Lucene search
+L

4828 matches found

Kitploit
Kitploit
added 2026/09/12 10:10 a.m.3 views

ciphertest

cipherTest.sh 作者:Patrick Bogen cipherTest.sh 是一个“更好”的 SSL 密码套件检查器,因为它使用 gnutls,后者支持的配置远多于 openssl。它会测试大约 3,200 种不同的配置(但会进行一些预优化,以便最大限度地减少“失败”的检查。) 它依赖于 openssl 和 gnutls-cli sudo apt-get install gnutls-bin 示例输出: root@kitploit: $ cipherTest www.host.com 443 Proto Cipher MAC KeX...

5.8AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/12 6:02 a.m.4 views

CVE-2014-3466_PoC

CVE-2014-3466 の概念実証 GnuTLS バッファオーバーフロー: セッション ID 長チェック 情報 参照: https://bugzilla.redhat.com/showbug.cgi?id=1101932 これは武器化されたエクスプロイトではありません。 警告: この Python コードは見苦しいです。ServerHello をほぼ手作業で作り、Python 部分自体には約 5 15 分しかかけていません。 このエクスプロイトはお好みで自由に改良してください(可能であれば私にも知らせてください!)。 例 悪意のある ServerHello コードでリスナーを起動しま...

6.8CVSS8AI score0.11221EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/12 4:44 a.m.11 views

cryptodev-linux

cryptodev-linux これは、OpenBSDやFreeBSDのものと同等の/dev/cryptoデバイスドライバです。主なアイデアは、ユーザー空間からカーネル空間内の既存の暗号化アルゴリズムにアクセスし、ハードウェア実装の暗号を再利用できるようにすることです。 質問や提案については、ホームページ https://github.com をご利用ください。Cryptodev-linux は https://github.com/cryptodev-linux/cryptodev-linux でホストされています。 旧バージョンは http://cryptodev-linux.org...

5.9AI score
SaveExploits0References2
Kitploit
Kitploit
added 2026/09/11 11:59 a.m.11 views

CVE-2026-45185

CVE-2026-45185 — Dead.Letter:Exim 堆释放后使用(UAF)致远程 Root CVSS 9.8 严重 | Exim 4.97–4.99.2 | Ubuntu / GnuTLS 构建 | 未认证 包含 GDB 跟踪、逐步分析和全球暴露数据的完整技术文章: https://0init.github.io/cve-2026-45185-dead-letter-exim-rce.html 这是什么 当 Exim 处于 BDAT 主体传输中途时,发送 TLS closenotify 警报会导致 tlsclose 调用 gnutlsdeinit,释放 7,304 字节的...

9.8CVSS8.3AI score0.01225EPSS
SaveExploits3References1
RedhatCVE
RedhatCVE
added 2026/09/09 2:01 p.m.6 views

CVE-2026-57163

A flaw was found in PJSIP. A stack buffer overflow exists in the GnuTLS TLS backend when parsing the Subject Alternative Name extension of a peer certificate. A remote attacker can exploit this by presenting a specially crafted certificate during the TLS handshake, before SIP-level authentication...

9.1CVSS0.00234EPSS
SaveExploits0References2
Kitploit
Kitploit
added 2026/09/08 8:33 p.m.7 views

PoC_TLS1_3_CVE-2020-13777

PoC TLS1.3 CVE-2020-13777 このPoCの目的 関連記事及び、企画「Challenge CVE-2020-13777」へ提供した解説文章・PoCは情報通信産業に関わる人の情報セキュリティのリテラシーの向上に貢献することを目的としています。 修正パッチが広く配布されている脆弱性であるCVE-2020-13777について、修正パッチ配布後に開発元によって公開された脆弱性の情報を元に技術的な検証を行った結果を啓蒙活動の一環として公開しています。 それにより、この脆弱性について情報通信産業に関わる人に広く認知されることを期待しています。 免責事項...

7.4CVSS7.5AI score0.17507EPSS
SaveExploits3
Kitploit
Kitploit
added 2026/09/08 5:39 a.m.8 views

cve-2020-13777

Script de prueba de Zeek para CVE-2020-13777 Este script realiza una prueba simple para verificar si un servidor es potencialmente vulnerable a CVE-2020-13777. CVE-2020-13777 provoca que GnuTLS cree tickets de sesión sin cifrar. Esto parece ser detectable verificando que gnutls establece keyname ...

7.4CVSS7.5AI score0.17507EPSS
SaveExploits3
Kitploit
Kitploit
added 2026/09/07 5:03 a.m.8 views

Dead.Letter-CVE-2026-45185

CVE-2026-45185 — "Dead.Letter" Exim脆弱性スキャナー LinuxシステムがCVE-2026-45185(Eximメール転送エージェントのuse-after-free脆弱性で、リモートコード実行につながる可能性がある)に対して脆弱かどうかを検出するシェルスクリプト。 CI/CDパイプライン、構成管理ツール、アドホックなシステム監査での使用を想定。人間が読める形式と機械可読(JSON)形式の両方で出力を生成。 脆弱性 CVE-2026-45185 (別名: Dead.Letter...

9.8CVSS8.3AI score0.01225EPSS
SaveExploits3
Tenable Nessus
Tenable Nessus
added 2026/09/06 12:00 a.m.5 views

Linux Distros Unpatched Vulnerability : CVE-2026-57163

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - PJSIP is a free and open source multimedia communication library written in C. Prior to commit c4a151a, a stack buffer overflow exists in the GnuTLS TLS backen...

