ciphertest

cipherTest.sh Patrick Bogen 作 cipherTest.sh は、gnutls を使用するという点で「より良い」SSL 暗号チェッカーです。gnutls は openssl よりもはるかに多くの構成をサポートしています。潜在的に約 3,200 の異なる構成をテストします（ただし「失敗」チェックを最小限に抑えるために事前最適化を行います）。 openssl と gnutls-cli に依存しています。 sudo apt-get install gnutls-bin 出力例: root@kitploit: $ cipherTest www.host.com 443...

CVE-2014-3466_PoC

CVE-2014-3466 GnuTLS 버퍼 오버플로우: 세션 ID 길이 검사에 대한 개념 증명 정보 참조: https://bugzilla.redhat.com/showbug.cgi?id=1101932 이는 무기화된 익스플로잇이 아닙니다. 경고: 이 파이썬 코드는 못생겼습니다. ServerHello를 거의 손으로 제작했고, 파이썬 부분 자체에 약 5분이 아니라 15분 정도만 썼습니다. 원하신다면 이 익스플로잇을 자유롭게 개선해 주세요 가능하면 저에게 알려주세요!. 예제 악성 ServerHello 코드로 리스너를 시작하십시오:...

cryptodev-linux

cryptodev-linux Это драйвер устройства /dev/crypto, аналогичный тем, что используются в OpenBSD или FreeBSD. Основная идея — предоставить доступ к существующим шифрам в пространстве ядра из пользовательского пространства, что позволяет повторно использовать аппаратную реализацию шифра. Вопросы и...

CVE-2026-45185

CVE-2026-45185 — Dead.Letter: Exim 힙 UAF에서 원격 루트 권한 탈취까지 CVSS 9.8 치명적Critical | Exim 4.97–4.99.2 | Ubuntu / GnuTLS 빌드 | 인증 불필요 GDB 트레이스, 단계별 분석, 전 세계 노출 데이터를 포함한 전체 분석 문서: https://0init.github.io/cve-2026-45185-dead-letter-exim-rce.html 이 취약점이란 Exim이 BDAT 본문 전송 중일 때 TLS closenotify 경보를 보내면...

CVE-2026-57163

A flaw was found in PJSIP. A stack buffer overflow exists in the GnuTLS TLS backend when parsing the Subject Alternative Name extension of a peer certificate. A remote attacker can exploit this by presenting a specially crafted certificate during the TLS handshake, before SIP-level authentication...

PoC_TLS1_3_CVE-2020-13777

PoC TLS1.3 CVE-2020-13777 이 PoC의 목적 이 PoC와 관련 기사는 "Challenge CVE-2020-13777" 프로젝트에 지원하기 위해 작성되었습니다. CVE-2020-13777은 패치가 널리 배포된 GnuTLS 취약점입니다. 이 PoC는 정보통신 산업에 종사하는 사람들의 정보보안 리터러시 향상에 기여하는 것을 목표로 합니다. PoC와 기술 검증 결과를 널리 공개함으로써, 정보통신 산업에 종사하는 사람들이 이 취약점을 공개적으로 인지하기를 바랍니다. 이 PoC의 목적 관련 기사 및 기획...

cve-2020-13777

Zeek тестовый скрипт для CVE-2020-13777 Этот скрипт выполняет простой тест для проверки, потенциально ли уязвим сервер к CVE-2020-13777. CVE-2020-13777 заставляет GnuTLS создавать незашифрованные сессионные билеты. Это, по-видимому, можно обнаружить, проверив, устанавливает ли gnutls keyname в но...

Dead.Letter-CVE-2026-45185

CVE-2026-45185 — Сканер уязвимости Exim «Dead.Letter» Скрипт оболочки для обнаружения уязвимости CVE-2026-45185 в Linux-системах — это использование после освобождения use-after-free в агенте передачи почты Exim, что может привести к удалённому выполнению кода. Предназначен для использования в...

Linux Distros Unpatched Vulnerability : CVE-2026-57163

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - PJSIP is a free and open source multimedia communication library written in C. Prior to commit c4a151a, a stack buffer overflow exists in the GnuTLS TLS backen...

POC_CVE-2026-45185

CVE-2026-45185 Лаборатория проверки шаблонов Nuclei Этот репозиторий не является общецелевым PoC-репозиторием эксплойтов. Это локальная лаборатория проверки для воспроизведения и анализа поведения шаблона CVE-2026-45185, предназначенного для включения в projectdiscovery/nuclei-templates...

DEBIAN-CVE-2026-57163

PJSIP is a free and open source multimedia communication library written in C. Prior to commit c4a151a, a stack buffer overflow exists in the GnuTLS TLS backend when parsing the Subject Alternative Name extension of a peer certificate tlscertgetinfo in sslsockgtls.c. Only GnuTLS builds are affect...

CVE-2026-57163

PJSIP is a free and open source multimedia communication library written in C. Prior to commit c4a151a, a stack buffer overflow exists in the GnuTLS TLS backend when parsing the Subject Alternative Name extension of a peer certificate tlscertgetinfo in sslsockgtls.c. Only GnuTLS builds are affect...

CVE-2026-57163

CVE-2026-57163 is a stack buffer overflow in PJSIP's GnuTLS TLS backend , specifically in tls_cert_get_info() in ssl_sock_gtls.c, when parsing the Subject Alternative Name (SAN) extension of a peer certificate. An incorrect buffer-size value causes an oversized SAN entry to be written past a fixe...

CVE-2026-57163 PJSIP: Stack overflow parsing a TLS peer certificate's SubjectAltName in GnuTLS backend

PJSIP is a free and open source multimedia communication library written in C. Prior to commit c4a151a, a stack buffer overflow exists in the GnuTLS TLS backend when parsing the Subject Alternative Name extension of a peer certificate tlscertgetinfo in sslsockgtls.c. Only GnuTLS builds are affect...

CVE-2026-57163 PJSIP: Stack overflow parsing a TLS peer certificate's SubjectAltName in GnuTLS backend

PJSIP is a free and open source multimedia communication library written in C. Prior to commit c4a151a, a stack buffer overflow exists in the GnuTLS TLS backend when parsing the Subject Alternative Name extension of a peer certificate tlscertgetinfo in sslsockgtls.c. Only GnuTLS builds are affect...

CVE-2026-57163

PJSIP is a free and open source multimedia communication library written in C. Prior to commit c4a151a, a stack buffer overflow exists in the GnuTLS TLS backend when parsing the Subject Alternative Name extension of a peer certificate tlscertgetinfo in sslsockgtls.c. Only GnuTLS builds are affect...

Important: Red Hat Security Advisory: OpenShift Container Platform 4.16.69 bug fix and security update

Red Hat OpenShift Container Platform release 4.16.69 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.16. Red Hat Product Security has rated this update as having a...

Important: Red Hat Security Advisory: OpenShift Container Platform 4.14.72 bug fix and security update

Red Hat OpenShift Container Platform release 4.14.72 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.14. Red Hat Product Security has rated this update as having a...

Important: Red Hat Security Advisory: OpenShift Container Platform 4.15.68 bug fix and security update

Red Hat OpenShift Container Platform release 4.15.68 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.15. Red Hat Product Security has rated this update as having a...

Nutanix AHV : Multiple Vulnerabilities (NXSA-AHV-11.2.0.2)

The version of AHV installed on the remote host is prior to 11.2.0.2. It is, therefore, affected by multiple vulnerabilities as referenced in the NXSA-AHV-11.2.0.2 advisory. - A flaw was found in gnutls. Servers configured with RSA-PSK RivestShamirAdleman Pre-Shared Key wrongfully matched usernam...