900 matches found
ageverificationbypass
AgeVerificationBypass AVB The Sanctuary Protocol for Sovereign Systems Why do I need to provide an ID to log into a Linux VM? This is not appropriate. ๐จ The Problem: The Archon Age-Gate As of 2026/2027, major distributions Ubuntu and Fedora have begun integrating the...
meta-lobbying-and-other-findings
Website: https://tboteproject.com Most Recent Repository: https://tboteproject.com/git/hekate/attestation-findings Help keep the server running! Monero: 451CjP6mgu12yvmDLxLduYYw5Py3Nnb91RwoRYCnhMwhGKM5hxYSaAWapq7CdRQz3qRJbUqqrnYBzW7L4aUt7nhbAYGmLSX Thank you for your support. Meta Platforms:...
safe-npm
safe-npm A security-focused npm installer that protects your projects from newly compromised packages. Why does this exist? Supply chain attacks on npm packages are a growing threat. Attackers sometimes compromise legitimate packages by: Stealing maintainer credentials Publishing malicious update...
npq
NPQ Documentation This directory contains comprehensive documentation for the NPQ Node Package Quality security auditing tool. Core Documentation optional-features.md Configuration and usage of optional security features, including recent improvements and bug fixes. age.marshall.md Detailed...
sops
SOPS: Secrets OPerationS SOPS is an editor of encrypted files that supports YAML, JSON, ENV, INI and BINARY formats and encrypts with AWS KMS, GCP KMS, Azure Key Vault, HuaweiCloud KMS, age, and PGP. demo .. image:: https://i.imgur.com/X0TM5NI.gif .. image::...
secrets-manager-rs
secs-man secs-man is a tool for managing backups of secrets with tool-independence in mind: if you encrypt your secrets with this software, you should be able to decrypt and restore them without this software. Even if secs-man disappears from the face of the Earth, your data is still accessible...
age
-man%20page-lightgrey%3E age is a simple, modern and secure file encryption tool, format, and Go library. It features small explicit keys, post-quantum support, no config options, and UNIX-style composability. $ age-keygen -o key.txt Public key:...
young-domain-guard
๐ก๏ธ Young Domain Guard A browser extension that alerts you when visiting websites with recently registered domain names. ๐ค Why? Phishing and scam domains are created and abandoned constantly โ most live less than a month before being taken down and replaced. Traditional blacklists can't keep up...
cottage
cott age is a GitOps tool for teams to manage age-encrypted secrets in git repositories. It provides a simple workflow to encrypt/decrypt secrets, manage recipients, and keep secrets out of the repo while still allowing for easy sharing via VCS. cottage also generates redacted previews of encrypt...
CVE-2024-55980
CVE-2024-55980 Wr Age Verification = 2.0.0 - Unauthenticated SQL Injection Description The Wr Age Verification plugin for WordPress is vulnerable to SQL Injection in all versions up to, and including, 2.0.0 due to insufficient escaping on the user supplied parameter and lack of sufficient...
CVE-2025-7401
CVE-2025-7401 Premium Age Verification / Restriction for WordPress = 3.0.2 - Unauthenticated Arbitrary File Read and Write ๐งพ Premium Age Verification / Restriction for WordPress = 3.0.2 โ Unauthenticated Arbitrary File Read & Write ๐ Description The "Premium Age Verification / Restriction for...
Mandating-Honeypots-Project
Mandating-Honeypots-Project As laws like the Parents Decide Act H.R.8250 and California's Digital Age Assurance Act Assembly Bill 1043 move through legislative bodies, privacy, anonymity, and data security becomes laden with systemic threats and new security architecture with unexamined attack...
WordPress Plugin Age Verification v0.4 - Open Redirect
Open redirect vulnerability in age-verification.php in the Age Verification plugin 0.4 and earlier for WordPress allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the redirectto parameter. id: CVE-2012-6499 info: name: WordPress Plugin Age...
WordPress Age Gate <= 3.5.3 - Unauthenticated Local File Inclusion
The Age Gate plugin for WordPress up to version 3.5.3 contains a local PHP file inclusion caused by the 'lang' parameter, letting unauthenticated attackers include and execute arbitrary PHP files, exploit requires no authentication. id: CVE-2025-2505 info: name: WordPress Age Gate = 3.5.3 -...
EUVD-2026-106854
Crypt::Age versions before 0.004 for Perl allow CPU exhaustion via an unbounded number of recipient stanzas, each costing an X25519 scalar multiplication in unwrapfilekey. The header parser accepts any number of recipient stanzas, and unwrapfilekey tries every identity against every X25519 stanza...
SUSE CVE-2026-111065
AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to 3.14.4, Max-Age processing can overflow and skip closing a connection. An attacker can consequently exhaust the connection pool temporarily until garbage collection resolves the connections. This issue is fix...
CVE-2026-85783
Crypt::Age versions before 0.004 for Perl allow CPU exhaustion via an unbounded number of recipient stanzas, each costing an X25519 scalar multiplication in unwrapfilekey. The header parser accepts any number of recipient stanzas, and unwrapfilekey tries every identity against every X25519 stanza...
CVE-2026-85783 Crypt::Age versions before 0.004 for Perl allow CPU exhaustion via an unbounded number of recipient stanzas, each costing an X25519 scalar multiplication in unwrap_file_key
Crypt::Age versions before 0.004 for Perl allow CPU exhaustion via an unbounded number of recipient stanzas, each costing an X25519 scalar multiplication in unwrapfilekey. The header parser accepts any number of recipient stanzas, and unwrapfilekey tries every identity against every X25519 stanza...
CVE-2026-85783 Crypt::Age versions before 0.004 for Perl allow CPU exhaustion via an unbounded number of recipient stanzas, each costing an X25519 scalar multiplication in unwrap_file_key
Crypt::Age versions before 0.004 for Perl allow CPU exhaustion via an unbounded number of recipient stanzas, each costing an X25519 scalar multiplication in unwrapfilekey. The header parser accepts any number of recipient stanzas, and unwrapfilekey tries every identity against every X25519 stanza...
CVE-2026-85783
The Crypt::Age Perl module (versions before 0.004 ) is vulnerable to CPU exhaustion due to an unbounded number of recipient stanzas in the header parser. The unwrap_file_key function attempts to match every identity against every X25519 stanza, triggering a scalar multiplication, HKDF, and ChaCha...