In-Spectre-Meltdown

إن سبكتر-ميلتداون تتيح هذه الأداة فحص هجمات القنوات الجانبية للتنفيذ التخميني التي تؤثر على العديد من المعالجات الحديثة وتصاميم أنظمة التشغيل. تسمح CVE-2017-5754 Meltdown و CVE-2017-5715 Spectre للعمليات غير المميزة بسرقة الأسرار من العمليات المميزة. تقدم هذه الهجمات 3 طرق مختلفة لمهاجمة تدابير...

redact

redact Удаляет похожий на учётные данные контент из строк произвольной формы до того, как он попадёт в журналы, телеметрию или на любую стороннюю поверхность Частьнабора инструментов phpboyscout Go — небольшие Go-модули без фреймворков, извлечённые из go-tool-base. Документация:...

CVE-2026-27886-check

أداة تقييم الثغرة CVE-2026-27886 اكتشف بأمان ما إذا كانت مثيل Strapi معرضة لـ CVE-2026-27886 دون تنفيذ سلسلة الاستيلاء الكاملة على الحساب. اطلع على الشرح الكامل على مدونة Bishop Fox. الوصف CVE-2026-27886 هي ثغرة تجاوز لتعقيم المعاملات غير الموثقة في إصدارات Strapi من 4.0.0 إلى 5.36.1، تسمح...

git-alerts

GitAlerts Quel problème résout-il ? Les dépôts GitHub créés sous une organisation peuvent être contrôlés par les administrateurs GitHub. Cependant, tout dépôt créé sous le compte utilisateur d'une organisation n'est pas contrôlable à moins que l'organisation n'ait adopté le modèle d'utilisateur...

dracon-utilities

Dracon Utilities Three small Rust CLI tools that look after a Linux development machine: one keeps your git repos committed and backed up, one keeps your disk and memory from falling over, and one stops secrets from landing in your git history. They run as ordinary user-level systemd services — n...

yolo-cage

yolo-cage : agents de codage autonomes qui ne font aucun mal Vous êtes un ingénieur responsable. Vous ne laisseriez jamais une IA piétiner vos systèmes et codebases les plus sensibles. C'est pourquoi vous ne désactiveriez jamais les protections d'un outil comme Claude Code. Il demande la permissi...

CVE-2026-73834

A flaw was found in the must-gather component of Red Hat Advanced Cluster Management for Kubernetes. Certain ACM wrapper Custom Resources that embed Secret data are collected without redaction. When an administrator runs must-gather, credentials and tokens are captured in cleartext in the resulti...

CVE-2026-73834

A flaw in the must-gather component of Red Hat Advanced Cluster Management for Kubernetes allows ACM wrapper Custom Resources that embed Secret data to be collected without redaction . When an administrator runs must-gather, credentials and tokens are captured in cleartext in the resulting archiv...

CVE-2026-74876

opensslencrypt versions before 1.4.0 contain a vulnerability in PublicKeyBundle.fromdict that creates key bundles from untrusted data without verifying signatures. Attackers can call fromdict followed by toidentity without signature verification to encrypt data using attacker-controlled public...

CVE-2026-74876

In openssl_encrypt before 1.4.0, PublicKeyBundle.from_dict() accepts untrusted key bundle data without signature verification. Attackers can craft a malicious bundle, call to_identity(), and encrypt secrets to an attacker-controlled public key, enabling confidential data exfiltration. CVSS 9.8 cr...

CVE-2026-74876 openssl_encrypt before 1.4.0 Unverified Key Bundle Encryption

opensslencrypt versions before 1.4.0 contain a vulnerability in PublicKeyBundle.fromdict that creates key bundles from untrusted data without verifying signatures. Attackers can call fromdict followed by toidentity without signature verification to encrypt data using attacker-controlled public...

CVE-2026-74876 openssl_encrypt before 1.4.0 Unverified Key Bundle Encryption

opensslencrypt versions before 1.4.0 contain a vulnerability in PublicKeyBundle.fromdict that creates key bundles from untrusted data without verifying signatures. Attackers can call fromdict followed by toidentity without signature verification to encrypt data using attacker-controlled public...

GO-2026-5602 vulnerabilities

Vulnerabilities for packages: external-secrets-operator...

hashi-vault-js: Vault token and secret values exposed in thrown errors

Summary Vault token and secret values are exposed in thrown errors when using hashi-vault-js. Details Every API method in Vault.js executes throw parseAxiosErrorerr, which returns the raw AxiosError untouched. That error carries the full Axios configuration, including the X-Vault-Token header and...

GHSA-5PQ8-3FFP-7W5M hashi-vault-js: Vault token and secret values exposed in thrown errors

Summary Vault token and secret values are exposed in thrown errors when using hashi-vault-js. Details Every API method in Vault.js executes throw parseAxiosErrorerr, which returns the raw AxiosError untouched. That error carries the full Axios configuration, including the X-Vault-Token header and...

EUVD-2025-210715

CPSD CryptoPro Secure Disk for Bitlocker before v7.7.4 stores TPM2.0 secrets in a serialized format within unused disk sectors. An unauthenticated attacker with physical access to the system disk can recover this information and craft an environment to unseal the TPM...

EUVD-2026-55698

The Yandex Lockbox secrets backend in Apache Airflow's Yandex provider resolved a team-scoped Connection or Variable id through the team-agnostic lookup when the team-scoped lookup missed. In a deployment running multi-team mode with this backend, a caller in one team could resolve a secret...

CVE-2026-68870

The Azure Key Vault secrets backend in Apache Airflow's Microsoft Azure provider resolved a team-scoped Connection or Variable id through the team-agnostic lookup when the team-scoped lookup missed. In a deployment running multi-team mode with this backend, a caller in one team could resolve a...

Astra Linux – Vulnerability in Node.js

A flaw in Node.js’s buffer allocation logic can expose uninitialized memory when allocations are interrupted, especially when using the vm module with the timeout option. Under certain timing conditions, buffers allocated using Buffer.alloc and other TypedArray instances like Uint8Array may conta...

CVE-2026-19264

Postiz is an open-source social media scheduling tool affected by CVE-2026-19264. The vulnerability arises in the route that serves locally stored media, which concatenates URL path segments into the upload directory and streams files without proper path normalization or directory confinement. UR...