cert-pinning-flaw-poc

🗓️ 05 Oct 2026 08:26:17Reported by KitPloitType

kitploit🔗 kitploit.com👁 16 Views

POC for CVE-2016-2402 certificate pinning bypass via malicious certificate chain serving.

Reporter	Title	Published	Views	Family All 25
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities have been identified in DB2 that affect the IBM Performance Management product	20 May 202014:01	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Db2® Warehouse has released a fix in response to multiple vulnerabilities found in IBM Db2®	19 Apr 202116:53	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities have been identified in IBM® DB2® shipped with IBM PureData System for Operational Analytics	29 Apr 202501:54	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cloud Pak for Security includes components with multiple known vulnerabilities	26 Mar 202503:53	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in dependent libraries affect IBM® Db2® leading to denial of service or privilege escalation.	10 Mar 202121:20	–	ibm
GithubExploit	Exploit for Improper Certificate Validation in Squareup Okhttp	20 Mar 201618:04	–	githubexploit
Atlassian	OkHttp Certificate Pinning Vulnerability CVE-2016-2402	27 Feb 202009:43	–	atlassian
Atlassian	OkHttp Certificate Pinning Vulnerability CVE-2016-2402	27 Feb 202009:43	–	atlassian
BDU FSTEC	The vulnerability of the client’s HTTP library, OKHttp Square, related to authentication process errors allows attackers to circumvent existing security restrictions and execute “man-in-the-middle” attacks.	2 Aug 202200:00	–	bdu_fstec
CNVD	Square OkHttp Security Bypass Vulnerability	27 Feb 201600:00	–	cnvd

05 Oct 2026 08:26Current

7.2High risk

Vulners AI Score7.2

CVSS 24.3

CVSS 3.15.9

EPSS0.02249

CVE-2016-2402 certificate pinning malicious certificate HTTPS server POC