CVE-2026-93306

IBM Server Firmware FW1120.00 through FW1120.01, FW1110.00 through FW1110.31, FW1060.00 through FW1060.81, and FW950.00 through FW950.H3 is affected by a vulnerability in the ASMI web interface. An unauthenticated attacker on the management network can send a malformed HTTPS request to ASMI,...

CVE-2026-93306 This Power System update is being released to address

IBM Server Firmware FW1120.00 through FW1120.01, FW1110.00 through FW1110.31, FW1060.00 through FW1060.81, and FW950.00 through FW950.H3 is affected by a vulnerability in the ASMI web interface. An unauthenticated attacker on the management network can send a malformed HTTPS request to ASMI,...

EUVD-2026-87107

IBM Server Firmware FW1120.00 through FW1120.01, FW1110.00 through FW1110.31, FW1060.00 through FW1060.81, and FW950.00 through FW950.H3 is affected by a vulnerability in the ASMI web interface. An unauthenticated attacker on the management network can send a malformed HTTPS request to ASMI,...

CVE-2026-17602

The SSL Zen — SSL Certificate Installer & HTTPS Redirects plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 4.7.42 via the 'filename' parameter parameter. This makes it possible for authenticated attackers, with administrator-level access and above, t...

EUVD-2026-86599

The SSL Zen — SSL Certificate Installer & HTTPS Redirects plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 4.7.42 via the 'filename' parameter parameter. This makes it possible for authenticated attackers, with administrator-level access and above, t...

https-everywhere

HTTPS Everywhere 更新信息 ⚠️ 该项目已不再维护或更新。请卸载并引导用户参考下方建议，通过浏览器原生方式默认启用 HTTPS。 你不再需要 HTTPS Everywhere 来默认设置 HTTPS！主流浏览器现已原生支持仅 HTTPS 模式。 点击此处了解如何开启该功能。 此扩展将于 2023 年 1 月停止使用。 HTTPS Everywhere 入门指南 HTTPS Everywhere 是一款 Firefox、Chrome 和 Opera 扩展，可加密您与许多主流网站的通信，使您的浏览更加安全。加密网络：立即安装 HTTPS Everywhere。 针对用户...

mitmengine

MITMEngine 废弃声明：此软件不再维护。 本项目旨在实现HTTPS中间人拦截的精确检测以及健壮的TLS指纹识别。 该项目基于论文《The Security Impact of HTTPS Interception》，最初是将其处理脚本和指纹移植到Go语言。 关于MITMEngine的更多背景信息，请参阅这篇 Cloudflare博客文章。 快速链接： 签名与指纹：核心定义 MITM检测方法 API 使用示例 构建与测试 如何贡献 mergeDB工具 系统要求 Go Wireshark 3.0.0（用 wireshark -v 检查版本） 文档 详细文档随代码提供（先将包复制到...

OESA-2026-4012 python3 security update

Python combines remarkable power with very clear syntax. It has modules, classes, exceptions, very high level dynamic data types, and dynamic typing. There are interfaces to many system calls and libraries, as well as to various windowing systems. New built-in modules are easily written in C or C...

NSEC3-X

免责声明：本项目由人工智能（AI）生成，但经过了严格的“人在环路”（HITL）流程。这意味着代码已由人类软件工程师审查和重构，架构设计由人类指导，并执行了基本的安全审计以验证功能并排除典型的AI幻觉。该流程确保的质量和可靠性是纯AI生成无法保证的。 NSEC3-X NSEC3-X 是一款专为审计 DNSSEC NSEC3 配置而设计的专业取证与渗透测试工具。它提供了 nsec3walker 等传统工具的现代高性能替代方案，集成了区域枚举（收割）和哈希逆向（破解）功能。 该工具使用 Go 语言编写，设计为自包含、无依赖的二进制文件，适用于受限环境中的部署。 技术概述...

ca-clone

Scripts de Clonación de CA Scripts para clonar certificados de CA para su uso en ataques a clientes HTTPS. Actualmente se incluyen scripts para clonar una CA raíz de Comodo y una CA de Digicert, ambas ampliamente confiables en dispositivos IoT. Uso Ejecute cualquiera de los scripts directamente...

ip-https-tools

ip-https-tools Una colección de herramientas para el protocolo de tunelización IP sobre HTTPS IP-HTTPS utilizado por Microsoft DirectAccess para enviar paquetes IPv6 relacionados con Teredo a través de una sesión HTTPS basada en IPv4. MS-IPHTTPS especificación del protocolo Información general...

DoHC2

⚠️ NOTA: Esta herramienta ya no está en mantenimiento activo. DoHC2 DoHC2 permite que la librería ExternalC2 de Ryan Hanson https://github.com/ryhanson/ExternalC2 se utilice para el comando y control C2 a través de DNS sobre HTTPS DoH. Está diseñado para el popular software de simulación de...

CVE-2026-52102-PoC

CVE-2026-52102 - Exploit PoC A Proof of Concept PoC demonstrating CVE-2026-52102. Usage python3 CVE-2026-52102-PoC.py Targets Add one target per line to the targets.txt file. Note: Only include systems that you own or have explicit authorization to test. Example: https://example.local:8090...

ProxySqlMap

ProxySqlMap From Proxy to SqlMapApi 使用方法: 修改config.py: 1. Extfilter 为过滤的后缀名 2. sqlmap 为SQLmap地址 3. url 为需要拦截的url 4. admintoken 为sqlmap的adminid 修改代理：127.0.0.1:8081 支持库: 1. requests 2. baseproxy已经内置了，不需要再进行安装 https 支持: 访问:baseproxy.ca即可下载 输出: sqlsan.txt 为已创建的taskid与URL ok.txt为存在注入的URL以及taskid...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: git-lfs (UTSA-2026-124494)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-124494 advisory. Parsing an invalid SVCB or HTTPS RR can panic when the size of a parameter value overflows the message buffer. Tenable has extracted the preceding description block...

MAL-2026-16477 Malicious code in com.apple.unityplugin.storekit (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 920277566757bdc38563c7e2150e906790478cbd7a0c48f0bb53004e82eec4ca The package impersonates an Apple/Unity StoreKit internal namespace com.apple.unityplugin.storekit and, on require, index.js performs an HTTPS GET to...

curl: Missing applicability validation allows non-applicable HTTPS RR to reach ECH processing

Summary The HTTPS RR applicability check Curlhttpsrrapplicable is applied before ALPN selection, but the same check is not applied consistently in the ECH initialization paths. When an HTTPS RR is not applicable to the active connection, curl correctly reports it as not applicable and avoids usin...

SUSE CVE-2026-77692

An attacker can cause named to abort by sending a crafted DNS-over-HTTPS request with a cryptographically invalid SIG0 record, and then closing the transport connection prematurely. This issue affects BIND 9 versions 9.20.0 through 9.20.27, 9.21.0 through 9.21.25, and 9.20.9-S1 through 9.20.27-S1...

SUSE CVE-2026-81563

A BIND resolver encountering an SVCB/HTTPS AliasMode record referencing 14 or more SVCB/HTTPS ServiceMode records may fail to properly deallocate internal resources. If this happens repeatedly, resource exhaustion will eventually prevent the resolver from performing new recursive lookups. This...

SUSE CVE-2026-81736

If a BIND resolver has cached a tree of SVCB/HTTPS AliasMode records, and is then queried for the root of that tree, the resolver will spend disproportionate CPU time constructing the response. This issue affects BIND 9 versions 9.18.0 through 9.18.50, 9.20.0 through 9.20.27, 9.21.0 through...