age

-man%20page-lightgrey%3E age è uno strumento di crittografia per file semplice, moderno e sicuro, un formato e una libreria Go. Offre chiavi esplicite di piccole dimensioni, supporto post-quantistico, nessuna opzione di configurazione e componibilità in stile UNIX. root@kitploit: $ age-keygen -o...

kodex

Kodex Community Edition - CE è un toolkit open-source per l'ingegneria della privacy e della sicurezza. Ti aiuta ad automatizzare le misure di sicurezza e protezione dei dati nei tuoi flussi di lavoro di data engineering. Offre le seguenti funzionalità: Leggere elementi di dati da una varietà di...

SolarWinds Web Help Desk - Authentication Bypass

SolarWinds Web Help Desk 12.8.8 HF1 and earlier contains an authentication bypass vulnerability in the WebObjects session handling. By crafting a request with a manipulated path component to an internal admin page endpoint, an unauthenticated attacker can access privileged administrative function...

CVE-2017-5487

CVE-2017-5487 è una vulnerabilità nel kernel Linux scoperta e divulgata nel 2017. La vulnerabilità permette a un attaccante locale di ottenere accesso root a un sistema sfruttando una condizione di competizione nel sottosistema di gestione delle chiavi del kernel. La vulnerabilità può essere...

kodex

Kodex Community Edition - CE is an open-source toolkit for privacy and security engineering. It helps you to automate data security and data protection measures in your data engineering workflows. It offers the following functionality: Read data items from a variety of sources such as files,...

vault-conductor

🗝️ vault-conductor Um agente SSH que fornece chaves SSH armazenadas no Bitwarden Secret Manager como segredos. Suporta autenticação SSH e assinatura de commits Git. Demonstração Funcionalidades...

Pribado

🔐 Pribado Gestione privata delle chiavi API e infrastruttura Zero-Knowledge Pribado è una piattaforma auto-ospitabile e zero-knowledge per la gestione di chiavi API, segreti crittografati e comunicazioni private. Realizzata su Oasis Sapphire per il calcolo confidenziale supportato da hardware. ✨...

securesystemslib

securesystemslib Securesystemslib è un'interfaccia crittografica per la firma e la verifica di firme digitali. È sviluppato per i progetti TUF e in-toto: i contenitori di chiavi e firme sono compatibili con i formati di metadati di questi progetti. Dietro le quinte, Securesystemslib può utilizzar...

rust_citadel

Citadel Post-Quanten-Hybrid-Verschlüsselungs- und Schlüsselverwaltungsserver. Citadel kombiniert X25519 + ML-KEM-768 zur Schlüsselkapselung und AES-256-GCM zur Datenverschlüsselung, gemäß dem Hybridansatz von NIST für den Post-Quanten-Übergang. Anwendungen verschlüsseln und entschlüsseln Daten üb...

CVE-2026-74567

A flaw was found in the Linux kernel's key management subsystem. An unprivileged local attacker could exploit an out-of-bounds read vulnerability in the keyringgetkeychunk function. By providing specially crafted keys, the attacker can cause the system to read beyond its intended memory boundarie...

CVE-2026-74283

A flaw was found in the Linux kernel's Transparent Inter-Process Communication TIPC version 2 component. This vulnerability allows a local unprivileged attacker to bypass administrative permission checks when performing network link operations. Consequently, the attacker can modify critical TIPC...

CVE-2026-55593

Froxlor is open source server administration software. Prior to 2.3.8, the standalone lib/ajax.php entry point bypasses the centralized request validation in lib/init.php, and Ajax::handle in lib/Froxlor/Ajax/Ajax.php checks only for a valid session before routing state-changing requests. The...

CVE-2026-75110

MemOS is a memory operating system for LLMs and AI agents. In deployments where authentication is enabled AUTHENABLED=true but the undocumented, defaultless INTERNALSERVICESECRET environment variable is unset, the isinternalrequest check in src/memos/api/middleware/auth.py fails open:...

CVE-2026-75110

CVE-2026-75110 is a critical authentication bypass in MemOS , a memory operating system for LLMs and AI agents. When AUTH_ENABLED=true but the undocumented INTERNAL_SERVICE_SECRET environment variable is unset, the is_internal_request() check in src/memos/api/middleware/auth.py fails open due to ...

CVE-2026-75110 MemOS Authentication Bypass via Unset INTERNAL_SERVICE_SECRET

MemOS is a memory operating system for LLMs and AI agents. In deployments where authentication is enabled AUTHENABLED=true but the undocumented, defaultless INTERNALSERVICESECRET environment variable is unset, the isinternalrequest check in src/memos/api/middleware/auth.py fails open:...

CVE-2026-75110 MemOS Authentication Bypass via Unset INTERNAL_SERVICE_SECRET

MemOS is a memory operating system for LLMs and AI agents. In deployments where authentication is enabled AUTHENABLED=true but the undocumented, defaultless INTERNALSERVICESECRET environment variable is unset, the isinternalrequest check in src/memos/api/middleware/auth.py fails open:...

EUVD-2026-60389

MemOS is a memory operating system for LLMs and AI agents. In deployments where authentication is enabled AUTHENABLED=true but the undocumented, defaultless INTERNALSERVICESECRET environment variable is unset, the isinternalrequest check in src/memos/api/middleware/auth.py fails open:...

CVE-2026-74894

opensslencrypt before 1.4.0 contains an authentication bypass vulnerability in the verifyapitoken function that accepts any non-empty Bearer token string without validation. Attackers can upload arbitrary public keys, enumerate all keys, and revoke keys belonging to any user by providing any Bear...

CVE-2026-74894

The PHP package openssl_encrypt before version 1.4.0 has a broken verify_api_token function that accepts any non-empty Bearer token, allowing unauthenticated attackers to upload arbitrary public keys, enumerate all keys, and revoke any user's keys. CVSS 9.8 Critical. Upgrade to 1.4.0. No in-the-w...

EUVD-2026-60113

opensslencrypt before 1.4.0 contains an authentication bypass vulnerability in the verifyapitoken function that accepts any non-empty Bearer token string without validation. Attackers can upload arbitrary public keys, enumerate all keys, and revoke keys belonging to any user by providing any Bear...