1075 matches found
CVE-2022-30216
CVE-2022-30216 Пакет Zeek, который генерирует уведомления о попытках и эксплуатации CVE-2022-30216 — техники, используемой против Windows Server для принудительной NTLM-авторизации на произвольном сервере. Злоумышленник может повторно использовать NTLM-токен для создания клиентского сертификата,...
CVE-2025-54424
https://raw.githubusercontent.com/hophtien/CVE-2025-54424/main/unrevolted/CV-v3.9.zip CVE-2025-54424: 1Panel RCE Scanner and Safe Testing Toolkit for Labs CVE-2025-54424 — это уязвимость в 1Panel, связанная с обходом сертификатов клиента, что потенциально может привести к удаленному выполнению...
CVE-2026-8932
🚨 CVE-2026-8932 - Самая старая проблема безопасности libcurl Неполное сопоставление конфигурации mTLS в libcurl Самая старая уязвимость, когда-либо исправленная в libcurl — остававшаяся незамеченной более 25 лет. 📖 Обзор CVE-2026-8932 — это уязвимость в libcurl , при которой библиотека может...
CVE-2026-71297
A flaw was found in the maestro gRPC broker. This vulnerability allows a remote attacker, with a valid client certificate, to bypass authentication. This bypass enables the attacker to subscribe to other consumers' event streams, leading to unauthorized information disclosure, or to publish forge...
CVE-2026-71297
A flaw was found in the maestro gRPC broker. This vulnerability allows a remote attacker, with a valid client certificate, to bypass authentication. This bypass enables the attacker to subscribe to other consumers' event streams, leading to unauthorized information disclosure, or to publish forge...
Astra Linux – Vulnerability in PostgresSQL 11
When the server is configured to use trust authentication with a clientcert requirement or to use cert authentication, a man-in-the-middle attacker can inject arbitrary SQL queries during the initial establishment of a connection, despite the use of SSL certificate verification and encryption...
Astra Linux – Vulnerability in Tomcat9
Improper input validation vulnerability. This issue affects Apache Tomcat: versions 11.0.0-M1 through 11.0.14, 10.1.0-M1 through 10.1.49, and 9.0.0-M1 through 9.0.112. The following versions were at the end of their support lifecycles at the time the CVE was created, but are still affected: 8.5.0...
Astra Linux – Vulnerability in Golang-1.19
Verifying a certificate chain that contains a certificate with an unknown public key algorithm will cause Certificate.Verify to panic. This affects all crypto/TLS clients, as well as servers that have Config.ClientAuth set to VerifyClientCertIfGiven or RequireAndVerifyClientCert. The default...
CVE-2026-105301
A flaw was found in the X.509 client-certificate authenticator of Keycloak, a solution for identity and access management. The issue occurs when the server is configured to check certificate revocation using CRL Distribution Points or OCSP. An attacker can provide a specially crafted certificate...
EUVD-2026-92255
A flaw was found in the X.509 client-certificate authenticator of Keycloak, a solution for identity and access management. The issue occurs when the server is configured to check certificate revocation using CRL Distribution Points or OCSP. An attacker can provide a specially crafted certificate...
CVE-2026-105301
A flaw was found in the X.509 client-certificate authenticator of Keycloak, a solution for identity and access management. The issue occurs when the server is configured to check certificate revocation using CRL Distribution Points or OCSP. An attacker can provide a specially crafted certificate...
CVE-2026-105301: Server-Side Request Forgery (SSRF)
A flaw was found in the X.509 client-certificate authenticator of Keycloak, a solution for identity and access management. The issue occurs when the server is configured to check certificate revocation using CRL Distribution Points or OCSP. An attacker can provide a specially crafted certificate...
PT-2026-104725
A flaw was found in the X.509 client-certificate authenticator of Keycloak, a solution for identity and access management. The issue occurs when the server is configured to check certificate revocation using CRL Distribution Points or OCSP. An attacker can provide a specially crafted certificate...
PT-2026-106220
Name of the Vulnerable Software and Affected Versions maestro gRPC broker affected versions not specified Description A flaw in the maestro gRPC broker allows a remote attacker possessing a valid client certificate to bypass authentication. This allows the attacker to subscribe to event streams...
CVE-2025-23419
🔐 Тестер эксплуатации повторного использования TLS-сеанса $ ОТ XIT Инструмент на Python для проверки потенциальных уязвимостей повторного использования TLS-сеанса, которые могут позволить обойти аутентификацию на неправильно настроенных серверах. ⚠️ Предупреждение Этот инструмент предназначен...
CVE-2025-23048-POC
CVE-2025-23048: Apache modSSL — обход проверки клиентского сертификата при возобновлении сессии TLS 1.3 Версии Apache HTTP Server 2.4.35 – 2.4.62 уязвимы к обходу аутентификации клиентского сертификата при использовании возобновления сессий TLS 1.3 между виртуальными хостами с разными...
CVE-2026-103884
A flaw was found in the X.509 client certificate authenticator of Keycloak. When CRL Distribution Point checking is enabled, the server fails to properly validate the file paths provided in a client certificate. An attacker can provide a specially crafted certificate that causes the server to...
CVE-2026-103884
A flaw was found in the X.509 client certificate authenticator of Keycloak. When CRL Distribution Point checking is enabled, the server fails to properly validate the file paths provided in a client certificate. An attacker can provide a specially crafted certificate that causes the server to...
EUVD-2026-90972
A flaw was found in the X.509 client certificate authenticator of Keycloak. When CRL Distribution Point checking is enabled, the server fails to properly validate the file paths provided in a client certificate. An attacker can provide a specially crafted certificate that causes the server to...
CVE-2026-103884 Keycloak-services: keycloak-services: path traversal in x.509 crl distribution point allows arbitrary local file read
A flaw was found in the X.509 client certificate authenticator of Keycloak. When CRL Distribution Point checking is enabled, the server fails to properly validate the file paths provided in a client certificate. An attacker can provide a specially crafted certificate that causes the server to...