CVE-2026-20127

CVE-2026-20127 Overview An exploit for the Cisco Catalyst SD-WAN Controller authentication bypass vulnerability, CVE-2026-20127. This exploit targets the vbondprocchallengeackack handler. It sends a forged CHALLENGEACKACK message msgtype=10 with an attacker-controlled verifystatus=1 byte, directl...

dtls-fuzzer

dtls-fuzzer is a Java tool which performs protocol state fuzzing of DTLS servers. More concretely, it supports the following functionality: 1. given an alphabet, it can automatically generate a model of a local DTLS server implementation; 2. given a test sequence of inputs and an alphabet, it can...

heartbleed-dtls

heartbleed-dtls-test POC for CVE-2014-0160 Heartbleed for DTLS. License This code is licensed uder the BSD 3-Clause License file LICENSE, which is 99% identical to Go's license file LICENSE.golang. Given that large parts of this code are copied/inspired by golang's tls code, both license files ar...

watchTowr-vs-Citrix-Netscaler-CVE-2026-88772

watchTowr-vs-Citrix-Netscaler-CVE-2026-88772 Detection Artifact Generator for Citrix NetScaler CVE-2026-88772 See our blog post for technical details. Detection in Action / | | |\ \ \ / / \ \ / | | | | / \ / / \ \ \ / / | | \ | Y | | \ / | | / // || \ ||| | \ / // || / / /...

tinydtls

CONTENTS This library contains functions and structures that can help constructing a single-threaded UDP server with DTLS support in C99. The following components are available: dtls Basic support for DTLS with pre-shared key mode. tests The subdirectory tests contains test programs that show how...

CVE-2026-20127-Exploit-Extension

Executive Summary The CVE-2026-20127 Defensive Companion is a premier, enterprise-grade Browser Extension engineered for proactive threat intelligence and defensive analysis. This tool encapsulates authoritative technical research concerning the authentication bypass vulnerability in the Cisco...

zeek-spicy-stun

STUN Session Traversal Utilities for NAT STUN This is a Zeek protocol analyzer that detects STUN based on Spicy. You must install Spicy to use this package. This package will create two logs: stun.log - This log has every STUN message. stunnat.log - This log has NAT detections from mapped...

deluded-openssl-3.2.0

Welcome to the OpenSSL Project !openssl logo !github actions ci badgegithub actions ci !appveyor badgeappveyor jobs OpenSSL is a robust, commercial-grade, full-featured Open Source Toolkit for the TLS formerly SSL, DTLS and QUIC currently client side only protocols. The protocol implementations a...

CLEANSTART-2026-VF53508 Issue summary: The DTLS retransmission logic does not correctly handle a handshake message write that is suspended part-way through

CVE-2026-84782 affects multiple packages. Issue summary: The DTLS retransmission logic does not correctly handle a handshake message write that is suspended part-way through. See references for individual vulnerability details...

CLEANSTART-2026-KP41215 Issue summary: An established DTLS 1

CVE-2026-75806 affects multiple packages. Issue summary: An established DTLS 1. See references for individual vulnerability details...

CLEANSTART-2026-QG73880 Issue summary: Receiving a DTLS record for a future epoch while a handshake is in progress causes OpenSSL to buffer far more memory than the record itself requires

CVE-2026-54874 affects multiple packages. Issue summary: Receiving a DTLS record for a future epoch while a handshake is in progress causes OpenSSL to buffer far more memory than the record itself requires. See references for individual vulnerability details...

Oracle Linux 10 : openssl (ELSA-2026-500441)

The remote Oracle Linux 10 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-500441 advisory. - Fixes DTLS Retransmits Handshake Messages From a Stale Buffer Offset CVE-2026-84782 Resolves: RHEL-264466 - Patch asn1d2ireadbio to read headers without...

Oracle Linux 9 : openssl (ELSA-2026-500440)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-500440 advisory. - Fixed DTLS Retransmits Handshake Messages From a Stale Buffer Offset CVE-2026-84782 Resolves: RHEL-264479 - Patch asn1d2ireadbio to read headers without...

OpenSSL_DTLS_CVE_2014_0221

OpenSSLDTLSCVE20140221 OpenSSL DTLS CVE-2014-0221 Remote Denial What is DTLS Datagram Transport Layer Security? Datagram Transport Layer Security. Physical layer TCP layer datagram support: TLS UDP layer datagram support: DTLS: Through appropriate modifications of the Handshake process, it handle...

openssl: compat-openssl: openssl: Information disclosure via DTLS handshake retransmission

A flaw was found in OpenSSL. The Datagram Transport Layer Security DTLS retransmission mechanism fails to properly handle handshake message writes that are suspended before completion. A remote attacker could exploit this vulnerability during handshake message retransmission, causing OpenSSL to...

Important: Red Hat Security Advisory: openssl security update

An update for openssl is now available for Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On, Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions, and Red Hat Enterprise Linux 8.8 Telecommunications Update Service. Red Hat Product Securit...

CVE-2026-93475

The X.509 parser in NetX Secure accepts an RSA public key of any size, but every signature-verification path decrypts into fixed-size buffers dimensioned for the NXCRYPTOMAXRSAMODULUSSIZE default of 4096 bits. A certificate carrying a larger modulus drives an out-of-bounds write past a file-scope...

EUVD-2026-105129

The X.509 parser in NetX Secure accepts an RSA public key of any size, but every signature-verification path decrypts into fixed-size buffers dimensioned for the NXCRYPTOMAXRSAMODULUSSIZE default of 4096 bits. A certificate carrying a larger modulus drives an out-of-bounds write past a file-scope...

CVE-2026-93475

The NetX Secure X.509 parser is vulnerable to an out-of-bounds write because it accepts RSA public keys of any size but decrypts them into fixed-size buffers sized for a default of 4096 bits. An attacker can provide a certificate with a larger modulus, causing the write to occur past a file-scope...

CVE-2026-93475 Out-of-bounds Write via an Unbounded RSA Modulus in NetX Secure X.509

The X.509 parser in NetX Secure accepts an RSA public key of any size, but every signature-verification path decrypts into fixed-size buffers dimensioned for the NXCRYPTOMAXRSAMODULUSSIZE default of 4096 bits. A certificate carrying a larger modulus drives an out-of-bounds write past a file-scope...