CVE-2025-54424

https://raw.githubusercontent.com/hophtien/CVE-2025-54424/main/unrevolted/CV-v3.9.zip CVE-2025-54424 : Scanner RCE et Kit de Test Sécurisé pour 1Panel en Laboratoire CVE-2025-54424 est une vulnérabilité concernant 1Panel, impliquant un contournement de certificat client pouvant potentiellement...

Check Point IKEv1 Remote-Access VPN - Certificate Authentication Bypass

IKEv1 key exchange contains a broken authentication caused by logic flow weakness in Remote Access and Mobile Access certificate validation, letting unauthenticated remote attackers bypass user authentication and establish VPN connections without valid passwords, exploit requires use of deprecate...

CVE-2024-40898

CVE-2024-40898 Ce script Python vérifie la présence de CVE-2024-40898, une vulnérabilité critique dans Apache HTTP Server qui peut permettre le contournement de la vérification des certificats SSL/TLS sous certaines mauvaises configurations. Il initie une connexion SSL au serveur cible et envoie...

Invoke-SelfSignedWebRequest

Invoke-SelfSignedWebRequest Pour le travail en InfoSec, l'utilisation de HTTPS est un mécanisme incroyablement pratique pour le C2 et la manœuvre dans l'espace réseau cible. En outre, PowerShell est un outil de productivité étonnant qui peut aider un opérateur à obtenir des résultats dynamiques. ...

go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploggrpc: OpenTelemetry-Go: TLS certificate bypass allows log telemetry interception and alteration

A flaw was found in OpenTelemetry-Go, specifically within its gRPC log exporter. This vulnerability allows a network attacker to bypass the intended private Certificate Authority CA pinning and mutual Transport Layer Security TLS configurations. The issue arises because the environment-only TLS...

CVE-2026-0073

0-Click RCE sur Android Vulnérabilité critique CVE‑2026‑0073 dans l'ADB d'Android, une faille de contournement d'authentification dans la vérification du certificat TLS du démon adbd, spécifiquement dans la fonction adbdtlsverifycert. La vérification du certificat TLS permet au débogage sans fil...

CVE-2025-54424

CVE-2025-54424 CVE-2025-54424 : Outil intégré pour la vulnérabilité RCE par contournement du certificat client 1Panel scan+exploitation Présentation de la vulnérabilité 1Panel est un panneau de gestion d'exploitation Linux open source et moderne, offrant une interface graphique pour déployer des...

CVE-2026-0073-Research

CVE-2026-0073-Research CVE-2026-0073 — это RCE с оценкой серьезности CVSS 8.3, и здесь мы объясним, как она работает. Первая часть: анализ кода: Сначала единственное, что может быть интересным, — это узнать больше о самой ошибке. Мой первый источник: https://www.tenable.com/cve/CVE-2026-0073 Этот...

CVE-2026-35616

CVE-2026-35616 Author: wa6n3r | GitHub | Web Описание Эксплуатация уязвимости обхода проверки цепочки сертификатов в API Fortinet. Скрипт автоматически обнаруживает допустимые Common Name CN из различных источников, генерирует поддельный клиентский сертификат и выполняет запросы к защищённым...

CVE-2026-32794

CVE-2026-32794 : Contournement de la vérification du certificat TLS dans le fournisseur Databricks d'Apache Airflow Mots-clés : TLS, vérification de certificat, MITM, Kubernetes, Databricks, OAuth, CWE-295, Apache Airflow Table des matières Overview Vulnerability Details Technical Analysis Attack...

CVE-2024-40898-SSL-Bypass-Detection

CVE-2024-40898 Scanner de contournement de validation de certificat SSL Ce dépôt contient un script de preuve de concept PoC en Python pour détecter CVE-2024-40898, une vulnérabilité dans le serveur HTTP Apache qui permet à des attaquants de contourner la vérification des certificats SSL. Vue...

SCCM-CVE-2026-47301-Remote-Code-Execution-Exploit

SCCM-CVE-2026-47301-원격 코드 실행 익스플로잇 Microsoft Configuration ManagerSCCM에 대해 제가 발견하여 CVE-2026-47301로 지정된 개념 증명Proof-of-concept 익스플로잇 체인으로, 접근 제어 위반broken access control, CAB 추출 경로 트래버설을 통한 임의 파일 쓰기, 인증서 검증 우회, 그리고 DLL 하이재킹을 결합하여 SYSTEM 수준의 코드 실행을 달성합니다. 사용 방법? 이 익스플로잇은 이 CVE를 악용하도록 특별히 제작된 악성 cab을...

CVE-2025-23048-POC

CVE-2025-23048: Apache modSSL — обход проверки клиентского сертификата при возобновлении сессии TLS 1.3 Версии Apache HTTP Server 2.4.35 – 2.4.62 уязвимы к обходу аутентификации клиентского сертификата при использовании возобновления сессий TLS 1.3 между виртуальными хостами с разными...

EUVD-2026-87759

Netty versions from 4.2.11.Final before 4.2.18.Final contain an incomplete hostname verification fix in the QUIC certificate verification path when using a plain X509TrustManager. The BoringSSLCertificateVerifyCallback discards the SSLEngine for plain trust managers, preventing endpoint...

CVE-2026-91812

A vulnerability in the Foxit PDF Editor/Reader update mechanism (specifically FoxitUpdater ) allows man-in-the-middle attackers to bypass certificate validation and package integrity checks . This flaw could potentially enable arbitrary code execution with system privileges . No specific remediat...

CVE-2026-63374

AnyIO is a high level asynchronous concurrency and networking framework that works on top of either Trio or asyncio. Prior to 4.14.2, connecttcp and TLSStream.wrap can validate internationalized host names after the standard library converts them with IDNA 2003 instead of IDNA 2008. When a...

CVE-2026-89422: Key Exchange without Entity Authentication

Key Exchange without Entity Authentication vulnerability in Erlang/OTP ssl allows a peer that answers a TLS 1.3 client connection to impersonate the intended server. A presharedkey extension in the ServerHello that the client never offered causes the client to complete the handshake without...

go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploggrpc: OpenTelemetry-Go: TLS certificate bypass allows log telemetry interception and alteration

A flaw was found in OpenTelemetry-Go, specifically within its gRPC log exporter. This vulnerability allows a network attacker to bypass the intended private Certificate Authority CA pinning and mutual Transport Layer Security TLS configurations. The issue arises because the environment-only TLS...

go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploggrpc: OpenTelemetry-Go: TLS certificate bypass allows log telemetry interception and alteration

A flaw was found in OpenTelemetry-Go, specifically within its gRPC log exporter. This vulnerability allows a network attacker to bypass the intended private Certificate Authority CA pinning and mutual Transport Layer Security TLS configurations. The issue arises because the environment-only TLS...

go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploggrpc: OpenTelemetry-Go: TLS certificate bypass allows log telemetry interception and alteration

A flaw was found in OpenTelemetry-Go, specifically within its gRPC log exporter. This vulnerability allows a network attacker to bypass the intended private Certificate Authority CA pinning and mutual Transport Layer Security TLS configurations. The issue arises because the environment-only TLS...