Lucene search
+L

80 matches found

Kitploit
Kitploit
added 2026/09/14 2:44 a.m.9 views

sharemylogin

ShareMyLogin Open Source This is the public source code for ShareMyLogin.com. What is ShareMyLogin? ShareMyLogin is a secure tool for sharing sensitive information like passwords, API keys, or config secrets. The Problem Sending a password over Slack, Email, or WhatsApp creates a permanent record...

6AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/13 9:00 p.m.6 views

CloakBin

CloakBin Zero-Knowledge Encrypted Pastebin Your data is encrypted before it leaves your browser. We can't read it. No one can. Live Demo • Report Bug • Request Feature Why Zero-Knowledge? Traditional pastebins store your data in plaintext. Server admins, hackers, or anyone with database access ca...

6AI score
SaveExploits0References5
Kitploit
Kitploit
added 2026/09/13 7:28 p.m.10 views

xtrace-sdk

The encrypted vector database. Your data never leaves your machine in plaintext. Documentation | X | LinkedIn Manage your AI memory → mem.xtrace.ai What is XTrace? Every vector database on the market requires you to hand your data to a third party in plaintext. XTrace doesn't. Your documents and...

6AI score
SaveExploits0References3
NVD
NVD
added 2026/09/10 7:17 p.m.8 views

CVE-2026-88032

A use-after-free in the reactive client-side encryption component of the MongoDB Java Driver can cause native resources to be freed while an affected encrypted operation is still using them when the operation is cancelled. A party able to cause such an operation to be cancelled may cause the...

8.2CVSS0.00152EPSS
SaveExploits0References1
MongoDB
MongoDB
added 2026/09/10 6:02 p.m.9 views

Application denial of service via cancellation race in reactive client-side encryption in MongoDB Java Driver

A use-after-free in the reactive client-side encryption component of the MongoDB Java Driver can cause native resources to be freed while an affected encrypted operation is still using them when the operation is cancelled. A party able to cause such an operation to be cancelled may cause the...

8.2CVSS0.00152EPSS
SaveExploits0References1Affected Software3
Cvelist
Cvelist
added 2026/09/10 6:02 p.m.34 views

CVE-2026-88032 Application denial of service via cancellation race in reactive client-side encryption in MongoDB Java Driver

A use-after-free in the reactive client-side encryption component of the MongoDB Java Driver can cause native resources to be freed while an affected encrypted operation is still using them when the operation is cancelled. A party able to cause such an operation to be cancelled may cause the...

8.2CVSS0.00152EPSS
SaveExploits0References1
CVE
CVE
added 2026/09/10 6:02 p.m.26 views

CVE-2026-88032

A use-after-free vulnerability in the reactive client-side encryption component of the MongoDB Java Driver allows an attacker who can cause an affected encrypted operation to be cancelled to free native resources while they are still in use, leading to hosting application process termination (den...

8.2CVSS0.00152EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2026/09/10 6:02 p.m.12 views

CVE-2026-88032 Application denial of service via cancellation race in reactive client-side encryption in MongoDB Java Driver

A use-after-free in the reactive client-side encryption component of the MongoDB Java Driver can cause native resources to be freed while an affected encrypted operation is still using them when the operation is cancelled. A party able to cause such an operation to be cancelled may cause the...

8.2CVSS0.00152EPSS
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/09 2:52 a.m.7 views

PublicSafe

PublicSafe Tu Navegador, Tu Espacio Seguro PublicSafe es una extensión de navegador gratuita y de código abierto centrada en la privacidad, el cifrado y el control del usuario. Proporciona herramientas de cifrado del lado del cliente diseñadas para ayudar a los usuarios a proteger información...

5.7AI score
SaveExploits0References1
Tenable Nessus
Tenable Nessus
added 2026/09/04 12:00 a.m.9 views

Linux Distros Unpatched Vulnerability : CVE-2026-84962

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An unauthorized user with key vault write access may cause an authorized client to issue arbitrary authenticated Google Cloud KMS API calls under the authorized...

