3130 matches found
autovpn
!CAUTION Este repositorio ya no se mantiene. No se proporcionarán más actualizaciones, correcciones de errores ni soporte. Utilice la nueva versión https://github.com/ttlequals0/autowire Resumen Script que permite la creación sencilla de puntos finales OpenVPN en cualquier región de AWS. Para cre...
crowbar
Crowbar - Herramienta de fuerza bruta ¿Qué es Crowbar? Crowbar anteriormente conocido como Levye es una herramienta de fuerza bruta que se puede utilizar durante pruebas de penetración. Fue desarrollada para forzar algunos protocolos de una manera diferente a otras herramientas populares de fuerz...
zeek-spicy-openvpn
zeek-spicy-openvpn Questo è un analizzatore di protocollo che rileva il traffico OpenVPN. Per usare questo pacchetto è necessario installare Spicy. Blog e webinar che descrivono lo sviluppo di questo analizzatore di protocollo: https://zeek.org/2021/03/16/a-zeek-openvpn-protocol-analyzer/...
Fedora 44 : openvpn (2026-eed9c789d3)
The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-eed9c789d3 advisory. Update to upstream 2.7.8 release Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not...
OPENSUSE-SU-2026:22072-1 Security update for openvpn
This update for openvpn fixes the following issues: - CVE-2026-11771: NTLM proxy auth stack off-by-one write bsc1273126. - CVE-2026-12932: memory leak using --tls-crypt-v2 bsc1273127. - CVE-2026-12996: Potential DoS and memory leak via TLS session use-after-free bsc1273128. - CVE-2026-13117: Heap...
Linux Distros Unpatched Vulnerability : CVE-2026-88964
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An integer underflow in OpenVPN version 2.7alpha3 through 2.7.7 on Windows and Android allows remote authenticated servers to cause a denial of service or memor...
PT-2026-113547
Name of the Vulnerable Software and Affected Versions OpenVPN versions 2.7 alpha3 through 2.7.7 Description An integer underflow occurs on Windows and Android platforms. This issue allows remote authenticated servers to trigger a denial of service or memory disclosure by using crafted domain sear...
Linux Distros Unpatched Vulnerability : CVE-2026-84790
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - OpenVPN 2.7alpha1 through 2.7.7 allows remote authenticated users to impersonate others via a crafted certificate subject field CVE-2026-84790 Note that Nessus...
[SECURITY] Fedora 43 Update: openvpn-2.6.23-1.fc43
OpenVPN is a robust and highly flexible tunneling application that uses all of the encryption, authentication, and certification features of the OpenSSL library to securely tunnel IP networks over a single UDP or TCP port. It can use the Marcus Franz Xaver Johannes Oberhumers LZO library for...
Fedora 43 : openvpn (2026-d2c4c4794c)
The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-d2c4c4794c advisory. Update to upstream OpenVPN 2.6.23 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not...
Ubuntu 22.04 LTS / 24.04 LTS / 26.04 LTS : OpenVPN vulnerabilities (USN-8852-1)
The remote Ubuntu 22.04 LTS / 24.04 LTS / 26.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-8852-1 advisory. It was discovered that OpenVPN had a use-after-free vulnerability in its TLS session handling. An attacker could possibly use thi...
CentOS Linux 6 [TuxCare] Security Update: openvpn / openvpn-devel (CENTOS6:CLSA-2025:1759485890)
The CentOS Linux 6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS6:CLSA-2025:1759485890 advisory. - OpenVPN 2.5.1 and earlier versions allows a remote attackers to bypass authentication and access control channel data on servers configured wit...
USN-8852-1 openvpn vulnerabilities
It was discovered that OpenVPN had a use-after-free vulnerability in its TLS session handling. An attacker could possibly use this issue to cause OpenVPN to crash, resulting in a denial of service, or execute arbitrary code. CVE-2026-84471 It was discovered that OpenVPN incorrectly handled...
USN-8852-1: OpenVPN vulnerabilities
It was discovered that OpenVPN had a use-after-free vulnerability in its TLS session handling. An attacker could possibly use this issue to cause OpenVPN to crash, resulting in a denial of service, or execute arbitrary code. CVE-2026-84471 It was discovered that OpenVPN incorrectly handled...
OpenVPN Module Unauthorized Access
The vulnerability of the OpenVPN module of TP-Link Archer AX53 networking hardware is related to errors in system settings or configuration. Exploiting this vulnerability allows a malicious actor to gain unauthorized access to protected information using a specially crafted file...
OpenVPN Module Unauthorized Access
The vulnerability of the OpenVPN module of TP-Link Archer AX53 networking hardware is related to errors in system settings or configuration. Exploiting this vulnerability allows a malicious actor to gain unauthorized access to protected information using a specially crafted file...
OpenVPN Module Arbitrary Command Execution
The vulnerability of the OpenVPN module of TP-Link Archer AX53 router software relates to the lack of measures taken to neutralize special elements used in the operating system’s command set. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands using a specially...
CVE-2026-101859
A vulnerability has been found in RaspAP raspap-webgui up to 3.5.5. Affected by this vulnerability is the function escapeshellcmd of the file ajax/openvpn/delovpncfg.php of the component OpenVPN Configuration Handler. Such manipulation of the argument cfgid leads to os command injection. The atta...
CVE-2026-101859
A vulnerability exists in RaspAP raspap-webgui up to version 3.5.5 within the OpenVPN Configuration Handler component. The root cause is an os command injection vulnerability in the escapeshellcmd function of the ajax/openvpn/del_ovpncfg.php file. Attackers can exploit this by manipulating the cf...
CVE-2026-101859 RaspAP raspap-webgui OpenVPN Configuration del_ovpncfg.php escapeshellcmd os command injection
A vulnerability has been found in RaspAP raspap-webgui up to 3.5.5. Affected by this vulnerability is the function escapeshellcmd of the file ajax/openvpn/delovpncfg.php of the component OpenVPN Configuration Handler. Such manipulation of the argument cfgid leads to os command injection. The atta...