hsm

zhsm Zig向けのハードウェアセキュリティモジュール（HSM）ライブラリ。PC/SC経由で PIV、CAC 、YubiKey トークンにアクセスします。 ステータス 項目| 情報 ---|--- API安定性| 開発中 Zigバージョン| 0.16.0 対応プラットフォーム| Linux、macOS、Windows ライセンス| MIT 特徴 PIVサポート （NIST SP 800-73-4） 証明書の取得（スロット9A、9C、9D、9E） PINの確認、変更、ロック解除 ECDSA P-256/P-384署名 RSA 2048/3072/4096署名 RSA復号 CACサポート...

Scalar-Venom-Attack

本文分析了现代加密密钥管理基础设施中发现的加密漏洞，特别关注硬件安全模块（HSM）在处理椭圆曲线私钥时架构中的关键缺陷。研究聚焦于一类利用认证加密设备中隔离不充分的RAM管理的攻击。在现代比特币加密生态系统中，私钥安全是保护全球价值数万亿美元数字资产的基本要求。经FIPS 140-2标准认证的硬件安全模块（HSM）传统上被认为通过硬件级隔离和严格的内存管理协议为加密密钥提供无法穿透的保护。然而，F5OS-A FIPS HSM模块中关键漏洞CVE-2025-60013 的发现，结合Scalar Venom Attack 类攻击（也称为Scalar Poison、Memory Phantom...

Responsible-Alliance-Protocol

目的论边界协议（TBP）v4.2.1 面向自主 AI 智能体的策略执行与密码学审计层。 TBP 在执行层拦截特定类别的智能体操作——自主资金转账、工业控制系统访问、武器系统集成——位于模型自身推理之外。决策经过签名（HSM 支持）、加盖时间戳（RFC 3161），并写入防篡改的 Merkle 审计链。其前提是：提示词或系统消息中的指令并非安全边界，因为没有什么能阻止一个足够强大或被操纵的智能体无视它们。而位于智能体与外部世界之间的策略引擎所强制执行的边界才是。 本项目还源于一场关于 AI/人类共存的更广泛讨论，该讨论由多个 AI 助手作为起草伙伴协作展开。这一愿景与起源故事位于...

CVE-2025-99999

CVE-2025-99999 - HSM 固件认证绕过 描述 HSM 固件 v4.5.0 中存在严重认证绕过漏洞，可导致密钥提取。 受影响系统 HSM 固件 v4.5.0（所有版本） 使用该 HSM 进行 SWIFT 交易签名的金融机构 入侵指标（IOC） IP| 端口| 描述 ---|---|--- 127.0.0.1| 5001| 用于 HSM 漏洞利用的 C2 服务器 缓解措施 立即应用供应商补丁。 参考 https://your-cti-blog.com/advisory/CVE-2025-99999...

MiniPlasma

MiniPlasma 在重新调查GreenPlasma中使用的技术（特别是SetPolicyVal）后，发现cldflt!HsmOsBlockPlaceholderAccess仍然存在六年前向微软报告的完全相同的问题。 我并不完全居功，谷歌Project Zero的James Forshaw发现了这个漏洞并向微软报告，据称已通过CVE-2020-17103修复。 然而，我的一位研究人员朋友指出该例程可能仍然存在漏洞，我此前也曾考虑过这一点但并未重视，因为我以为微软不可能不修补此问题或回滚补丁。 经过调查，发现谷歌Project...

CVE-2026-87858

Temporal Server decided whether a Workflow completion callback was internal by reading a caller-supplied HTTP header. An authenticated caller holding only write permission in a single namespace could attach a completion callback whose URL host matched the configured callback address allowlist,...

CVE-2026-87858 Temporal Server completion callback source header can direct attacker-chosen requests to the internal frontend with administrator authorization

Temporal Server decided whether a Workflow completion callback was internal by reading a caller-supplied HTTP header. An authenticated caller holding only write permission in a single namespace could attach a completion callback whose URL host matched the configured callback address allowlist,...

aegisnet-hsm (0.1.0), parsec-service (>=0.8.1, <=1.2.0) +2 more potentially affected by unknown CVE via cryptoki (>=0.2.1, <=0.8.0)

cryptoki CARGO version =0.2.1, =0.8.1, =0.1.0, =0.1.0, =0.3.0 Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2026-0286...

