Lucene search
+L

6 matches found

OSV
OSV
•added 2025/12/18 3:47 p.m.•34 views

GHSA-X44P-GVRJ-PJ2R Amazon S3 Encryption Client for Java has a Key Commitment Issue

Summary S3 Encryption Client for Java is an open-source client-side encryption library used to facilitate writing and reading encrypted records to S3. When the encrypted data key EDK is stored in an "Instruction File" instead of S3's metadata record, the EDK is exposed to an "Invisible Salamander...

6CVSS6.9AI score0.00118EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
•added 2025/12/18 12:00 a.m.•1 views

PT-2025-54680

Summary S3 Encryption Client for Ruby is an open-source client-side encryption library used to facilitate writing and reading encrypted records to S3. When the encrypted data key EDK is stored in an "Instruction File" instead of S3's metadata record, the EDK is exposed to an "Invisible Salamander...

6CVSS0.00207EPSS
SaveExploits0References8
GitLab Advisory Database
GitLab Advisory Database
•added 2025/12/18 12:00 a.m.•19 views

Amazon S3 Encryption Client for .NET has a Key Commitment Issue

S3 Encryption Client for .NET S3EC is an open-source client-side encryption library used to facilitate writing and reading encrypted records to S3. When the encrypted data key EDK is stored in an "Instruction File" instead of S3's metadata record, the EDK is exposed to an "Invisible Salamanders"...

6CVSS6.7AI score0.00107EPSS
SaveExploits0References7
Positive Technologies
Positive Technologies
•added 2025/12/18 12:00 a.m.•1 views

PT-2025-54729

Summary S3 Encryption Client for PHP is an open-source client-side encryption library used to facilitate writing and reading encrypted records to S3. When the encrypted data key EDK is stored in an "Instruction File" instead of S3's metadata record, the EDK is exposed to an "Invisible Salamanders...

6CVSS0.00211EPSS
SaveExploits0References8
RubySec
RubySec
•added 2025/12/18 12:00 a.m.•31 views

AWS SDK for Ruby's S3 Encryption Client has a Key Commitment Issue

Summary S3 Encryption Client for Ruby is an open-source client-side encryption library used to facilitate writing and reading encrypted records to S3. When the encrypted data key EDK is stored in an "Instruction File" instead of S3's metadata record, the EDK is exposed to an "Invisible Salamander...

6CVSS7AI score0.00207EPSS
SaveExploits0References1Affected Software1
Hacker One
Hacker One
•added 2024/05/09 6:21 p.m.•10 views

Nextcloud: Invisible Salamanders Attack against end_to_end_encryption in Nextcloud

Vulnerability description not provided...

7.1AI score
SaveExploits0
Rows per page
Query Builder