abdal-lockbox

🔐 Abdal LockBox 🌐 Read in your language: 🇬🇧 English | 🇨🇳 中文 | 🇷🇺 Русский | 🇪🇸 Español | 🇯🇵 日本語 | 🇮🇷 فارسی | 🇸🇦 العربية | 🇹🇷 Türkçe | 🇩🇪 Deutsch | 🇮🇳 हिन्दी Secure. Store. Autofill. — A privacy-first Android password manager by Abdal Security Group. Abdal LockBox keeps your credentials encrypted on...

Azure

Azure Offensive Security Toolkit A collection of Bash and PowerShell scripts for Azure security assessments, covering IAM privilege escalation, container security, Key Vault exposure, Entra ID configuration, and more. Designed to run in Azure Cloud Shell or any authenticated terminal. Scripts IAM...

Pribado

🔐 Pribado Private API Key Management & Zero-Knowledge Infrastructure Pribado is a self-hostable, zero-knowledge platform for managing API keys, encrypted secrets, and private communications. Built on Oasis Sapphire for hardware-backed confidential computing. ✨ Features 🔑 Private API Proxy Store A...

CVE-2026-87993

The consul-template library is vulnerable to an information disclosure issue in its error handling path that may allow Vault secret values to appear in template error messages, log output, and downstream surfaces such as Nomad task events. This vulnerability CVE-2026-87993 is fixed in...

CVE-2026-87993 Consul-template vulnerable to an information disclosure issue in error handling

The consul-template library is vulnerable to an information disclosure issue in its error handling path that may allow Vault secret values to appear in template error messages, log output, and downstream surfaces such as Nomad task events. This vulnerability CVE-2026-87993 is fixed in...

CVE-2026-87993 Consul-template vulnerable to an information disclosure issue in error handling

The consul-template library is vulnerable to an information disclosure issue in its error handling path that may allow Vault secret values to appear in template error messages, log output, and downstream surfaces such as Nomad task events. This vulnerability CVE-2026-87993 is fixed in...

CVE-2026-87993

The consul-template library is vulnerable to an information disclosure issue in its error handling path , which may allow Vault secret values to appear in template error messages, log output, and downstream surfaces such as Nomad task events . The vulnerability is rated CVSS 7.7 (High) with a net...

EUVD-2026-75701

The consul-template library is vulnerable to an information disclosure issue in its error handling path that may allow Vault secret values to appear in template error messages, log output, and downstream surfaces such as Nomad task events. This vulnerability CVE-2026-87993 is fixed in...

CVE-2026-87993 Consul-template vulnerable to an information disclosure issue in error handling

The consul-template library is vulnerable to an information disclosure issue in its error handling path that may allow Vault secret values to appear in template error messages, log output, and downstream surfaces such as Nomad task events. This vulnerability CVE-2026-87993 is fixed in...

The Vault by Focused Hunts

The Vault Your Secrets. Your Control. Most password managers want you to trust a company you don't know with your sensitive data. They control the servers and the keys, and you have to hope nothing goes wrong. The Vault does things differently. Your encrypted vault files stay on cloud storage you...

Shadow-Vault

Shadow Vault 🔐 Shadow Vault 是一款轻量级 PHP 网络工具，专为系统管理员 设计，用于在共享托管环境中安全地向 shadow 文件添加新的用户凭据。它会自动检测现有的 shadow 老化格式，使用 SHA-512 密码哈希，支持多种写入回退方法，甚至还提供了一键自动登录 cPanel 网络邮件（端口 2096）的功能。 ⚠️ 免责声明 ：此工具仅用于合法的服务器管理 。在您并不拥有的系统上进行未经授权的访问或使用是违法的。请自行承担使用风险。 功能 ✅ SHA-512 密码哈希 ，使用随机盐（$6$） ✅ 动态 shadow 老化检测 ——...

CLEANSTART-2026-QK89502 ToASCII and ToUnicode functions incorrectly accept Punycode-encoded labels that decode to an ASCII-only label

Multiple security vulnerabilities affect the vault-k8s package. The ToASCII and ToUnicode functions incorrectly accept Punycode-encoded labels that decode to an ASCII-only label. See references for individual vulnerability details...

CVE-2021-2175

Proof of Concept is published here: https://databasesecurityninja.wordpress.com/2022/02/02/cve-2021-2175-database-vault-metadata-exposure-vulnerability/...

vault-cve-2026-5006-audit

CVE-2026-5006 toolkit HCSEC-2026-32 Two tools for working through the Vault templated-policy slash-injection vulnerability: an interactive walkthrough for explaining and scoping the issue, and an audit script that checks a live cluster and writes the findings to Markdown...

CLEANSTART-2026-KP10631 source-address critical option in the Permissions returned by an authentication callback was only enforced for the PublicKeyCallback and VerifiedPublicKeyCallback paths, extending the fix for CVE-2...

Multiple security vulnerabilities affect the vault-k8s package. The source-address critical option in the Permissions returned by an authentication callback was only enforced for the PublicKeyCallback and VerifiedPublicKeyCallback paths, extending the fix for CVE-2026-46595. See references for...

lsPass

lsPass — local, encrypted password manager GTK4 / gtkmm-4 · C++23 · CMake · SQLite · libsodium lsPass stores logins, secure notes and API keys in a local encrypted vault. No network, no cloud, no telemetry. Nothing secret is ever written to disk in plaintext. Build & test root@kitploit: sudo apt...

CVE-2024-3094

CVE-2024-3094 I've moved my notes in Obsidian to a separate vault and this GitHub repository to be able to share it. The start page is CVE-2024-3094 xz supply chain. Installation Clone the repo with git. root@kitploit: git clone https://github.com/reuteras/CVE-2024-3094.git Then open the checked...

CVE-2026-86808

moltis-org moltis (versions up to 20260818.10) contains a missing authentication vulnerability in the vault_unlock_handler/vault_recovery_handler function of vault.rs. A remote attacker with no privileges or user interaction can exploit this to achieve low impact on confidentiality, integrity, an...

Aegis v3.4.3

Aegis Authenticator Aegis Authenticator is a free, secure and open source 2FA app for Android. It aims to provide a secure authenticator for your online services, while also including some features missing in existing authenticator apps, like proper encryption and backups. Aegis supports HOTP and...

My-Exploits

My-Exploits Vulnerability research I have done on four widely deployed platform services: Keycloak, Apache NiFi, HashiCorp Vault and HashiCorp Nomad. For each finding this repo carries the write-once artifacts I actually use, a Metasploit module where it made sense, a standalone Python proof of...