Lucene search
+L

5719 matches found

Kitploit
Kitploit
•added 2026/11/14 6:45 p.m.•27 views

thedorkbox

thedorkbox TheDorkbox Comprehensive collection of Google Dorks & OSINT techniques to find Confidential Data Welcome to thedorkbox 👋 This is an OSINT tool which consists of various Google dorks embedded into HTML template so that non-technical users get the importance of OSINT techniques and how...

6.2AI score
SaveExploits0References2
Kitploit
Kitploit
•added 2026/11/14 3:04 p.m.•38 views

opennhp

Make the Internet Invisible to Attackers OpenNHP hides your servers, ports, and domains from the public internet. Nothing answers until a client proves who it is with a single encrypted packet, so scanners, bots, and AI-driven attackers find nothing to attack. OpenNHP is a lightweight,...

6AI score
SaveExploits0References10
Kitploit
Kitploit
•added 2026/11/14 10:27 a.m.•42 views

cmcp

cMCP: Confidential MCP Runtime Community updates and contributor highlights: AgenTrust on LinkedIn. Enforce MCP tool policy inside a TEE, where the agent it governs cannot reach it Quick Start · Architecture · Configuration · CLI · Changelog Developer Preview - launched at the Confidential...

6.3AI score
SaveExploits0References6
Kitploit
Kitploit
•added 2026/11/13 11:41 p.m.•57 views

bucket-stream

🚨 Bucket Stream is no longer maintained. If you need support or consultation for your red teaming endeavours, drop me an e-mail [email protected] 🚨 Bucket Stream Find interesting Amazon S3 Buckets by watching certificate transparency logs. This tool simply listens to various certificate...

6.1AI score
SaveExploits0
Kitploit
Kitploit
•added 2026/11/13 8:08 p.m.•85 views

trape

trape stable v2.0 People tracker on the Internet: Learn to track the world, to avoid being traced. Trape is an OSINT analysis and research tool, which allows people to track and execute intelligent social engineering attacks in real time. It was created with the aim of teaching the world how larg...

6.2AI score
SaveExploits0
NVD
NVD
•added 2026/11/12 5:17 p.m.•5 views

CVE-2026-121876

A flaw was found in the interaction between systemd-gpt-auto-generator and confidential computing guest VM images in OpenShift Sandboxed Containers confidential peer pods. systemd-gpt-auto-generator automatically discovers and mounts GPT partitions by type GUID at boot with no user confirmation. ...

7.9CVSS0.00166EPSS
SaveExploits0References2
EUVD
EUVD
•added 2026/11/12 4:55 p.m.•6 views

EUVD-2026-124550

A flaw was found in the interaction between systemd-gpt-auto-generator and confidential computing guest VM images in OpenShift Sandboxed Containers confidential peer pods. systemd-gpt-auto-generator automatically discovers and mounts GPT partitions by type GUID at boot with no user confirmation. ...

7.9CVSS6AI score0.00166EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2026/11/12 4:55 p.m.•25 views

CVE-2026-121876 Sandboxed-containers: kernel: systemd-gpt-auto-generator: guest data leakage in confidential computing (sandboxed containers)

A flaw was found in the interaction between systemd-gpt-auto-generator and confidential computing guest VM images in OpenShift Sandboxed Containers confidential peer pods. systemd-gpt-auto-generator automatically discovers and mounts GPT partitions by type GUID at boot with no user confirmation. ...

7.9CVSS0.00166EPSS
SaveExploits0References2
CVE
CVE
•added 2026/11/12 4:55 p.m.•17 views

CVE-2026-121876

A flaw exists in the interaction between systemd-gpt-auto-generator and confidential computing guest VM images in OpenShift Sandboxed Containers (confidential peer pods). The generator automatically discovers and mounts GPT partitions by type GUID at boot without user confirmation. In a confident...

7.9CVSS6AI score0.00166EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
•added 2026/11/12 4:55 p.m.•8 views

CVE-2026-121876

A flaw was found in the interaction between systemd-gpt-auto-generator and confidential computing guest VM images in OpenShift Sandboxed Containers confidential peer pods. systemd-gpt-auto-generator automatically discovers and mounts GPT partitions by type GUID at boot with no user confirmation. ...

