hsm

zhsm Zig를 위한 하드웨어 보안 모듈HSM 라이브러리로, PIV , CAC 및 YubiKey 토큰에 대한 PC/SC 접근을 제공합니다. 상태 측면| 정보 ---|--- API 안정성| 개발 중 Zig 버전| 0.16.0 플랫폼| Linux, macOS, Windows 라이선스| MIT 기능 PIV 지원 NIST SP 800-73-4 인증서 검색 슬롯 9A, 9C, 9D, 9E PIN 확인, 변경 및 잠금 해제 ECDSA P-256/P-384 서명 RSA 2048/3072/4096 서명 RSA 복호화 CAC 지원 공통 접근...

Scalar-Venom-Attack

本稿では、現代の暗号鍵管理インフラストラクチャで発見された暗号上の脆弱性を分析し、特に楕円曲線秘密鍵を扱う際のハードウェアセキュリティモジュールHSMのアーキテクチャにおける重大な欠陥に焦点を当てます。この研究は、認定された暗号デバイスにおける不十分に隔離されたRAM管理を悪用する攻撃のクラスに注目しています。現代のビットコイン暗号エコシステムにおいて、秘密鍵のセキュリティは、世界中で数兆ドル相当のデジタル資産を保護するための基本的な要件です。FIPS...

Responsible-Alliance-Protocol

目的論的バウンディングプロトコル TBP v4.2.1 自律型AIエージェントのためのポリシー施行および暗号学的監査レイヤー。 TBPは、特定のクラスのエージェント行動 — 自律的な資金移動、産業制御システムへのアクセス、兵器システムとの統合 — を、モデル自身の推論の外側にある実行レイヤーでブロックする。意思決定は署名され（HSMバックド）、タイムスタンプが付与され（RFC...

CVE-2025-99999

CVE-2025-99999 - HSM 固件认证绕过 描述 HSM 固件 v4.5.0 中存在严重认证绕过漏洞，可导致密钥提取。 受影响系统 HSM 固件 v4.5.0（所有版本） 使用该 HSM 进行 SWIFT 交易签名的金融机构 入侵指标（IOC） IP| 端口| 描述 ---|---|--- 127.0.0.1| 5001| 用于 HSM 漏洞利用的 C2 服务器 缓解措施 立即应用供应商补丁。 参考 https://your-cti-blog.com/advisory/CVE-2025-99999...

MiniPlasma

MiniPlasma GreenPlasma（特にSetPolicyVal）で使用されていた手法を再調査したところ、cldflt!HsmOsBlockPlaceholderAccess は、6年前にMicrosoftに報告されたのとまったく同じ脆弱性に対して、依然として影響を受けることが判明しました。この脆弱性を発見したのは私ではなく、Google Project Zero の James Forshaw 氏であり、彼がMicrosoftに報告し、CVE-2020-17103 として修正されたはずでした。...

CVE-2026-87858

Temporal Server decided whether a Workflow completion callback was internal by reading a caller-supplied HTTP header. An authenticated caller holding only write permission in a single namespace could attach a completion callback whose URL host matched the configured callback address allowlist,...

CVE-2026-87858 Temporal Server completion callback source header can direct attacker-chosen requests to the internal frontend with administrator authorization

Temporal Server decided whether a Workflow completion callback was internal by reading a caller-supplied HTTP header. An authenticated caller holding only write permission in a single namespace could attach a completion callback whose URL host matched the configured callback address allowlist,...

CVE-2026-0309

A command injection vulnerability in Palo Alto Networks PAN-OS® software enables an authenticated administrator to bypass system restrictions and run arbitrary commands as a root user. To be able to exploit this issue, the user must have access to the PAN-OS CLI and the device must be configured...

CVE-2026-0309 PAN-OS: Authenticated Command Injection in CLI with Luna HSM Configuration

A command injection vulnerability in Palo Alto Networks PAN-OS® software enables an authenticated administrator to bypass system restrictions and run arbitrary commands as a root user. To be able to exploit this issue, the user must have access to the PAN-OS CLI and the device must be configured...

EUVD-2026-75255

A command injection vulnerability in Palo Alto Networks PAN-OS® software enables an authenticated administrator to bypass system restrictions and run arbitrary commands as a root user. To be able to exploit this issue, the user must have access to the PAN-OS CLI and the device must be configured...

CVE-2026-0309 PAN-OS: Authenticated Command Injection in CLI with Luna HSM Configuration

A command injection vulnerability in Palo Alto Networks PAN-OS® software enables an authenticated administrator to bypass system restrictions and run arbitrary commands as a root user. To be able to exploit this issue, the user must have access to the PAN-OS CLI and the device must be configured...

CVE-2026-0309

CVE-2026-0309 is currently a reserved candidate with no publicly available technical details. The vulnerability has not yet been announced. Monitor for updates once the assigning organization publicizes the entry.

CVE-2026-0309: Improper Neutralization of Special Elements used in an OS Command

A command injection vulnerability in Palo Alto Networks PAN-OS® software enables an authenticated administrator to bypass system restrictions and run arbitrary commands as a root user. To be able to exploit this issue, the user must have access to the PAN-OS CLI and the device must be configured...

PT-2026-89277

A command injection vulnerability in Palo Alto Networks PAN-OS® software enables an authenticated administrator to bypass system restrictions and run arbitrary commands as a root user. To be able to exploit this issue, the user must have access to the PAN-OS CLI and the device must be configured...

PAN-OS: Authenticated Command Injection in CLI with Luna HSM Configuration

A command injection vulnerability in Palo Alto Networks PAN-OS® software enables an authenticated administrator to bypass system restrictions and run arbitrary commands as a root user. To be able to exploit this issue, the user must have access to the PAN-OS CLI and the device must be configured...

Palo Alto Networks PAN-OS 10.2.x / 11.1.x / 11.2.x / 12.1.x / 12.2.x Vulnerability

The version of Palo Alto Networks PAN-OS running on the remote host is a vulnerable version of 10.2.x, 11.1.x, 11.2.x, 12.1.x, or 12.2.x. It is, therefore, affected by a vulnerability. A command injection vulnerability in Palo Alto Networks PAN-OS software enables an authenticated administrator t...

Insertion of Sensitive Information into Log File

Overview openssl-encrypt is an A package for secure file encryption and decryption based on modern ciphers using heavy-compute-load chaining of hashing and KDF to generate strong encryption password based on users provided password to ensure secure encryption of files Affected versions of this...

PYSEC-2026-3956

opensslencrypt pip versions = 1.4.7 contain an information exposure vulnerability where the 'hsm fido2-test' and 'hsm onlykey-test' diagnostic commands unconditionally print the full derived hardware pepper as hex to stdout/stderr cryptcli.py, handlehsmcommand. The printed value can persist in...

PYSEC-2026-3956

opensslencrypt pip versions = 1.4.7 contain an information exposure vulnerability where the 'hsm fido2-test' and 'hsm onlykey-test' diagnostic commands unconditionally print the full derived hardware pepper as hex to stdout/stderr cryptcli.py, handlehsmcommand. The printed value can persist in...

CVE-2026-74870 openssl_encrypt before 1.4.8 Hardware Pepper Information Disclosure

opensslencrypt pip versions = 1.4.7 contain an information exposure vulnerability where the 'hsm fido2-test' and 'hsm onlykey-test' diagnostic commands unconditionally print the full derived hardware pepper as hex to stdout/stderr cryptcli.py, handlehsmcommand. The printed value can persist in...