PySCTChecker

PySCTChecker الوصف هذه أداة بايثون سريعة وغير رسمية للتحقق مما إذا كان النطاق يطبق شفافية الشهادة Certificate Transparency بشكل صحيح. إذا كان الأمر كذلك، فمن الممكن ملاحظة كيفية تطبيق شفافية الشهادة على جانب الخادم. عندما يطبق الخادم شفافية الشهادة، يجب أن يقدم على الأقل SCT واحد دليل على إدراج...

ssl-certificate-expiry-date-checker

مدقق تاريخ انتهاء صلاحية شهادة SSL اكتشف أي شهادة ستنتهي صلاحيتها وتحتاج إلى تجديد. احصل على معلومات متنوعة من نتيجة الفحص تاريخ الانتهاء، المُصدر، التوقيع، الرقم التسلسلي... إذا كنت مسؤول شهادات SSL في مؤسستك، اجمع القائمة من زملائك وفرقك، وتحقق من تاريخ انتهاء صلاحية الشهادات. إشعار مخصص عند...

CVE-2026-85525

Improper OCSP response validation in the Snowflake Python, Go, JDBC, and Node.js drivers allowed a revoked TLS certificate to be accepted as valid, because OCSP responses were not reliably bound to the certificate being validated and definitive verification failures were treated as transient. A...

CVE-2026-85525

A flaw was found in Snowflake drivers, including Python, Go, JDBC, and Node.js. This flaw involves improper Online Certificate Status Protocol OCSP response validation, which allows a revoked Transport Layer Security TLS certificate to be accepted as valid. A man-in-the-middle attacker, possessin...

CVE-2026-85525 Improper OCSP response validation in Snowflake drivers

Improper OCSP response validation in the Snowflake Python, Go, JDBC, and Node.js drivers allowed a revoked TLS certificate to be accepted as valid, because OCSP responses were not reliably bound to the certificate being validated and definitive verification failures were treated as transient. A...

CVE-2026-85525

This CVE affects the Snowflake Python, Go, JDBC, and Node.js drivers . The root cause is improper OCSP response validation : OCSP responses were not reliably bound to the certificate being validated, and definitive verification failures were treated as transient errors rather than hard failures. ...

EUVD-2026-70972

Improper OCSP response validation in the Snowflake Python, Go, JDBC, and Node.js drivers allowed a revoked TLS certificate to be accepted as valid, because OCSP responses were not reliably bound to the certificate being validated and definitive verification failures were treated as transient. A...

p5-ssl-tools

Collection d'outils SSL Ce dépôt contient divers outils destinés à déboguer ou analyser les problèmes liés à SSL/TLS. Analyse de l'état de TLS analyze-ssl.pl vérifie la prise en charge des différentes versions de SSL/TLS vérifie quels chiffrements sont pris en charge vérifie le certificat vérifie...

cipherscan

CipherScan Cipherscan tests the ordering of the SSL/TLS ciphers on a given target, for all major versions of SSL and TLS. It also extracts some certificates informations, TLS options, OCSP stapling and more. Cipherscan is a wrapper above the openssl sclient command line. Cipherscan is meant to ru...

CVE-2026-84964

CVE-2026-84964 is a double free vulnerability in the MongoDB C Driver , specifically in its OpenSSL-based TLS certificate revocation checking path . During a TLS handshake, specially formed certificate data from a crafted multi-URL certificate can cause the same heap object to be released twice. ...

cve-2026-29145

CVE-2026-29145 — Les vérifications OCSP échouent parfois en mode « soft-fail » même lorsque celui-ci est désactivé Découvreur : gregk4sec https://github.com/gregk4sec/cve Date de découverte : 2026-02-26 Vendeur concerné : Apache Produit concerné : Tomcat Sévérité : 9.1 CRITIQUE CWE : CWE-287...

CVE-2026-29145-Tester

Environnement de test CVE-2026-29145 📌 Vue d'ensemble Ce dépôt contient un environnement de preuve de concept PoC conçu pour tester la CVE-2026-29145. La vulnérabilité est un contournement d'authentification dans l'implémentation du TLS mutuel CLIENTCERT d'Apache Tomcat. Lorsque l'OCSP Online...

CVE-2026-29145-Tester

Среда тестирования CVE-2026-29145 📌 Обзор Этот репозиторий содержит среду proof-of-concept PoC, предназначенную для тестирования CVE-2026-29145. Уязвимость представляет собой обход аутентификации в реализации Mutual TLS CLIENTCERT Apache Tomcat. Когда OCSP Online Certificate Status Protocol...

CVE-2026-29145-Everything

CVE-2026-29145 كل شيء Apache Tomcat CLIENTCERT + OCSP soft-fail bypass بيئة إعادة إنتاج كاملة، حزم حركة المرور المستغلة، ومواد كتابة قواعد كشف Suricata. مخصص فقط لأبحاث الأمن المصرح بها وتطوير قواعد الكشف. لا تستخدم على أنظمة غير مصرح بها. ملخص الثغرة العنصر| الوصف ---|--- CVE| CVE-2026-29145...

httpd: Apache HTTP Server: Buffer Over-read via outbound OCSP requests to attacker-controlled server

A flaw was found in Apache HTTP Server. This buffer over-read vulnerability occurs when the server processes outbound Online Certificate Status Protocol OCSP requests directed to an attacker-controlled OCSP server. This could allow a remote attacker to read sensitive information from memory or...

CVE-2026-54876

A flaw was found in OpenSSL. A malicious TLS Transport Layer Security server can exploit this vulnerability by sending a specially crafted OCSP Online Certificate Status Protocol response during the X.509 certificate chain verification process. This can lead to a memory leak in client application...

OCSP Response Validation Bypass

Bouncy Castle for Java is vulnerable to an OCSP response validation bypass. The vulnerability is due to the failure to properly associate the stapled OCSP response with the intended certificate, which allows an attacker to exploit the validation process by providing a valid OCSP response for a...

Astra Linux – Vulnerability in Apache2

Buffer Over-read vulnerability in Apache HTTP Server due to outbound OCSP requests sent to an attacker-controlled OCSP server This issue affects Apache HTTP Server versions 2.4.0 through 2.4.67. Users are recommended to upgrade to version 2.4.68, which addresses this vulnerability...

Astra Linux – Vulnerability in StrongSwan

Before version 5.9.8, StrongSwan allowed remote attackers to cause a denial of service in the revocation plugin by sending a crafted end-entity and intermediate CA certificate that contained a CRL/OCSP URL pointing to a server under the attacker’s control that did not respond properly. In some...

openssl: OpenSSL: Memory leak leads to Denial of Service in OCSP response checking

A flaw was found in OpenSSL. A malicious TLS Transport Layer Security server can exploit this vulnerability by sending a specially crafted OCSP Online Certificate Status Protocol response during the X.509 certificate chain verification process. This can lead to a memory leak in client application...