CVE-2017-5487

CVE-2017-5487 es una vulnerabilidad en el kernel de Linux que fue descubierta y divulgada en 2017. La vulnerabilidad permite a un atacante local obtener acceso root a un sistema explotando una condición de carrera en el subsistema de gestión de claves del kernel. La vulnerabilidad puede ser...

vault-conductor

🗝️ vault-conductor Un agente SSH que proporciona claves SSH almacenadas como secretos en Bitwarden Secret Manager. Admite autenticación SSH y firma de commits de Git. Demostración Características...

securesystemslib

securesystemslib Securesystemslib 是一个用于签名和验证数字 签名的密码学接口。它是为 TUF 和 in-toto 项目开发的：密钥和签名容器 与这些项目的元数据格式兼容。 Securesystemslib 在底层可以使用各种数字签名系统 （例如 cryptography、PIV 硬件密钥 和多种基于云计算的密钥管理系统）。 安装 默认安装仅支持纯 Python ed25519 签名 验证。要启用其他方案和 签名创建功能，可以用 extras 安装 securesystemslib。参见 pyproject.toml 了解可用的 可选依赖项 。...

age

-man%20page-lightgrey%3E age es una herramienta de cifrado de archivos, un formato y una biblioteca Go simples, modernos y seguros. Cuenta con claves explícitas pequeñas, soporte post-cuántico, sin opciones de configuración y componibilidad al estilo UNIX. root@kitploit: $ age-keygen -o key.txt...

Pribado

🔐 Pribado Private API Key Management & Zero-Knowledge Infrastructure Pribado is a self-hostable, zero-knowledge platform for managing API keys, encrypted secrets, and private communications. Built on Oasis Sapphire for hardware-backed confidential computing. ✨ Features 🔑 Private API Proxy Store A...

kodex

Kodex Community Edition - CE es un kit de herramientas de código abierto para ingeniería de privacidad y seguridad. Te ayuda a automatizar medidas de seguridad de datos y protección de datos en tus flujos de trabajo de ingeniería de datos. Ofrece la siguiente funcionalidad: Leer elementos de dato...

kodex

Kodex Community Edition - CE is an open-source toolkit for privacy and security engineering. It helps you to automate data security and data protection measures in your data engineering workflows. It offers the following functionality: Read data items from a variety of sources such as files,...

CVE-2025-56802

CVE-2025-56802 Reolink 桌面应用程序中的 AES-CFB 密钥生成与管理漏洞 1. 概述 名称 : Reolink 桌面应用程序 版本 : 8.18.12 厂商 : Reolink CWE : CWE-321: 使用硬编码加密密钥, CWE-522: 凭据保护不足 CVSS : 5.1 中危 向量字符串 : CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L 2. 摘要 Reolink 桌面应用程序（版本 8.18.12）使用 AES-CFB 算法对配置文件和其他敏感数据进行加密。...

SolarWinds Web Help Desk - Authentication Bypass

SolarWinds Web Help Desk 12.8.8 HF1 and earlier contains an authentication bypass vulnerability in the WebObjects session handling. By crafting a request with a manipulated path component to an internal admin page endpoint, an unauthenticated attacker can access privileged administrative function...

Bastillion

Bastillion A modern, web-based SSH console and SSH key management tool. Bastillion gives you a clean, browser-based way to manage SSH access across all your systems — like a bastion host with a friendly dashboard. It does two things: 1. Web-based SSH terminal — once a host is registered, authoriz...

zttp

ZTTP — Proxy Trasparente Zero-Trust Un bastion host SSH self-hosted e rinforzato con gestione delle chiavi basata su Vault, applicazione delle policy RBAC, registrazione completa delle sessioni e una TUI amministrativa interattiva — progettato per team che necessitano di accesso verificabile e...

rust_citadel

Citadel Server di crittografia ibrida post-quantum e gestione delle chiavi. Citadel combina X25519 + ML-KEM-768 per l'incapsulamento delle chiavi e AES-256-GCM per la crittografia dei dati, seguendo l'approccio ibrido del NIST per la transizione post-quantum. Le applicazioni crittografano e...

EUVD-2026-66586

In the Linux kernel, the following vulnerability has been resolved: ovpn: fix NULL dereference when killing missing key ovpncryptokillkey assumes both crypto slots are populated and dereferences each slot before checking it. That is not guaranteed: a peer can have only one installed key, and the...

PT-2026-82744

A weakness in the client-side encryption configuration surface of the MongoDB C Driver causes sensitive key-management credential material supplied by the application to be reproduced verbatim in the driver's human-readable diagnostic representation of its client settings, instead of being masked...

UBUNTU-CVE-2026-80520

In the Linux kernel, the following vulnerability has been resolved: ovpn: fix NULL dereference when killing missing key ovpncryptokillkey assumes both crypto slots are populated and dereferences each slot before checking it. That is not guaranteed: a peer can have only one installed key, and the...

CVE-2026-74567

A flaw was found in the Linux kernel's key management subsystem. An unprivileged local attacker could exploit an out-of-bounds read vulnerability in the keyringgetkeychunk function. By providing specially crafted keys, the attacker can cause the system to read beyond its intended memory boundarie...

CVE-2026-74283

A flaw was found in the Linux kernel's Transparent Inter-Process Communication TIPC version 2 component. This vulnerability allows a local unprivileged attacker to bypass administrative permission checks when performing network link operations. Consequently, the attacker can modify critical TIPC...

CVE-2026-55593

Froxlor is open source server administration software. Prior to 2.3.8, the standalone lib/ajax.php entry point bypasses the centralized request validation in lib/init.php, and Ajax::handle in lib/Froxlor/Ajax/Ajax.php checks only for a valid session before routing state-changing requests. The...

CVE-2026-75110

MemOS is a memory operating system for LLMs and AI agents. In deployments where authentication is enabled AUTHENABLED=true but the undocumented, defaultless INTERNALSERVICESECRET environment variable is unset, the isinternalrequest check in src/memos/api/middleware/auth.py fails open:...

CVE-2026-75110

CVE-2026-75110 is a critical authentication bypass in MemOS , a memory operating system for LLMs and AI agents. When AUTH_ENABLED=true but the undocumented INTERNAL_SERVICE_SECRET environment variable is unset, the is_internal_request() check in src/memos/api/middleware/auth.py fails open due to ...