7.9CVSS6.2AI score0.00166EPSS
SaveExploits0References3
Kitploit
Kitploit
•added 2026/11/12 1:35 p.m.•22 views

cvmimage

Tinfoil Confidential VM Tinfoil CVM is a confidential virtual machine for secure inference and custom compute workloads on AMD SEV-SNP and Intel TDX. Every byte of the final image is explicitly declared and derived from pinned inputs, the hermetic build is byte-for-byte reproducible, and anyone c...

6.2AI score
SaveExploits0
Positive Technologies
Positive Technologies
•added 2026/11/12 12:00 a.m.•7 views

PT-2026-145869

A flaw was found in the interaction between systemd-gpt-auto-generator and confidential computing guest VM images in OpenShift Sandboxed Containers confidential peer pods. systemd-gpt-auto-generator automatically discovers and mounts GPT partitions by type GUID at boot with no user confirmation. ...

7.9CVSS6.1AI score0.00166EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
•added 2026/11/12 12:00 a.m.•12 views

Linux Distros Unpatched Vulnerability : CVE-2026-123877

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A certificate validation bypass in Node.js https.Agent lets a cached TLS session authenticated under one CA policy be reused by a later request with a stricter...

6.8CVSS6.8AI score0.00214EPSS
SaveExploits0References4
osv_ubuntu
osv_ubuntu
•added 2026/11/12 12:00 a.m.•7 views

UBUNTU-CVE-2026-123877

A certificate validation bypass in Node.js https.Agent lets a cached TLS session authenticated under one CA policy be reused by a later request with a stricter policy. https.Agent.prototype.getName assigns the same Agent and session-cache key to a request that omits ca and one that explicitly...

6.8CVSS6.7AI score0.00214EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
•added 2026/11/11 11:00 p.m.•3 views

nodejs: nodejs: Certificate validation bypass via TLS session cache reuse

A flaw was found in Node.js. When managing outbound HTTPS connections, the client connection agent generates identical session-cache keys for requests with differing Certificate Authority CA trust configurations. Consequently, an existing Transport Layer Security TLS session established under a...

6.8CVSS6.6AI score0.00214EPSS
SaveExploits0References6
RedHat Linux
RedHat Linux
•added 2026/11/11 10:59 p.m.•3 views

nodejs: nodejs: Certificate validation bypass via TLS session cache reuse

A flaw was found in Node.js. When managing outbound HTTPS connections, the client connection agent generates identical session-cache keys for requests with differing Certificate Authority CA trust configurations. Consequently, an existing Transport Layer Security TLS session established under a...

6.8CVSS6.6AI score0.00214EPSS
SaveExploits0References6
RedhatCVE
RedhatCVE
•added 2026/11/11 8:59 p.m.•6 views

CVE-2026-123877

A flaw was found in Node.js. When managing outbound HTTPS connections, the client connection agent generates identical session-cache keys for requests with differing Certificate Authority CA trust configurations. Consequently, an existing Transport Layer Security TLS session established under a...

6.8CVSS6.7AI score0.00214EPSS
SaveExploits0References5
osv_debian
osv_debian
•added 2026/11/11 7:17 p.m.•8 views

DEBIAN-CVE-2026-123877

A certificate validation bypass in Node.js https.Agent lets a cached TLS session authenticated under one CA policy be reused by a later request with a stricter policy. https.Agent.prototype.getName assigns the same Agent and session-cache key to a request that omits ca and one that explicitly...

6.8CVSS6.7AI score0.00214EPSS
SaveExploits0References1
NVD
NVD
•added 2026/11/11 7:17 p.m.•7 views

CVE-2026-123877

A certificate validation bypass in Node.js https.Agent lets a cached TLS session authenticated under one CA policy be reused by a later request with a stricter policy. https.Agent.prototype.getName assigns the same Agent and session-cache key to a request that omits ca and one that explicitly...

6.8CVSS0.00214EPSS
SaveExploits0References2
osv_alpine
osv_alpine
•added 2026/11/11 7:17 p.m.•9 views

ALPINE-CVE-2026-123877

A certificate validation bypass in Node.js https.Agent lets a cached TLS session authenticated under one CA policy be reused by a later request with a stricter policy. https.Agent.prototype.getName assigns the same Agent and session-cache key to a request that omits ca and one that explicitly...

6.8CVSS6.7AI score0.00214EPSS
SaveExploits0References1
Rows per page
Query Builder