Lucene search
+L

280 matches found

Kitploit
Kitploit
added 2026/08/25 7:49 p.m.2 views

In-Spectre-Meltdown

إن سبكتر-ميلتداون تتيح هذه الأداة فحص هجمات القنوات الجانبية للتنفيذ التخميني التي تؤثر على العديد من المعالجات الحديثة وتصاميم أنظمة التشغيل. تسمح CVE-2017-5754 Meltdown و CVE-2017-5715 Spectre للعمليات غير المميزة بسرقة الأسرار من العمليات المميزة. تقدم هذه الهجمات 3 طرق مختلفة لمهاجمة تدابير...

5.6CVSS7.1AI score0.84172EPSS
SaveExploits11
Kitploit
Kitploit
added 2026/08/25 5:07 a.m.1 views

redact

redact Удаляет похожий на учётные данные контент из строк произвольной формы до того, как он попадёт в журналы, телеметрию или на любую стороннюю поверхность Частьнабора инструментов phpboyscout Go — небольшие Go-модули без фреймворков, извлечённые из go-tool-base. Документация:...

5.5AI score
SaveExploits0References4
Kitploit
Kitploit
added 2026/08/24 5:44 p.m.2 views

CVE-2026-27886-check

أداة تقييم الثغرة CVE-2026-27886 اكتشف بأمان ما إذا كانت مثيل Strapi معرضة لـ CVE-2026-27886 دون تنفيذ سلسلة الاستيلاء الكاملة على الحساب. اطلع على الشرح الكامل على مدونة Bishop Fox. الوصف CVE-2026-27886 هي ثغرة تجاوز لتعقيم المعاملات غير الموثقة في إصدارات Strapi من 4.0.0 إلى 5.36.1، تسمح...

9.2CVSS6AI score0.00612EPSS
SaveExploits5References2
Kitploit
Kitploit
added 2026/08/24 4:27 a.m.3 views

git-alerts

GitAlerts Quel problème résout-il ? Les dépôts GitHub créés sous une organisation peuvent être contrôlés par les administrateurs GitHub. Cependant, tout dépôt créé sous le compte utilisateur d'une organisation n'est pas contrôlable à moins que l'organisation n'ait adopté le modèle d'utilisateur...

5.3AI score
SaveExploits0References1
Kitploit
Kitploit
added 2026/08/24 2:30 a.m.2 views

dracon-utilities

Dracon Utilities Three small Rust CLI tools that look after a Linux development machine: one keeps your git repos committed and backed up, one keeps your disk and memory from falling over, and one stops secrets from landing in your git history. They run as ordinary user-level systemd services — n...

5.4AI score
SaveExploits0
Kitploit
Kitploit
added 2026/08/23 5:37 a.m.2 views

yolo-cage

yolo-cage : agents de codage autonomes qui ne font aucun mal Vous êtes un ingénieur responsable. Vous ne laisseriez jamais une IA piétiner vos systèmes et codebases les plus sensibles. C'est pourquoi vous ne désactiveriez jamais les protections d'un outil comme Claude Code. Il demande la permissi...

5.4AI score
SaveExploits0References13
NVD
NVD
added 2026/08/18 4:18 p.m.5 views

CVE-2026-73834

A flaw was found in the must-gather component of Red Hat Advanced Cluster Management for Kubernetes. Certain ACM wrapper Custom Resources that embed Secret data are collected without redaction. When an administrator runs must-gather, credentials and tokens are captured in cleartext in the resulti...

5.5CVSS0.0008EPSS
SaveExploits0References2
CVE
CVE
added 2026/08/18 3:15 p.m.15 views

CVE-2026-73834

A flaw in the must-gather component of Red Hat Advanced Cluster Management for Kubernetes allows ACM wrapper Custom Resources that embed Secret data to be collected without redaction . When an administrator runs must-gather, credentials and tokens are captured in cleartext in the resulting archiv...

5.5CVSS5.4AI score0.0008EPSS
SaveExploits0References2
NVD
NVD
added 2026/08/17 11:16 a.m.9 views

CVE-2026-74876

opensslencrypt versions before 1.4.0 contain a vulnerability in PublicKeyBundle.fromdict that creates key bundles from untrusted data without verifying signatures. Attackers can call fromdict followed by toidentity without signature verification to encrypt data using attacker-controlled public...

9.8CVSS0.00201EPSS
SaveExploits0References2
CVE
CVE
added 2026/08/17 11:04 a.m.25 views

CVE-2026-74876

In openssl_encrypt before 1.4.0, PublicKeyBundle.from_dict() accepts untrusted key bundle data without signature verification. Attackers can craft a malicious bundle, call to_identity(), and encrypt secrets to an attacker-controlled public key, enabling confidential data exfiltration. CVSS 9.8 cr...

