sops

SOPS: Secrets OPerationS SOPS is an editor of encrypted files that supports YAML, JSON, ENV, INI and BINARY formats and encrypts with AWS KMS, GCP KMS, Azure Key Vault, HuaweiCloud KMS, age, and PGP. demo .. image:: https://i.imgur.com/X0TM5NI.gif .. image::...

pyrite

Hardware-Bound & Cloud-Gated Binary Execution and Anti-Tamper Envelope Sealing for Crystal. What is Pyrite? Pyrite ensures that your compiled Crystal binary only executes on your authorized infrastructure. If an adversary extracts, leaks, steals, or modifies the binary, execution halts immediatel...

Zeus

Zeus AWS Auditing & Hardening Tool Zeus is a powerful tool for AWS EC2 / S3 / CloudTrail / CloudWatch / KMS best hardening practices. It checks security settings according to the profiles the user creates and changes them to recommended settings based on the CIS AWS Benchmark source at request of...

CVE-2026-105941

The Azure Key Vault KMS provider in Kroxylicious accepts an untrusted vaultName from wire-deserialized EDEK bytes without format validation, enabling SSRF that exfiltrates the proxy's Azure bearer token to an attacker-controlled host. Token replay against the real Key Vault defeats the entire...

CVE-2026-105941 Kroxylicious-kms-provider-azure-key-vault-kms: streams for apache kafka kroxylicious: azure key vault ssrf exfiltrates bearer token via untrusted edek vaultname

The Azure Key Vault KMS provider in Kroxylicious accepts an untrusted vaultName from wire-deserialized EDEK bytes without format validation, enabling SSRF that exfiltrates the proxy's Azure bearer token to an attacker-controlled host. Token replay against the real Key Vault defeats the entire...

EUVD-2026-104983

The Azure Key Vault KMS provider in Kroxylicious accepts an untrusted vaultName from wire-deserialized EDEK bytes without format validation, enabling SSRF that exfiltrates the proxy's Azure bearer token to an attacker-controlled host. Token replay against the real Key Vault defeats the entire...

CVE-2026-105941 Kroxylicious-kms-provider-azure-key-vault-kms: streams for apache kafka kroxylicious: azure key vault ssrf exfiltrates bearer token via untrusted edek vaultname

The Azure Key Vault KMS provider in Kroxylicious accepts an untrusted vaultName from wire-deserialized EDEK bytes without format validation, enabling SSRF that exfiltrates the proxy's Azure bearer token to an attacker-controlled host. Token replay against the real Key Vault defeats the entire...

CVE-2026-105941 Kroxylicious-kms-provider-azure-key-vault-kms: streams for apache kafka kroxylicious: azure key vault ssrf exfiltrates bearer token via untrusted edek vaultname

The Azure Key Vault KMS provider in Kroxylicious accepts an untrusted vaultName from wire-deserialized EDEK bytes without format validation, enabling SSRF that exfiltrates the proxy's Azure bearer token to an attacker-controlled host. Token replay against the real Key Vault defeats the entire...

CVE-2026-105941

The Azure Key Vault KMS provider in Kroxylicious is vulnerable to a Server-Side Request Forgery (SSRF) due to a lack of format validation on the vaultName parameter received from wire-deserialized EDEK bytes. This flaw allows an attacker to exfiltrate the proxy's Azure bearer token to an attacker...

CVE-2026-105941

The Azure Key Vault KMS provider in Kroxylicious accepts an untrusted vaultName from wire-deserialized EDEK bytes without format validation, enabling SSRF that exfiltrates the proxy's Azure bearer token to an attacker-controlled host. Token replay against the real Key Vault defeats the entire...

CVE-2026-90363

A flaw was found in the Linux kernel's drm/msm component. During the initialization of Kernel Mode Setting KMS, an error handling path attempts to deallocate resources twice. This double deallocation leads to a use-after-free error, which can cause a system crash. A local attacker could potential...

CVE-2026-92287

A flaw was found in Apache Arrow and PyArrow. When reading encrypted Parquet files configured with a Key Management Service KMS client, unvalidated KMS server addresses embedded within the file can be passed directly to the client implementation. An attacker can supply a maliciously crafted Parqu...

CVE-2026-92287

Pass-through of unvalidated KMS URLs to KMS clients in Apache C++ Parquet and PyArrow versions 4.0.0 to 25.0.1. This affects users who read Parquet files and configure Parquet decryption properties with a KmsClient implementation. On the reader side, the KMS URL can be application-controlled...

EUVD-2026-104836

Pass-through of unvalidated KMS URLs to KMS clients in Apache C++ Parquet and PyArrow versions 4.0.0 to 25.0.1. This affects users who read Parquet files and configure Parquet decryption properties with a KmsClient implementation. On the reader side, the KMS URL can be application-controlled...

CVE-2026-92287 Apache Arrow C++, PyArrow: Parquet file-controlled KMS URL is forwarded to pluggable KmsClient that skips host validation

Pass-through of unvalidated KMS URLs to KMS clients in Apache C++ Parquet and PyArrow versions 4.0.0 to 25.0.1. This affects users who read Parquet files and configure Parquet decryption properties with a KmsClient implementation. On the reader side, the KMS URL can be application-controlled...

CVE-2026-92287

Apache Arrow C++ Parquet and PyArrow versions 4.0.0 through 25.0.1 are vulnerable to an improper input validation issue (CWE-20) where file-controlled KMS URLs are forwarded to pluggable KmsClient implementations without host validation. If a user does not use application-controlled settings, an ...

PT-2026-118284

Pass-through of unvalidated KMS URLs to KMS clients in Apache C++ Parquet and PyArrow versions 4.0.0 to 25.0.1. This affects users who read Parquet files and configure Parquet decryption properties with a KmsClient implementation. On the reader side, the KMS URL can be application-controlled...

openmeetings-kms-unauth

abraxaslabs.tech · github.com/abraxas · @abraxasnull · [email protected] · openmeetings-kms-unauth openmeetings-kms-unauth Class: Unauth KMS Reach: Remote Apache OpenMeetings 9.1.0 9773c59e - Apache Software Foundation OpenMeetings Java defaults kurento.ws.url to loopback. Official...

CVE-2026-100348 vulnerabilities

Vulnerabilities for packages: nuclei, crossplane-provider-aws-dynamodb, crossplane-provider-aws-elasticache, crossplane-provider-aws-eks, crossplane-provider-azure-storage, crossplane-provider-family-azure, crossplane-provider-aws-sqs, crossplane-provider-aws-ec2,...

CVE-2026-100351 vulnerabilities

Vulnerabilities for packages: nuclei, crossplane-provider-aws-dynamodb, crossplane-provider-aws-elasticache, crossplane-provider-aws-eks, crossplane-provider-azure-storage, crossplane-provider-family-azure, crossplane-provider-aws-sqs, crossplane-provider-aws-ec2,...