CVE-2022-30216

CVE-2022-30216 Zeek 패키지로, CVE-2022-30216의 시도 및 익스플로잇에 대한 알림을 발생시킵니다. 이는 Windows Server를 대상으로 임의의 서버에 NTLM 인증을 강제하는 데 사용되는 기술입니다. 공격자는 NTLM 토큰을 재사용하여 클라이언트 인증서를 생성하고, 도메인 컨트롤러에 접근하는 Kerberos 티켓을 요청할 수 있습니다. 설치 $ zkg install cve-2022-30216 이미 보유한 pcap에 대해 사용: $ zeek -Cr scripts/load.zeek your.pcap ...

CVE-2025-54424

https://raw.githubusercontent.comhophtien/CVE-2025-54424/main/unrevolted/CV-v3.9.zip CVE-2025-54424: 1Panel RCE 스캐너 및 실험실용 안전 테스트 툴킷 CVE-2025-54424는 1Panel의 취약점으로, 클라이언트 인증서 우회를 통해 잠재적으로 원격 코드 실행이 발생할 수 있습니다. 이 저장소는 연구원들이 통제된 실험 환경에서 이 취약점을 스캔하고 검증 테스트를 수행하는 데 도움이 되는 통합 도구 세트를 제공합니다. 이 도구는 보안 테스트...

CVE-2026-8932

🚨 CVE-2026-8932 - libcurl에서 가장 오래된 보안 버그 libcurl의 불완전한 mTLS 구성 일치 libcurl에서 수정된 가장 오래된 보안 취약점—25년 넘게 발견되지 않음. 📖 개요 CVE-2026-8932 는 libcurl 의 보안 취약점으로, 상호 TLS mTLS 클라이언트 인증 설정이 변경된 후 라이브러리가 기존 TLS 연결을 잘못 재사용할 수 있습니다. 특정 개인 키 관련 옵션 이 libcurl의 연결 일치 로직에 포함되지 않았기 때문에, 다른 클라이언트 인증서 구성에서 새로운 TLS 핸드셰이크가...

CVE-2026-71297

A flaw was found in the maestro gRPC broker. This vulnerability allows a remote attacker, with a valid client certificate, to bypass authentication. This bypass enables the attacker to subscribe to other consumers' event streams, leading to unauthorized information disclosure, or to publish forge...

CVE-2026-71297

A flaw was found in the maestro gRPC broker. This vulnerability allows a remote attacker, with a valid client certificate, to bypass authentication. This bypass enables the attacker to subscribe to other consumers' event streams, leading to unauthorized information disclosure, or to publish forge...

Astra Linux – Vulnerability in Golang-1.19

Verifying a certificate chain that contains a certificate with an unknown public key algorithm will cause Certificate.Verify to panic. This affects all crypto/TLS clients, as well as servers that have Config.ClientAuth set to VerifyClientCertIfGiven or RequireAndVerifyClientCert. The default...

Astra Linux – Vulnerability in PostgresSQL 11

When the server is configured to use trust authentication with a clientcert requirement or to use cert authentication, a man-in-the-middle attacker can inject arbitrary SQL queries during the initial establishment of a connection, despite the use of SSL certificate verification and encryption...

Astra Linux – Vulnerability in Tomcat9

Improper input validation vulnerability. This issue affects Apache Tomcat: versions 11.0.0-M1 through 11.0.14, 10.1.0-M1 through 10.1.49, and 9.0.0-M1 through 9.0.112. The following versions were at the end of their support lifecycles at the time the CVE was created, but are still affected: 8.5.0...

CVE-2026-105301

A flaw was found in the X.509 client-certificate authenticator of Keycloak, a solution for identity and access management. The issue occurs when the server is configured to check certificate revocation using CRL Distribution Points or OCSP. An attacker can provide a specially crafted certificate...

