Bastillion

Bastillion A modern, web-based SSH console and SSH key management tool. Bastillion gives you a clean, browser-based way to manage SSH access across all your systems — like a bastion host with a friendly dashboard. It does two things: 1. Web-based SSH terminal — once a host is registered, authoriz...

rust_citadel

Citadel Post-quantum hybrid encryption and key management server. Citadel combines X25519 + ML-KEM-768 for key encapsulation and AES-256-GCM for data encryption, following NIST's hybrid approach for the post-quantum transition. Applications encrypt and decrypt data through a REST API. Citadel...

age

-man%20page-lightgrey%3E age is a simple, modern and secure file encryption tool, format, and Go library. It features small explicit keys, post-quantum support, no config options, and UNIX-style composability. $ age-keygen -o key.txt Public key:...

vault-conductor

🗝️ vault-conductor An SSH Agent that provides SSH keys stored in Bitwarden Secret Manager as secrets. Supports SSH authentication and Git commit signing. Demo Features It implements the SSH Agent Protocol as a Unix domain socket server, acting as a secure bridge between your SSH clients and...

kodex

Kodex Community Edition - CE is an open-source toolkit for privacy and security engineering. It helps you to automate data security and data protection measures in your data engineering workflows. It offers the following functionality: Read data items from a variety of sources such as files,...

Pribado

🔐 Pribado Private API Key Management & Zero-Knowledge Infrastructure Pribado is a self-hostable, zero-knowledge platform for managing API keys, encrypted secrets, and private communications. Built on Oasis Sapphire for hardware-backed confidential computing. ✨ Features 🔑 Private API Proxy Store A...

SolarWinds Web Help Desk - Authentication Bypass

SolarWinds Web Help Desk 12.8.8 HF1 and earlier contains an authentication bypass vulnerability in the WebObjects session handling. By crafting a request with a manipulated path component to an internal admin page endpoint, an unauthenticated attacker can access privileged administrative function...

CVE-2026-99245

A flaw was found in the Linux kernel. A local user could bypass keyring link restrictions due to a race condition in the kernel's key management subsystem. This issue occurs when the kernel checks link restrictions before acquiring the necessary lock during key linking operations, racing against...

CVE-2026-99225

A flaw was found in the Linux kernel. A local attacker could exploit this vulnerability to cause a Denial of Service DoS by crashing the system. This flaw occurs due to a race condition in the key management subsystem during process keyring searches, where revoking an authorization key concurrent...

CVE-2026-99224

A flaw was found in the Linux kernel's key management subsystem. A local user can cause a Denial of Service DoS or potentially achieve arbitrary code execution by exploiting a race condition when retrieving key information while the corresponding kernel module is being unloaded. This issue occurs...

CVE-2026-99222

A flaw was found in the Linux kernel's key management subsystem. A local user can cause a Denial of Service DoS by triggering a use-after-free condition during key read operations. This issue occurs because the key validation check accesses key type data without holding the proper lock, allowing...

CVE-2026-99220

A flaw was found in the Linux kernel. A local, unprivileged attacker could exploit this vulnerability to cause a Denial of Service DoS by crashing the system. The issue occurs within the asymmetric key management subsystem when applying restrictions using a key that lacks identifiers, such as a...

PT-2026-135513

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free issue exists in the kernel's key management system. A race condition occurs when a request to describe a key is processed simultaneously with the unloading of a networki...

CVE-2025-56802

CVE-2025-56802 AES-CFB Key Generation and Management Vulnerability in Reolink Desktop Application 1. Overview Name : Reolink Desktop Application Version : 8.18.12 Vendor : Reolink CWE : CWE-321: Use of Hard-coded Cryptographic Key, CWE-522: Insufficiently Protected Credentials CVSS : 5.1 MEDIUM...

securesystemslib

securesystemslib Securesystemslib is a cryptography interface for signing and verifying digital signatures. It is developed for the TUF and in-toto projects: the key and signature containers are compatible with metadata formats from those projects. Under the hood, Securesystemslib can use various...

zttp

ZTTP: Zero-Trust SSH Bastion Proxy 🔗 Project Mirrors: GitHub | GitLab ZTTP is a hardened, self-hosted Zero-Trust SSH bastion proxy built in Golang with HashiCorp Vault-backed key management, RBAC policy enforcement, full session recording, and an interactive admin TUI — designed for teams who nee...

CVE-2017-5487

CVE-2017-5487 is a vulnerability in the Linux kernel that was discovered and disclosed in 2017. The vulnerability allows a local attacker to gain root access to a system by exploiting a race condition in the key management subsystem of the kernel. The vulnerability can be exploited by a user with...

terrapod-PoC

Terrapod: security advisory CVE status: requested, pending assignment. This finding is published as GHSA-6qrc-597p-mrp9. On CVE assignment this repository is renamed CVE-YYYY-NNNNN-terrapod-PoC and this banner is replaced with the CVE link. | ---|--- Researcher| Dostxodjayev Abdullox @squeeze440...

EUVD-2026-113392

joserfc: Unbounded JWE General JSON recipients Array Leads to CPU Exhaustion DoS via Repeated RSA Private-Key Decryption...

Linux Distros Unpatched Vulnerability : CVE-2026-119283

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - joserfc is a Python library that provides an implementation of several JSON Object Signing and Encryption JOSE standards. Prior to 1.7.5, joserfc.jwe.decryptjso...