5.7CVSS6.4AI score0.00117EPSS
SaveExploits0References3
OSV
OSV
added 2026/09/04 12:00 a.m.5 views

UBUNTU-CVE-2026-84962

An unauthorized user with key vault write access may cause an authorized client to issue arbitrary authenticated Google Cloud KMS API calls under the authorized user's identity, escalating database-level access into cloud key control and defeating client-side encryption...

5.7CVSS5.9AI score0.00117EPSS
SaveExploits0References3
NVD
NVD
added 2026/09/03 4:18 p.m.9 views

CVE-2026-84962

An unauthorized user with key vault write access may cause an authorized client to issue arbitrary authenticated Google Cloud KMS API calls under the authorized user's identity, escalating database-level access into cloud key control and defeating client-side encryption...

5.7CVSS0.00117EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/09/03 3:03 p.m.10 views

EUVD-2026-70516

An unauthorized user with key vault write access may cause an authorized client to issue arbitrary authenticated Google Cloud KMS API calls under the authorized user's identity, escalating database-level access into cloud key control and defeating client-side encryption...

5.7CVSS6AI score0.00117EPSS
SaveExploits0References1
CVE
CVE
added 2026/09/03 3:03 p.m.26 views

CVE-2026-84962

CVE-2026-84962 is a CRLF injection vulnerability in MongoDB client-side encryption (tracked as MONGOCRYPT-960) affecting GCP key identifier strings . An unauthorized user with key vault write access can forge authenticated Google Cloud KMS API calls under an authorized user's identity by injectin...

5.7CVSS6AI score0.00117EPSS
SaveExploits0References1
Debian CVE
Debian CVE
added 2026/09/03 3:03 p.m.8 views

CVE-2026-84962

An unauthorized user with key vault write access may cause an authorized client to issue arbitrary authenticated Google Cloud KMS API calls under the authorized user's identity, escalating database-level access into cloud key control and defeating client-side encryption...

5.7CVSS5.5AI score0.00117EPSS
SaveExploits0
NVD
NVD
added 2026/08/27 8:18 p.m.12 views

CVE-2026-81530

A weakness in the client-side encryption configuration surface of the MongoDB C Driver causes sensitive key-management credential material supplied by the application to be reproduced verbatim in the driver's human-readable diagnostic representation of its client settings, instead of being masked...

6.8CVSS0.00066EPSS
SaveExploits0References2
EUVD
EUVD
added 2026/08/27 6:32 p.m.9 views

EUVD-2026-67214

A weakness in the client-side encryption configuration surface of the MongoDB C Driver causes sensitive key-management credential material supplied by the application to be reproduced verbatim in the driver's human-readable diagnostic representation of its client settings, instead of being masked...

6.8CVSS5.3AI score0.00066EPSS
SaveExploits0References2
MongoDB
MongoDB
added 2026/08/27 6:32 p.m.18 views

KMS master key exposure via unredacted credential serialization in driver settings string

A weakness in the client-side encryption configuration surface of the MongoDB C Driver causes sensitive key-management credential material supplied by the application to be reproduced verbatim in the driver's human-readable diagnostic representation of its client settings, instead of being masked...

6.8CVSS5.8AI score0.00066EPSS
SaveExploits0References2Affected Software1
Positive Technologies
Positive Technologies
added 2026/08/27 12:00 a.m.22 views

PT-2026-82744

A weakness in the client-side encryption configuration surface of the MongoDB C Driver causes sensitive key-management credential material supplied by the application to be reproduced verbatim in the driver's human-readable diagnostic representation of its client settings, instead of being masked...

6.8CVSS5.3AI score0.00066EPSS
SaveExploits0References2
NVD
NVD
added 2026/08/06 10:17 p.m.13 views

CVE-2026-48081

OpenReception's appointment booking software provides an end-to-end encrypted appointment booking platform. Prior to version 1.0.2, a TENANTADMIN can store javascript: URLs in the tenant links configuration website, imprint, privacyStatement. These values are returned to the patient-facing landin...

8.1CVSS0.00143EPSS
SaveExploits0References2
Rows per page
Query Builder