CVE-2026-0309

A command injection vulnerability in Palo Alto Networks PAN-OS® software enables an authenticated administrator to bypass system restrictions and run arbitrary commands as a root user. To be able to exploit this issue, the user must have access to the PAN-OS CLI and the device must be configured...

CVE-2026-0309

CVE-2026-0309 is currently a reserved candidate with no publicly available technical details. The vulnerability has not yet been announced. Monitor for updates once the assigning organization publicizes the entry.

CVE-2026-0309 PAN-OS: Authenticated Command Injection in CLI with Luna HSM Configuration

A command injection vulnerability in Palo Alto Networks PAN-OS® software enables an authenticated administrator to bypass system restrictions and run arbitrary commands as a root user. To be able to exploit this issue, the user must have access to the PAN-OS CLI and the device must be configured...

CVE-2026-0309 PAN-OS: Authenticated Command Injection in CLI with Luna HSM Configuration

A command injection vulnerability in Palo Alto Networks PAN-OS® software enables an authenticated administrator to bypass system restrictions and run arbitrary commands as a root user. To be able to exploit this issue, the user must have access to the PAN-OS CLI and the device must be configured...

EUVD-2026-75255

A command injection vulnerability in Palo Alto Networks PAN-OS® software enables an authenticated administrator to bypass system restrictions and run arbitrary commands as a root user. To be able to exploit this issue, the user must have access to the PAN-OS CLI and the device must be configured...

CVE-2026-0309: Improper Neutralization of Special Elements used in an OS Command

A command injection vulnerability in Palo Alto Networks PAN-OS® software enables an authenticated administrator to bypass system restrictions and run arbitrary commands as a root user. To be able to exploit this issue, the user must have access to the PAN-OS CLI and the device must be configured...

PT-2026-89277

A command injection vulnerability in Palo Alto Networks PAN-OS® software enables an authenticated administrator to bypass system restrictions and run arbitrary commands as a root user. To be able to exploit this issue, the user must have access to the PAN-OS CLI and the device must be configured...

PAN-OS: Authenticated Command Injection in CLI with Luna HSM Configuration

A command injection vulnerability in Palo Alto Networks PAN-OS® software enables an authenticated administrator to bypass system restrictions and run arbitrary commands as a root user. To be able to exploit this issue, the user must have access to the PAN-OS CLI and the device must be configured...

Palo Alto Networks PAN-OS 10.2.x / 11.1.x / 11.2.x / 12.1.x / 12.2.x Vulnerability

The version of Palo Alto Networks PAN-OS running on the remote host is a vulnerable version of 10.2.x, 11.1.x, 11.2.x, 12.1.x, or 12.2.x. It is, therefore, affected by a vulnerability. A command injection vulnerability in Palo Alto Networks PAN-OS software enables an authenticated administrator t...

Insertion of Sensitive Information into Log File

Overview openssl-encrypt is an A package for secure file encryption and decryption based on modern ciphers using heavy-compute-load chaining of hashing and KDF to generate strong encryption password based on users provided password to ensure secure encryption of files Affected versions of this...

PYSEC-2026-3956

opensslencrypt pip versions = 1.4.7 contain an information exposure vulnerability where the 'hsm fido2-test' and 'hsm onlykey-test' diagnostic commands unconditionally print the full derived hardware pepper as hex to stdout/stderr cryptcli.py, handlehsmcommand. The printed value can persist in...

PYSEC-2026-3956

opensslencrypt pip versions = 1.4.7 contain an information exposure vulnerability where the 'hsm fido2-test' and 'hsm onlykey-test' diagnostic commands unconditionally print the full derived hardware pepper as hex to stdout/stderr cryptcli.py, handlehsmcommand. The printed value can persist in...