sslyze

Note Current development of SSLyze now takes place on a separate repository: https://github.com/nabla-c0d3/sslyze. This repository will periodically be updated from this new parent repository, but for the most current version, please check the new repo. If you cloned the repository but wish to...

gringotts

CVE-2020-0601 proof of concept A fun proof of concept to create your own root CA and signed certificate based on the CVE-2020-0601 vulnerability in Windows 10. The basis for the issue is the CertGetCertificateChain method improperly validated root certificate authorities. Since the search for a...

CVE-2026-20127-Exploit-Extension

Executive Summary The CVE-2026-20127 Defensive Companion is a premier, enterprise-grade Browser Extension engineered for proactive threat intelligence and defensive analysis. This tool encapsulates authoritative technical research concerning the authentication bypass vulnerability in the Cisco...

rustbuster

rustbuster A Comprehensive Web Fuzzer and Content Discovery Tool Introduction Check the blog post: Introducing Rustbuster — A Comprehensive Web Fuzzer and Content Discovery Tool Download You can download prebuilt binaries from here. Installation installrustbuster echo "Installing latest version o...

badecparams

BADECPARAMS Proof of Concept for CVE-2020-0601. badecparams.py generates an intermediate certificate authority that exploits the vulnerability, then issues Authenticode and TLS certificates. The TLS certificates have Extended Validation in Microsoft Edge and Internet Explorer. httpd.py serves the...

EUVD-2026-100741

CAI Content Credentials is affected by an Improper Certificate Validation vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized write access. Exploit depends on conditions beyond the attacker's...

EUVD-2026-100735

CAI Content Credentials is affected by an Improper Certificate Validation vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized write access. Exploit depends on conditions beyond the attacker's...

EUVD-2026-100734

CAI Content Credentials is affected by an Improper Certificate Validation vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized write access. Exploitation of this issue does not require user...

EUVD-2026-100731

CAI Content Credentials is affected by an Improper Certificate Validation vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized write access. Exploitation of this issue does not require user...

EUVD-2026-100729

CAI Content Credentials is affected by an Improper Certificate Validation vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized write access. Exploitation of this issue does not require user...

EUVD-2026-100722

CAI Content Credentials is affected by an Improper Certificate Validation vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized write access. Exploitation of this issue does not require user...

CVE-2026-103294

The CAI Content Credentials software is affected by an Improper Certificate Validation (CWE-295) vulnerability. This flaw could allow an attacker to bypass security measures and gain unauthorized write access . The attack vector is network-based with high complexity, and exploitation does not req...

CVE-2026-100116

The CAI Content Credentials product is affected by an Improper Certificate Validation vulnerability (CWE-295). This flaw could allow an attacker to bypass security features and gain unauthorized write access . While the exploit does not require user interaction, it depends on conditions beyond th...

CVE-2026-100123

The Adobe Content Credentials SDK is affected by an Improper Certificate Validation vulnerability (CWE-295). An attacker can exploit this flaw to bypass security measures and gain unauthorized write access to the file system. This vulnerability can be exploited remotely without user interaction. ...

CVE-2026-100122

The CAI Content Credentials software is affected by an Improper Certificate Validation vulnerability (CWE-295). This flaw allows an attacker to bypass security features and gain unauthorized write access without requiring any user interaction. While the specific technical root cause is not detail...

CVE-2026-100121

The CAI Content Credentials product is affected by an Improper Certificate Validation vulnerability (CWE-295). An attacker could exploit this flaw to bypass security measures and obtain unauthorized write access without requiring any user interaction. The vulnerability is classified with a High b...

CVE-2026-100118

The CAI Content Credentials software is affected by an Improper Certificate Validation vulnerability (CWE-295). An attacker can exploit this flaw to bypass security features and achieve unauthorized write access . Exploitation of this issue requires no user interaction. Specific affected versions...

CVE-2026-77816

The IBM WebSphere Application Server - Liberty administrative client (versions 17.0.0.3 through 26.0.0.9 ) is vulnerable to a man-in-the-middle attack due to Improper Certificate Validation (CWE-295). An attacker could exploit this flaw to obtain sensitive information. This vulnerability also aff...

CVE-2026-96222

Improper certificate validation in Active Directory Federation Services AD FS allows an unauthorized attacker to perform spoofing over a network...

CVE-2026-96222

A vulnerability in Active Directory Federation Services (AD FS) stems from improper certificate validation . This flaw allows an unauthorized attacker to perform spoofing over a network. The vulnerability has a base severity of 7.4 (High) according to the CVSS 3.1 metric provided. No specific exp...