9.8CVSS5.3AI score0.00201EPSS
SaveExploits0References2
OSV
OSV
added 2026/08/17 11:04 a.m.4 views

CVE-2026-74876 openssl_encrypt before 1.4.0 Unverified Key Bundle Encryption

opensslencrypt versions before 1.4.0 contain a vulnerability in PublicKeyBundle.fromdict that creates key bundles from untrusted data without verifying signatures. Attackers can call fromdict followed by toidentity without signature verification to encrypt data using attacker-controlled public...

9.3CVSS5.5AI score
SaveExploits0References4
Cvelist
Cvelist
added 2026/08/17 11:04 a.m.39 views

CVE-2026-74876 openssl_encrypt before 1.4.0 Unverified Key Bundle Encryption

opensslencrypt versions before 1.4.0 contain a vulnerability in PublicKeyBundle.fromdict that creates key bundles from untrusted data without verifying signatures. Attackers can call fromdict followed by toidentity without signature verification to encrypt data using attacker-controlled public...

9.8CVSS0.00201EPSS
SaveExploits0References2
Wolfi
Wolfi
added 2026/08/14 8:24 a.m.12 views

GO-2026-5602 vulnerabilities

Vulnerabilities for packages: external-secrets-operator...

5.3AI score
SaveExploits0
Github Security Blog
Github Security Blog
added 2026/08/13 2:14 p.m.9 views

hashi-vault-js: Vault token and secret values exposed in thrown errors

Summary Vault token and secret values are exposed in thrown errors when using hashi-vault-js. Details Every API method in Vault.js executes throw parseAxiosErrorerr, which returns the raw AxiosError untouched. That error carries the full Axios configuration, including the X-Vault-Token header and...

5.5AI score
SaveExploits0References2Affected Software1
OSV
OSV
added 2026/08/13 2:14 p.m.6 views

GHSA-5PQ8-3FFP-7W5M hashi-vault-js: Vault token and secret values exposed in thrown errors

Summary Vault token and secret values are exposed in thrown errors when using hashi-vault-js. Details Every API method in Vault.js executes throw parseAxiosErrorerr, which returns the raw AxiosError untouched. That error carries the full Axios configuration, including the X-Vault-Token header and...

5.5AI score
SaveExploits0References2
EUVD
EUVD
added 2026/08/12 12:00 a.m.15 views

EUVD-2025-210715

CPSD CryptoPro Secure Disk for Bitlocker before v7.7.4 stores TPM2.0 secrets in a serialized format within unused disk sectors. An unauthenticated attacker with physical access to the system disk can recover this information and craft an environment to unseal the TPM...

4.6CVSS5.1AI score0.00181EPSS
SaveExploits0References3
EUVD
EUVD
added 2026/08/10 6:18 p.m.8 views

EUVD-2026-55698

The Yandex Lockbox secrets backend in Apache Airflow's Yandex provider resolved a team-scoped Connection or Variable id through the team-agnostic lookup when the team-scoped lookup missed. In a deployment running multi-team mode with this backend, a caller in one team could resolve a secret...

5.3AI score0.00328EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2026/08/10 6:10 p.m.8 views

CVE-2026-68870

The Azure Key Vault secrets backend in Apache Airflow's Microsoft Azure provider resolved a team-scoped Connection or Variable id through the team-agnostic lookup when the team-scoped lookup missed. In a deployment running multi-team mode with this backend, a caller in one team could resolve a...

5.3AI score0.00225EPSS
SaveExploits0References4
AstraLinux
AstraLinux
added 2026/08/10 7:11 a.m.8 views

Astra Linux – Vulnerability in Node.js

A flaw in Node.js’s buffer allocation logic can expose uninitialized memory when allocations are interrupted, especially when using the vm module with the timeout option. Under certain timing conditions, buffers allocated using Buffer.alloc and other TypedArray instances like Uint8Array may conta...

7.1CVSS7.6AI score0.03383EPSS
SaveExploits0References3
CVE
CVE
added 2026/08/07 2:15 p.m.80 views

CVE-2026-19264

Postiz is an open-source social media scheduling tool affected by CVE-2026-19264. The vulnerability arises in the route that serves locally stored media, which concatenates URL path segments into the upload directory and streams files without proper path normalization or directory confinement. UR...

9.8CVSS5.4AI score0.00771EPSS
SaveExploits1References3
Rows per page
Query Builder