9.1CVSS6.5AI score0.00234EPSS
SaveExploits0References3
Kitploit
Kitploit
added 2026/09/05 5:42 p.m.5 views

POC_CVE-2026-45185

CVE-2026-45185 Laboratorio de Validación de Plantillas Nuclei Este repositorio no es un repositorio de PoC de exploits de propósito general. Es un laboratorio de validación local para reproducir y revisar el comportamiento de una plantilla CVE-2026-45185 destinada a ser contribuida a...

9.8CVSS8.4AI score0.01225EPSS
SaveExploits3
OSV
OSV
added 2026/09/04 6:17 p.m.7 views

DEBIAN-CVE-2026-57163

PJSIP is a free and open source multimedia communication library written in C. Prior to commit c4a151a, a stack buffer overflow exists in the GnuTLS TLS backend when parsing the Subject Alternative Name extension of a peer certificate tlscertgetinfo in sslsockgtls.c. Only GnuTLS builds are affect...

9.1CVSS6AI score0.00234EPSS
SaveExploits0References1
NVD
NVD
added 2026/09/04 6:17 p.m.6 views

CVE-2026-57163

PJSIP is a free and open source multimedia communication library written in C. Prior to commit c4a151a, a stack buffer overflow exists in the GnuTLS TLS backend when parsing the Subject Alternative Name extension of a peer certificate tlscertgetinfo in sslsockgtls.c. Only GnuTLS builds are affect...

9.1CVSS0.00234EPSS
SaveExploits0References2
CVE
CVE
added 2026/09/04 5:11 p.m.19 views

CVE-2026-57163

CVE-2026-57163 is a stack buffer overflow in PJSIP's GnuTLS TLS backend , specifically in tls_cert_get_info() in ssl_sock_gtls.c, when parsing the Subject Alternative Name (SAN) extension of a peer certificate. An incorrect buffer-size value causes an oversized SAN entry to be written past a fixe...

9.1CVSS5.6AI score0.00234EPSS
SaveExploits0References2Affected Software1
OSV
OSV
added 2026/09/04 5:11 p.m.4 views

CVE-2026-57163 PJSIP: Stack overflow parsing a TLS peer certificate's SubjectAltName in GnuTLS backend

PJSIP is a free and open source multimedia communication library written in C. Prior to commit c4a151a, a stack buffer overflow exists in the GnuTLS TLS backend when parsing the Subject Alternative Name extension of a peer certificate tlscertgetinfo in sslsockgtls.c. Only GnuTLS builds are affect...

8.8CVSS6.1AI score
SaveExploits0References4
Debian CVE
Debian CVE
added 2026/09/04 5:11 p.m.10 views

CVE-2026-57163

PJSIP is a free and open source multimedia communication library written in C. Prior to commit c4a151a, a stack buffer overflow exists in the GnuTLS TLS backend when parsing the Subject Alternative Name extension of a peer certificate tlscertgetinfo in sslsockgtls.c. Only GnuTLS builds are affect...

9.1CVSS6AI score0.00234EPSS
SaveExploits0
Cvelist
Cvelist
added 2026/09/04 5:11 p.m.34 views

CVE-2026-57163 PJSIP: Stack overflow parsing a TLS peer certificate's SubjectAltName in GnuTLS backend

PJSIP is a free and open source multimedia communication library written in C. Prior to commit c4a151a, a stack buffer overflow exists in the GnuTLS TLS backend when parsing the Subject Alternative Name extension of a peer certificate tlscertgetinfo in sslsockgtls.c. Only GnuTLS builds are affect...

8.8CVSS0.00234EPSS
SaveExploits0References2
RedHat Linux
RedHat Linux
added 2026/08/31 2:04 a.m.42 views

Important: Red Hat Security Advisory: OpenShift Container Platform 4.16.69 bug fix and security update

Red Hat OpenShift Container Platform release 4.16.69 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.16. Red Hat Product Security has rated this update as having a...

9.8CVSS7.6AI score0.02501EPSS
SaveExploits4References25
RedHat Linux
RedHat Linux
added 2026/08/31 2:03 a.m.40 views

Important: Red Hat Security Advisory: OpenShift Container Platform 4.14.72 bug fix and security update

Red Hat OpenShift Container Platform release 4.14.72 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.14. Red Hat Product Security has rated this update as having a...

9.8CVSS7.6AI score0.02501EPSS
SaveExploits3References19
RedHat Linux
RedHat Linux
added 2026/08/31 2:03 a.m.29 views

Important: Red Hat Security Advisory: OpenShift Container Platform 4.15.68 bug fix and security update

Red Hat OpenShift Container Platform release 4.15.68 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.15. Red Hat Product Security has rated this update as having a...

9.8CVSS7.5AI score0.02501EPSS
SaveExploits1References19
Tenable Nessus
Tenable Nessus
added 2026/08/31 12:00 a.m.9 views

Nutanix AHV : Multiple Vulnerabilities (NXSA-AHV-11.2.0.2)

The version of AHV installed on the remote host is prior to 11.2.0.2. It is, therefore, affected by multiple vulnerabilities as referenced in the NXSA-AHV-11.2.0.2 advisory. - A flaw was found in gnutls. Servers configured with RSA-PSK RivestShamirAdleman Pre-Shared Key wrongfully matched usernam...

9.8CVSS7.3AI score0.08849EPSS
SaveExploits6References29
Rows per page
Query Builder