes sensitive key-management credential material supplied by the application to be reproduced verbatim in the driver's human-readable diagnostic representation of its client settings, instead of being masked...
EUVD-2026-67214
A weakness in the client-side encryption configuration surface of the MongoDB C Driver causes sensitive key-management credential material supplied by the application to be reproduced verbatim in the driver's human-readable diagnostic representation of its client settings, instead of being masked...
KMS master key exposure via unredacted credential serialization in driver settings string
A weakness in the client-side encryption configuration surface of the MongoDB C Driver causes sensitive key-management credential material supplied by the application to be reproduced verbatim in the driver's human-readable diagnostic representation of its client settings, instead of being masked...
PT-2026-82744
A weakness in the client-side encryption configuration surface of the MongoDB C Driver causes sensitive key-management credential material supplied by the application to be reproduced verbatim in the driver's human-readable diagnostic representation of its client settings, instead of being masked...
CVE-2026-48081
OpenReception's appointment booking software provides an end-to-end encrypted appointment booking platform. Prior to version 1.0.2, a TENANTADMIN can store javascript: URLs in the tenant links configuration website, imprint, privacyStatement. These values are returned to the patient-facing landin...
CVE-2026-48081
OpenReception's appointment-booking software is affected by a stored cross-site scripting (XSS) flaw in versions prior to 1.0.2. TENANT_ADMINs can inject javascript: URLs into tenant links (website, imprint, privacyStatement); these links are returned on the patient-facing landing page via /api/p...
CVE-2026-48081 OpenReception vulnerable to stored click-triggered XSS via javascript: tenant links rendered into patient-facing footer
OpenReception's appointment booking software provides an end-to-end encrypted appointment booking platform. Prior to version 1.0.2, a TENANTADMIN can store javascript: URLs in the tenant links configuration website, imprint, privacyStatement. These values are returned to the patient-facing landin...
CVE-2026-48081 OpenReception vulnerable to stored click-triggered XSS via javascript: tenant links rendered into patient-facing footer
OpenReception's appointment booking software provides an end-to-end encrypted appointment booking platform. Prior to version 1.0.2, a TENANTADMIN can store javascript: URLs in the tenant links configuration website, imprint, privacyStatement. These values are returned to the patient-facing landin...
BIT-MONGODB-2026-9741 Client side encryption fails to encrypt values in a $vectorSearch
A bug in query analysis processing of the $vectorSearch aggregation stage for Queryable Encryption QE or Client-Side Field Level Encryption CSFLE results in literal values for encrypted fields within the $vectorSearch stage filter expressions to be sent to the server as plaintext instead of...
MongoDB 7.0.x < 7.0.35 / 8.0.x < 8.0.24 / 8.2.x < 8.2.10 / 8.3.x < 8.3.3 / 9.0.0-rc0 Multiple Vulnerabilities
The version of MongoDB installed on the remote host is 7.0.x prior to 7.0.35, 8.0.x prior to 8.0.24, 8.2.x prior to 8.2.10, or 8.3.x prior to 8.3.3. It is, therefore, affected by multiple vulnerabilities: - A bug in query analysis processing of the $vectorSearch aggregation stage for Queryable...
Linux Distros Unpatched Vulnerability : CVE-2026-9741
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A bug in query analysis processing of the $vectorSearch aggregation stage for Queryable Encryption QE or Client-Side Field Level Encryption CSFLE results in...
CVE-2026-9741
A bug in query analysis processing of the $vectorSearch aggregation stage for Queryable Encryption QE or Client-Side Field Level Encryption CSFLE results in literal values for encrypted fields within the $vectorSearch stage filter expressions to be sent to the server as plaintext instead of...
UBUNTU-CVE-2026-9741
A bug in query analysis processing of the $vectorSearch aggregation stage for Queryable Encryption QE or Client-Side Field Level Encryption CSFLE results in literal values for encrypted fields within the $vectorSearch stage filter expressions to be sent to the server as plaintext instead of...