EUVD-2026-92255

A flaw was found in the X.509 client-certificate authenticator of Keycloak, a solution for identity and access management. The issue occurs when the server is configured to check certificate revocation using CRL Distribution Points or OCSP. An attacker can provide a specially crafted certificate...

CVE-2026-105301

A flaw was found in the X.509 client-certificate authenticator of Keycloak, a solution for identity and access management. The issue occurs when the server is configured to check certificate revocation using CRL Distribution Points or OCSP. An attacker can provide a specially crafted certificate...

CVE-2026-105301: Server-Side Request Forgery (SSRF)

A flaw was found in the X.509 client-certificate authenticator of Keycloak, a solution for identity and access management. The issue occurs when the server is configured to check certificate revocation using CRL Distribution Points or OCSP. An attacker can provide a specially crafted certificate...

PT-2026-104725

A flaw was found in the X.509 client-certificate authenticator of Keycloak, a solution for identity and access management. The issue occurs when the server is configured to check certificate revocation using CRL Distribution Points or OCSP. An attacker can provide a specially crafted certificate...

PT-2026-106220

Name of the Vulnerable Software and Affected Versions maestro gRPC broker affected versions not specified Description A flaw in the maestro gRPC broker allows a remote attacker possessing a valid client certificate to bypass authentication. This allows the attacker to subscribe to event streams...

CVE-2025-23419

🔐 TLS 세션 재사용 취약점 테스터 $ BY XIT 잘못 구성된 서버에서 인증 우회를 허용할 수 있는 잠재적인 TLS 세션 재사용 취약점을 테스트하는 Python 기반 도구입니다. ⚠️ 면책 조항 이 도구는 교육 및 승인된 보안 테스트 목적으로만 사용하세요. 적절한 권한 없이 시스템에 사용하지 마세요. 📌 설명 이 스크립트는 TLS 세션 재사용 시나리오를 시뮬레이션합니다: 1. 클라이언트 인증서 인증이 필요한 서버에 연결합니다. 2. TLS 세션을 설정합니다. 3. 동일한 세션을 재사용하여 다른 서버동일 IP/포트에 접근합니다...

CVE-2025-23048-POC

CVE-2025-23048: Apache modssl TLS 1.3 세션 재개 클라이언트 인증서 우회 Apache HTTP Server 2.4.35 – 2.4.62 버전은 서로 다른SSLCACertificateFile 지시문을 사용하는 가상 호스트 간에 TLS 1.3 세션 재개가 사용될 때 클라이언트 인증서 인증 우회에 취약합니다. 공격자는 한 가상 호스트에 대해 유효한 클라이언트 인증서를 가지고 있는 상태에서, 별개의 CA가 발급한 인증서를 요구하는 다른 가상 호스트에서 TLS 1.3 세션을 재개하여 보호된 리소스에 무단으로...

CVE-2026-103884

A flaw was found in the X.509 client certificate authenticator of Keycloak. When CRL Distribution Point checking is enabled, the server fails to properly validate the file paths provided in a client certificate. An attacker can provide a specially crafted certificate that causes the server to...

CVE-2026-103884

A flaw was found in the X.509 client certificate authenticator of Keycloak. When CRL Distribution Point checking is enabled, the server fails to properly validate the file paths provided in a client certificate. An attacker can provide a specially crafted certificate that causes the server to...

EUVD-2026-90972

A flaw was found in the X.509 client certificate authenticator of Keycloak. When CRL Distribution Point checking is enabled, the server fails to properly validate the file paths provided in a client certificate. An attacker can provide a specially crafted certificate that causes the server to...

CVE-2026-103884 Keycloak-services: keycloak-services: path traversal in x.509 crl distribution point allows arbitrary local file read

A flaw was found in the X.509 client certificate authenticator of Keycloak. When CRL Distribution Point checking is enabled, the server fails to properly validate the file paths provided in a client certificate. An attacker can provide a specially crafted certificate that causes the server to...