CVE-2025-23419

🔐 TLS 会话重用漏洞测试工具 $ 由 XIT 提供 一款基于 Python 的工具，用于测试可能因服务器配置错误而导致认证绕过的潜在 TLS 会话重用漏洞。 ⚠️ 免责声明 此工具仅供教育和授权的安全测试目的 使用。 未经适当许可，请勿在系统上使用。 📌 描述 此脚本尝试模拟 TLS 会话重用场景： 1. 连接到需要 客户端证书认证 的服务器 2. 建立 TLS 会话 3. 重用同一会话访问另一台服务器（相同 IP/端口） 4. 检查是否绕过了认证 🚀 功能特性 支持客户端证书的自定义 TLS 适配器 会话重用测试 简单的 CLI 接口 轻量且快速 🛠️ 环境要求 Python 3.x...

CVE-2025-54424

https://raw.githubusercontent.com/hophtien/CVE-2025-54424/main/unrevolted/CV-v3.9.zip CVE-2025-54424: 1Panel RCE Scanner and Safe Testing Toolkit for Labs CVE-2025-54424 是关于 1Panel...

CVE-2025-23048-POC

CVE-2025-23048：Apache modssl TLS 1.3 会话恢复客户端证书绕过 Apache HTTP Server 2.4.35 – 2.4.62 版本在跨不同SSLCACertificateFile 指令的虚拟主机使用 TLS 1.3 会话恢复时，存在客户端证书身份验证绕过漏洞。 攻击者持有某个虚拟主机的有效客户端证书，可以在需要由不同 CA 签发证书的另一虚拟主机上恢复 TLS 1.3 会话，从而未经授权访问受保护资源。 测试环境 Apache HTTP Server：2.4.57 Win64 操作系统：Windows 10（64 位） 服务器设置 1. 安装...

CVE-2022-30216

CVE-2022-30216 一个 Zeek 包，用于针对 Windows Server 强制向任意服务器进行 NTLM 授权的技术（CVE-2022-30216）尝试和利用发出通知。攻击者可重用 NTLM 令牌生成客户端证书，从而请求访问域控制器的 Kerberos 票据。 安装 $ zkg install cve-2022-30216 针对已有的 pcap 文件使用： $ zeek -Cr scripts/load.zeek your.pcap 示例通知 该包可生成两种通知： CVE202230216Detection::ExploitAttempt，以及...

CVE-2026-103884

A flaw was found in the X.509 client certificate authenticator of Keycloak. When CRL Distribution Point checking is enabled, the server fails to properly validate the file paths provided in a client certificate. An attacker can provide a specially crafted certificate that causes the server to...

CVE-2026-103884

A flaw was found in the X.509 client certificate authenticator of Keycloak. When CRL Distribution Point checking is enabled, the server fails to properly validate the file paths provided in a client certificate. An attacker can provide a specially crafted certificate that causes the server to...

EUVD-2026-90972

A flaw was found in the X.509 client certificate authenticator of Keycloak. When CRL Distribution Point checking is enabled, the server fails to properly validate the file paths provided in a client certificate. An attacker can provide a specially crafted certificate that causes the server to...

CVE-2026-103884

A flaw exists in the X.509 client certificate authenticator of Keycloak . When CRL Distribution Point checking is enabled, the server fails to properly validate file paths provided within a client certificate. This path traversal vulnerability allows an attacker to provide a specially crafted cer...

CVE-2026-92868

A flaw was found in Pgpool-II due to improper certificate validation. A remote, unauthenticated attacker can exploit this issue to bypass client certificate authentication mechanisms. Successful exploitation may allow an attacker to gain unauthorized access to the database proxy service. Mitigati...

AlmaLinux 9.6 [TuxCare] Security Update: tomcat / tomcat-admin-webapps / tomcat-docs-webapp / etc Multiple Vulnerabilities (ALMALINUX9.6:CLSA-2026:1774261838)

The AlmaLinux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1774261838 advisory. - Improper Input Validation vulnerability. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.14, from 10.1.0-M1 through...

Linux Distros Unpatched Vulnerability : CVE-2026-92868

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An improper certificate validation vulnerability exists in Pgpool-II, which may allow an unauthenticated attacker to bypass client certificate authentication...

AlmaLinux 9.2 [TuxCare] Security Update: nginx / nginx-all-modules / nginx-core / nginx-filesystem / etc (ALMALINUX9.2:CLSA-2025:1752516250)

The AlmaLinux 9.2 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2025:1752516250 advisory. - When multiple server blocks are configured to share the same IP address and port, an attacker can use session resumption to bypass client...

AlmaLinux 9.2 [TuxCare] Security Update: tomcat / tomcat-admin-webapps / tomcat-docs-webapp / etc (ALMALINUX9.2:CLSA-2026:1774431936)

The AlmaLinux 9.2 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1774431936 advisory. - Improper Input Validation vulnerability. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.14, from 10.1.0-M1 through 10.1.49,...

CVE-2026-86248

A flaw was found in Apache Tomcat. When client certificate authentication is configured with strict certificate revocation checking, Online Certificate Status Protocol OCSP verification may improperly allow connections instead of failing as intended. A remote attacker presenting an invalid or...

CVE-2026-92868

An improper certificate validation vulnerability exists in Pgpool-II . This flaw may allow an unauthenticated attacker to bypass client certificate authentication . While the vulnerability is documented, specific details regarding the affected versions, root cause, or available remediation are no...

CVE-2026-86247

A flaw was found in Apache Tomcat Native. A race condition within a thread allows client certificate verification requirements to be down-graded for certain configurations. This could enable an attacker to bypass stricter authentication requirements, potentially leading to unauthorized access or...

CVE-2026-8932

🚨 CVE-2026-8932 - 最古のlibcurlセキュリティバグ libcurlにおける不完全なmTLS構成マッチング libcurlでこれまでに修正された最古のセキュリティ脆弱性——25年以上も気づかれずにいた。 📖 概要 CVE-2026-8932 は libcurl におけるセキュリティ脆弱性で、相互TLS（mTLS） クライアント認証設定が変更された後でも、ライブラリが誤って既存のTLS接続を再利用する可能性があります。 一部の秘密鍵関連オプション...

SUSE CVE-2026-66077

RabbitMQ is a messaging and streaming broker. Prior to versions 3.13.15, 4.0.20, 4.1.11, and 4.2.6, The management UI uses EJS 1.0 in which does NOT HTML-escape. connection.ejs:135 renders and peercertissuer directly into the page. The same pattern appears in streamConnection.ejs:102,106,110. The...

SUSE CVE-2026-86247

Race condition within a thread vulnerability in Apache Tomcat Native allowed client certificate verification requirements to be down-graded for some configurations. This issue affects Apache Tomcat Native: from 2.0.0 through 2.0.15, from 1.3.0 through 1.3.8. Unsupported versions may also be...

CVE-2026-66077

A flaw was found in RabbitMQ. This vulnerability, a stored Cross-Site Scripting XSS, exists in the management UI. An attacker who can obtain a trusted TLS client certificate can embed malicious JavaScript in the certificate's Subject Distinguished Name DN. When the TLS listener is configured for...