CurveBall-CVE-2020-0601-PoC

CurveBall CVE-2020-0601 - PoC 이 취약점은 CurveBall로 알려져 있으며, ECC 알고리즘을 사용하는 인증서의 잘못된 검증으로 인해 발생합니다. Windows는 인증서 캐시에서 이전에 검증된 인증서를 확인하려고 시도하며, 이 과정에서 인증서의 공개 키가 동일한지만 확인하고 다른 매개변수는 확인하지 않습니다. 수학적 세부 사항 인증서를 위조하기 위해, 우리는 다음과 같이 매개변수를 명시적으로 설정합니다: root@kitploit: d' = 1 G' = Q 더 많은 정보가 필요하다면...

CVE-2026-47074

Improper Certificate Validation vulnerability in ex-aws exawssns ExAws.SNS, ExAws.SNS.PublicKeyCache modules allows Signature Spoofing by Improper Validation. This vulnerability is associated with program files lib/exaws/sns.ex, lib/exaws/sns/publickeycache.ex and program routines...

PT-2026-44365

Name of the Vulnerable Software and Affected Versions ex aws sns versions 2.0.1 through 2.3.4 Description Improper Certificate Validation in the ExAws.SNS and ExAws.SNS.PublicKeyCache modules allows for signature spoofing. The function verify message fetches the signing certificate from the...

EUVD-2010-4650

Malware in sbrugna...

CVE-2010-4685

Cisco IOS before 15.01XA1 does not clear the public key cache upon a change to a certificate map, which allows remote authenticated users to bypass a certificate ban by connecting with a banned certificate that had previously been valid, aka Bug ID CSCta79031...

Design/Logic Flaw

Cisco IOS before 15.01XA1 does not clear the public key cache upon a change to a certificate map, which allows remote authenticated users to bypass a certificate ban by connecting with a banned certificate that had previously been valid, aka Bug ID CSCta79031...

CVE-2010-4685

Cisco IOS before 15.01XA1 does not clear the public key cache upon a change to a certificate map, which allows remote authenticated users to bypass a certificate ban by connecting with a banned certificate that had previously been valid, aka Bug ID CSCta79031...