CVE-2026-93291

The Eufy Omni C20 is affected by a vulnerability involving improper certificate validation . This flaw could enable an attacker to conduct a man-in-the-middle (MitM) attack, potentially leading to the execution of arbitrary code . No specific software versions, internal components, or remediation...

poodle-attack-sandbox

poodle-attack-sandbox Overview This code is the test code for POODLECVE-2014-3566. POODLE stands for "Padding Oracle On Downgraded Legacy Encryption" and is a vulnerability in SSLv3.0. Warning If you use this code to carry out an attack, you may be arrested by the judicial authorities of your...

pulse-secure-vpn-mitm-research

pulse-secure-vpn-mitm-research Pulse Secure MITM 研究 リリース日 ベンダーとの共同リリース日: 2020年10月26日 著者 David Kierznowski, @withdk クレジット 開示プロセス全体を通じて支援してくれた Pulse Secure PSIRT チームの Sahil Mahajan 氏。 記事「Red Teamer's Guide to Pulse Secure SSL VPN」を執筆した Alyssa Herrera、Justin Wagner、Mimir、Rich Warren 各氏 - Alyssa...

CVE-2025-65753

CVE-2025-65753 CVE-2025-65753 の概念実証: Gryphon Guardian アクセスポイント（ファームウェアバージョン 01.06.0006.22）における不適切な TLS 証明書検証によるリモートコード実行。 説明 Gryphon Guardian WiFi アクセスポイント（ファームウェアバージョン 01.06.0006.22）は、アプリからプロンプトを受けてダウンロードされるインターネットスピードテストクライアントの TLS 証明書を適切に検証しません。この欠陥により、攻撃者は通信を傍受・操作し、悪意のあるコードを注入でき、アクセスポイントによって...

CVE-2016-3238-PoC

CVE-2016-3238-PoC CVE-2016-3238/MS16-087 の Proof of Concept に関するホワイトペーパーです。 CVE-2016-3238 は、プリンターのインストール時に細工されたプリンタードライバーを提供することで、中間者攻撃者が任意のコードを実行できるようにする脆弱性です。別名「Windows Print Spooler Remote Code Execution Vulnerability」として知られています。...

Linux Distros Unpatched Vulnerability : CVE-2026-67404

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - RabbitMQ is a messaging and streaming broker. Prior to versions 3.13.15, 4.0.20, 4.1.11, 4.2.6, and 4.3.0, When no CA bundle is available, ssloptions/1 falls ba...

CVE-2026-67404

RabbitMQ is a messaging and streaming broker. Prior to versions 3.13.15, 4.0.20, 4.1.11, 4.2.6, and 4.3.0, When no CA bundle is available, ssloptions/1 falls back to verify, verifynone with no warning. An attacker in a man-in-the-middle position can forge the JWKS response, which leads the broker...

DEBIAN-CVE-2026-67404

RabbitMQ is a messaging and streaming broker. Prior to versions 3.13.15, 4.0.20, 4.1.11, 4.2.6, and 4.3.0, When no CA bundle is available, ssloptions/1 falls back to verify, verifynone with no warning. An attacker in a man-in-the-middle position can forge the JWKS response, which leads the broker...

CVE-2026-67404

RabbitMQ (messaging and streaming broker) is vulnerable to a security bypass in versions prior to 3.13.15, 4.0.20, 4.1.11, 4.2.6, and 4.3.0 . The root cause is that ssl_options/1 falls back to [{verify, verify_none}] without warning when no CA bundle is available. If the OAuth2 plugin is active w...

CVE-2026-67404 RabbitMQ: OAuth2 silent verify_none fallback for JWKS fetch

RabbitMQ is a messaging and streaming broker. Prior to versions 3.13.15, 4.0.20, 4.1.11, 4.2.6, and 4.3.0, When no CA bundle is available, ssloptions/1 falls back to verify, verifynone with no warning. An attacker in a man-in-the-middle position can forge the JWKS response, which leads the broker...

CVE-2026-67404

RabbitMQ is a messaging and streaming broker. Prior to versions 3.13.15, 4.0.20, 4.1.11, 4.2.6, and 4.3.0, When no CA bundle is available, ssloptions/1 falls back to verify, verifynone with no warning. An attacker in a man-in-the-middle position can forge the JWKS response, which leads the broker...

Ssh Mitm

SSH-MITM SSH-MITM は、セキュリティ監査やペネトレーションテストのための中間者攻撃型SSHプロキシです。SSH、SCP、SFTPセッションの傍受、エージェント転送、ポート転送などをサポートします。 このリポジトリはミラーであり、更新は停止しています。 公式リポジトリはこちらです: GitHub: ssh-mitm/ssh-mitm Codeberg: ssh-mitm/ssh-mitm リモートとブックマークを適宜更新してください。 リンク ドキュメント: docs.ssh-mitm.at PyPI: pypi.org/project/ssh-mitm バグ報告と課題:...

CVE-2026-75516

A flaw was found in the RabbitMQ Java client. A malicious AMQP Advanced Message Queuing Protocol server, or a man-in-the-middle attacker, can modify connection parameters and inject oversized frames. This can cause the client to allocate a large amount of memory, leading to memory exhaustion and...

Security Bulletin: IBM InfoSphere Optim Archive Viewer is affected by a vulnerability in PySpark (CVE-2025-55039)

Summary A deserialization vulnerability in the PySpark component CVE-2025-55039 used by IBM InfoSphere Optim Archive Viewer has been addressed by upgrading the component to version 3.5.8. Vulnerability Details CVEID:CVE-2025-55039 DESCRIPTION: This issue affects Apache Spark versions before 3.4.4...

CVE-2026-91812

A vulnerability in Foxit PDF Editor/Reader’s update mechanism allows man-in-the-middle attackers to bypass certificate validation and package integrity checks, potentially enabling arbitrary code execution with system privileges...

EUVD-2026-85162

A vulnerability in Foxit PDF Editor/Reader’s update mechanism allows man-in-the-middle attackers to bypass certificate validation and package integrity checks, potentially enabling arbitrary code execution with system privileges...

CVE-2026-91812

A vulnerability in the Foxit PDF Editor/Reader update mechanism (specifically FoxitUpdater ) allows man-in-the-middle attackers to bypass certificate validation and package integrity checks . This flaw could potentially enable arbitrary code execution with system privileges . No specific remediat...

The vulnerability of the automation tool for configuring and building projects based on BitBake lies in the improper verification of the SSH key, allowing an attacker to execute a “man-in-the-middle” attack.

The vulnerability of the automation tool for configuring and building projects based on BitBake is related to incorrect verification of the SSH key. Exploiting this vulnerability could allow an attacker to execute a “man-in-the-middle” attack...

CVE-2026-93601

A flaw was found in rustls-webpki. This component incorrectly processes DNS Domain Name System name constraints for certificates asserting a wildcard name. This could allow a misissued wildcard certificate to be accepted for a domain that should be outside its permitted scope. Consequently, this...

CVE-2026-76715

A vulnerability in an administrative component of the HPE Networking Analytics and Location Engine (ALE) allows an unauthenticated remote attacker to perform a man-in-the-middle (MitM) attack. Successful exploitation can lead to remote code execution with root privileges on the affected appliance...