903 matches found
kodex
Kodex Community Edition - CE es un kit de herramientas de código abierto para ingeniería de privacidad y seguridad. Te ayuda a automatizar medidas de seguridad de datos y protección de datos en tus flujos de trabajo de ingeniería de datos. Ofrece la siguiente funcionalidad: Leer elementos de dato...
kodex
Kodex Community Edition - CE is an open-source toolkit for privacy and security engineering. It helps you to automate data security and data protection measures in your data engineering workflows. It offers the following functionality: Read data items from a variety of sources such as files,...
securesystemslib
securesystemslib Securesystemslib is a cryptography interface for signing and verifying digital signatures. It is developed for the TUF and in-toto projects: the key and signature containers are compatible with metadata formats from those projects. Under the hood, Securesystemslib can use various...
vault-conductor
🗝️ vault-conductor Un agente SSH que proporciona claves SSH almacenadas como secretos en Bitwarden Secret Manager. Admite autenticación SSH y firma de commits de Git. Demostración Características Implementa el Protocolo de Agente SSH como servidor de socket de dominio Unix, actuando como un puente...
Bastillion
Bastillion Una herramienta moderna de consola SSH basada en web y gestión de claves SSH. Bastillion te ofrece una forma limpia, basada en navegador, de gestionar el acceso SSH en todos tus sistemas — como un bastion host con un panel de control amigable. Hace dos cosas: 1. Terminal SSH basada en...
age
-man%20page-lightgrey%3E age es una herramienta de cifrado de archivos, un formato y una biblioteca Go simples, modernos y seguros. Cuenta con claves explícitas pequeñas, soporte post-cuántico, sin opciones de configuración y componibilidad al estilo UNIX. $ age-keygen -o key.txt Public key:...
SolarWinds Web Help Desk - Authentication Bypass
SolarWinds Web Help Desk 12.8.8 HF1 and earlier contains an authentication bypass vulnerability in the WebObjects session handling. By crafting a request with a manipulated path component to an internal admin page endpoint, an unauthenticated attacker can access privileged administrative function...
rust_citadel
Citadel Servidor de cifrado híbrido post-cuántico y gestión de claves. Citadel combina X25519 + ML-KEM-768 para encapsulación de claves y AES-256-GCM para cifrado de datos, siguiendo el enfoque híbrido del NIST para la transición post-cuántica. Las aplicaciones cifran y descifran datos a través d...
terrapod-PoC
Terrapod: security advisory CVE status: requested, pending assignment. This finding is published as GHSA-6qrc-597p-mrp9. On CVE assignment this repository is renamed CVE-YYYY-NNNNN-terrapod-PoC and this banner is replaced with the CVE link. | ---|--- Researcher| Dostxodjayev Abdullox @squeeze440...
CVE-2025-56802
CVE-2025-56802 AES-CFB Key Generation and Management Vulnerability in Reolink Desktop Application 1. Overview Name : Reolink Desktop Application Version : 8.18.12 Vendor : Reolink CWE : CWE-321: Use of Hard-coded Cryptographic Key, CWE-522: Insufficiently Protected Credentials CVSS : 5.1 MEDIUM...
Pribado
🔐 Pribado Gestión Privada de Claves API e Infraestructura de Conocimiento Cero Pribado es una plataforma auto-alojable y de conocimiento cero para gestionar claves API, secretos cifrados y comunicaciones privadas. Construido sobre Oasis Sapphire para computación confidencial respaldada por...
CVE-2017-5487
CVE-2017-5487 es una vulnerabilidad en el kernel de Linux que fue descubierta y divulgada en 2017. La vulnerabilidad permite a un atacante local obtener acceso root a un sistema explotando una condición de carrera en el subsistema de gestión de claves del kernel. La vulnerabilidad puede ser...
zttp
ZTTP: Zero-Trust SSH Bastion Proxy 🔗 Project Mirrors: GitHub | GitLab ZTTP is a hardened, self-hosted Zero-Trust SSH bastion proxy built in Golang with HashiCorp Vault-backed key management, RBAC policy enforcement, full session recording, and an interactive admin TUI — designed for teams who nee...
SUSE CVE-2026-96747
The client-side field level encryption support in the MongoDB Python Driver can treat a key management endpoint value ending in ".sock" as a local Unix domain socket path rather than a remote host. A user with write access to the encryption key metadata stored in the database can cause an...
DEBIAN-CVE-2026-96747
The client-side field level encryption support in the MongoDB Python Driver can treat a key management endpoint value ending in ".sock" as a local Unix domain socket path rather than a remote host. A user with write access to the encryption key metadata stored in the database can cause an...
CVE-2026-96747
The client-side field level encryption support in the MongoDB Python Driver can treat a key management endpoint value ending in ".sock" as a local Unix domain socket path rather than a remote host. A user with write access to the encryption key metadata stored in the database can cause an...
CVE-2026-96747
The client-side field level encryption support in the MongoDB Python Driver can treat a key management endpoint value ending in ".sock" as a local Unix domain socket path rather than a remote host. A user with write access to the encryption key metadata stored in the database can cause an...
PT-2026-98231
Name of the Vulnerable Software and Affected Versions MongoDB Python Driver affected versions not specified Description Client-side field level encryption support may incorrectly interpret a key management endpoint value ending in ".sock" as a local Unix domain socket path instead of a remote hos...
Bastillion v5.2.1
Bastillion A modern, web-based SSH console and SSH key management tool. Bastillion gives you a clean, browser-based way to manage SSH access across all your systems — like a bastion host with a friendly dashboard. It does two things: 1. Web-based SSH terminal — once a host is registered, authoriz...