sslscan

sslscan2 sslscan versione 2 è stata ora rilasciata. Include una importante riscrittura del codice di scansione backend, il che significa che non dipende più dalla versione di OpenSSL per molti controlli. Questo permette di supportare protocolli legacy SSLv2 e SSLv3, oltre a supportare TLSv1.3 -...

wolfssl

wolfSSL Embedded SSL/TLS Library The wolfSSL embedded SSL library formerly CyaSSL is a lightweight SSL/TLS library written in ANSI C and targeted for embedded, RTOS, and resource-constrained environments - primarily because of its small size, speed, and feature set. It is commonly used in standar...

CVE-2026-55215

MariaDB Connector/Node.js is vulnerable to cleartext password disclosure via a man-in-the-middle attack when ssl: true is set without a pinned CA or server certificate. The root cause lies in the TLS handshake logic: in handshake.js, a server selecting mysql_clear_password as the initial authenti...

CVE-2026-67598

CVE-2026-67598 Emlog Pro — Deaktivierte TLS-Zertifikatsprüfung im KI-Assistenten Netzwerknaher MITM → Diebstahl des LLM-Anbieter-API-Schlüssels & Injektion von KI-Antworten...

CVE-2025-23048-POC

CVE-2025-23048: Bypass del certificato client nella ripresa della sessione TLS 1.3 di Apache modssl Le versioni 2.4.35 – 2.4.62 di Apache HTTP Server sono vulnerabili a un bypass dell'autenticazione tramite certificato client quando la ripresa della sessione TLS 1.3 viene utilizzata tra virtual...

CVE-2026-81341

wolfEngine before 1.4.1 sources the explicit AES-CCM nonce for TLS 1.2 and DTLS 1.2 records from the record input buffer instead of the TLS sequence number carried in the additional authenticated data. Because the record layer leaves the explicit-nonce field for the cipher to populate, the value...

CVE-2026-81020

wolfEngine before 1.4.1 generates the 8-byte explicit AES-GCM nonce once when the TLS write key is set and never increments it per record. As a result every TLS 1.2 and DTLS 1.2 AES-GCM record within a connection is encrypted under an identical key and nonce pair. Reusing a GCM key and nonce...

CVE-2026-81019

wolfProvider before 1.2.2 generates the 8-byte explicit AES-GCM nonce once when the TLS write key is set and never increments it per record. As a result every TLS 1.2 and DTLS 1.2 AES-GCM record within a connection is encrypted under an identical key and nonce pair. Reusing a GCM key and nonce...

cve-2025-0282-ivanti_rce_reproduction

CVE-2025-0282 — Ivanti Connect Secure / Policy Secure / ZTA Gateways — RCE por Estouro de Buffer Baseado na Pilha CVSS 9.0 — CRÍTICO | Zero-Day Explorado Ativamente | Descoberto em Janeiro de 2025 Visão Geral CVE-2025-0282 é uma vulnerabilidade de estouro de buffer baseado na pilha CWE-121 /...

CVE-2026-0073-Android-ADBD-bypass-POC_zh_CN

CVE-2026-0073 — Bypass dell'autenticazione TLS ADBD di Android Confusione di tipo EVPPKEYcmp → shell ADB non autorizzata 🔥 Panoramica Nel daemon ADB di Android adbd esiste una vulnerabilità critica di bypass dell'autenticazione che consente a qualsiasi attaccante sulla rete locale di ottenere una...

CVE-2026-32794

CVE-2026-32794: Bypass della Verifica dei Certificati TLS nel Provider Databricks di Apache Airflow Parole chiave: TLS, verifica dei certificati, MITM, Kubernetes, Databricks, OAuth, CWE-295, Apache Airflow Indice Panoramica Dettagli della Vulnerabilità Analisi Tecnica Catena di Attacco Impatto...

CVE-2026-0073

🤖 CVE-2026-0073 - Bypass dell'autenticazione ADB wireless 📌 Panoramica CVE-2026-0073 è una vulnerabilità critica di bypass dell'autenticazione nell'ADB wireless di Android demone adbd. Un attaccante sulla stessa rete può aggirare l'autenticazione TLS reciproca e connettersi al dispositivo senza...

CVE-2018-6574

Os arquivos main.go e attack.so são usados para explorar CVE-2018-6574, estamos usando o github por causa do TLS...

dugganusa-ietf

DugganUSA — Contribuições para o IETF Hackathon Contribuições reais de inteligência de ameaças da DugganUSA LLC para o IETF Hackathon, oferecidas aos champions dos projetos como fundamentação empírica para o trabalho de padronização. Somos uma empresa bootstrapped autofinanciada de inteligência d...

CVE-2014-0160.

CVE-2014-0160 Laboratorio per costruire un ambiente Heartbleed per leakare la memoria delle webapp Questo repository si concentra sulla creazione di un container per fornire un ambiente in cui sia facile sfruttare nginx tramite la tecnica Heartbleed, concentrandosi su: Allestimento dell'ambiente...

CVE-2026-81341 wolfEngine reuses the AES-CCM nonce on TLS 1.2 / DTLS 1.2 records

wolfEngine before 1.4.1 sources the explicit AES-CCM nonce for TLS 1.2 and DTLS 1.2 records from the record input buffer instead of the TLS sequence number carried in the additional authenticated data. Because the record layer leaves the explicit-nonce field for the cipher to populate, the value...

CVE-2026-81341

wolfEngine (before 1.4.1 ) reuses the AES-CCM nonce on TLS 1.2 and DTLS 1.2 records because it sources the explicit nonce from the record input buffer rather than the TLS sequence number. Since the record layer leaves that field for the cipher to populate, the value is constant, meaning every AES...

CVE-2026-81341 wolfEngine reuses the AES-CCM nonce on TLS 1.2 / DTLS 1.2 records

wolfEngine before 1.4.1 sources the explicit AES-CCM nonce for TLS 1.2 and DTLS 1.2 records from the record input buffer instead of the TLS sequence number carried in the additional authenticated data. Because the record layer leaves the explicit-nonce field for the cipher to populate, the value...

EUVD-2026-67738

wolfEngine before 1.4.1 sources the explicit AES-CCM nonce for TLS 1.2 and DTLS 1.2 records from the record input buffer instead of the TLS sequence number carried in the additional authenticated data. Because the record layer leaves the explicit-nonce field for the cipher to populate, the value...

CVE-2026-81020 wolfEngine reuses the AES-GCM nonce on every TLS 1.2 / DTLS 1.2 record

wolfEngine before 1.4.1 generates the 8-byte explicit AES-GCM nonce once when the TLS write key is set and never increments it per record. As a result every TLS 1.2 and DTLS 1.2 AES-GCM record within a connection is encrypted under an identical key and nonce pair. Reusing a GCM key and nonce...