openSSL_1.0.1g

OpenSSL 1.0.1g 7 Apr 2014 Copyright c 1998-2011 The OpenSSL Project Copyright c 1995-1998 Eric A. Young, Tim J. Hudson جميع الحقوق محفوظة. الوصف مشروع OpenSSL هو جهد تعاوني لتطوير مجموعة أدوات قوية، بجودة تجارية، كاملة الميزات، ومفتوحة المصدر تنفّذ بروتوكولات طبقة المقابس الآمنة SSL v2/v3 وأمان...

openssl_G2.5_CVE-2014-3570

OpenSSL 1.0.1g 7 Apr 2014 Copyright c 1998-2011 The OpenSSL Project Copyright c 1995-1998 Eric A. Young, Tim J. Hudson All rights reserved. DESCRIPTION The OpenSSL Project is a collaborative effort to develop a robust, commercial-grade, fully featured, and Open Source toolkit implementing the...

openssl_g2.5_CVE-2014-3566

OpenSSL 1.0.1g 7 Apr 2014 Copyright c 1998-2011 The OpenSSL Project Copyright c 1995-1998 Eric A. Young, Tim J. Hudson All rights reserved. DESCRIPTION The OpenSSL Project is a collaborative effort to develop a robust, commercial-grade, fully featured, and Open Source toolkit implementing the...

CVE-2014-5139

OpenSSL 1.0.1g 7 Apr 2014 Copyright c 1998-2011 The OpenSSL Project Copyright c 1995-1998 Eric A. Young, Tim J. Hudson All rights reserved. DESCRIPTION The OpenSSL Project is a collaborative effort to develop a robust, commercial-grade, fully featured, and Open Source toolkit implementing the...

OpenSSL_1_0_1g_CVE-2015-0205

OpenSSL 1.0.1g 7 Apr 2014 Copyright c 1998-2011 The OpenSSL Project Copyright c 1995-1998 Eric A. Young, Tim J. Hudson All rights reserved. DESCRIPTION The OpenSSL Project is a collaborative effort to develop a robust, commercial-grade, fully featured, and Open Source toolkit implementing the...

heartbleed

HEARTBLEED : OpenSSL TLS HEARTBLEED VULNERABILITY OpenSSL TLS Heartbeat Extension - Memory Disclosure - Multiple SSL/TLS versions vulnerability scanner and exploit need: root@kitploit: sudo apt-get install nmap lolcat java root@kitploit: sudo apt install default-jre default-jdk...

OpenSSL_1_0_1g_CVE-2015-1788

OpenSSL 1.0.1g 7 Apr 2014 Copyright c 1998-2011 The OpenSSL Project Copyright c 1995-1998 Eric A. Young, Tim J. Hudson सर्वाधिकार सुरक्षित। विवरण OpenSSL प्रोजेक्ट एक सहयोगात्मक प्रयास है जो एक मजबूत, व्यावसायिक-ग्रेड, पूर्ण-विशेषताओं वाला और ओपन सोर्स टूलकिट विकसित करता है जो Secure Sockets Laye...

hassh

"HASSH" - a Profiling Method for SSH Clients and Servers. NOTE: This Corelight repository was created so that it can be actively maintained, as per a request from Salesforce whose original repository is not being maintained. "HASSH" is a network fingerprinting standard which can be used to identi...

SSLPatch

SSL पैच CVE-2014-1266 कॉपीराइट c 2014 लिनस यांग परिचय CVE-2014-1266 , जिसे "goto fail SSL सत्यापन शोषण" के नाम से जाना जाता है, iOS और OS X की एक बहुत गंभीर SSL/TLS कमजोरी है। Apple ने इस समस्या को ठीक करने के लिए iOS 6.1.6 और 7.0.6 जारी किए, लेकिन कुछ उपयोगकर्ताओं को अनदेखा कर दिया जो अपने सिस्ट...

AcrStealer-Custom-Protocol-Credential-Theft-Payload-Extraction-Analysis

1. اتصالات الشبكة وإعدادات SSL/TLS يكشف تحليل ذاكرة Process Hacker أن AcrStealer يُنشئ اتصالات شبكة باستخدام SSL/TLS للتواصل الآمن مع خادم C2 الخاص به. الملاحظات الرئيسية: SslClientCert – يستخدم شهادات عميل للمصادقة يتفادى الاكتشاف. EnabledProtocols – يحدد بروتوكولات TLS المدعومة مثل TLS 1.2, 1.3...

censys-enumeration

تعداد Censys سكربت لاستخراج النطاقات الفرعية/البريد الإلكتروني لنطاق معيّن باستخدام مجموعة بيانات شهادات SSL/TLS على Censys يكون الإخراج بتنسيق JSON العرض التجريبي لقطات الشاشة الوضع غير المفصّل الوضع المفصّل نموذج إخراج JSON تبعية حزم الطرف الثالث censys click الإعداد استنسخ هذا المستودع...

ssl-kill-switch2

SSL Kill Switch 2 أداة صندوق أسود لتعطيل التحقق من شهادات SSL/TLS - بما في ذلك تثبيت الشهادات - داخل تطبيقات iOS و macOS. التكرار الثاني لـ https://github.com/iSECPartners/ios-ssl-kill-switch . الوصف بمجرد تحميلها داخل تطبيق iOS أو macOS، ستقوم SSL Kill Switch 2 بتصحيح الوظائف منخفضة المستوى...

CVE-2026-14456 vulnerabilities

Vulnerabilities for packages: openssl...

DEBIAN-CVE-2026-63336

The RabbitMQ Java client library allows Java and JVM-based applications to connect to and interact with RabbitMQ nodes. Prior to 5.33.0, com.rabbitmq.client.ConnectionFactory.useSslProtocol and ConnectionFactory.useSslProtocolString configure com.rabbitmq.client.TrustEverythingTrustManager and...

CVE-2026-63336 RabbitMQ Java client: TrustEverythingTrustManager used by default in useSslProtocol() enables MITM

The RabbitMQ Java client library allows Java and JVM-based applications to connect to and interact with RabbitMQ nodes. Prior to 5.33.0, com.rabbitmq.client.ConnectionFactory.useSslProtocol and ConnectionFactory.useSslProtocolString configure com.rabbitmq.client.TrustEverythingTrustManager and...

EUVD-2026-60953

Mastodon is a free, open-source social network server based on ActivityPub. Prior to 4.4.19 and from 4.5.0 until 4.5.12, Mastodon's app/models/concerns/user/ldapauthenticable.rb mutates OpenSSL::SSL::SSLContext::DEFAULTPARAMS when LDAP authentication uses LDAPTLSNOVERIFY=true, disabling SSL and T...

CVE-2026-59825 Mastodon: Unwanted deactivation of SSL/TLS certificate verification

Mastodon is a free, open-source social network server based on ActivityPub. Prior to 4.4.19 and from 4.5.0 until 4.5.12, Mastodon's app/models/concerns/user/ldapauthenticable.rb mutates OpenSSL::SSL::SSLContext::DEFAULTPARAMS when LDAP authentication uses LDAPTLSNOVERIFY=true, disabling SSL and T...

CVE-2026-59825

When LDAP auth uses LDAP_TLS_NO_VERIFY=true, app/models/concerns/user/ldap_authenticable.rb mutates OpenSSL::SSL::SSLContext::DEFAULT_PARAMS, disabling SSL/TLS verification globally for puma web processes. This enables MITM attacks against all puma-originated HTTPS requests. Fixed in Mastodon 4.4...

CVE-2026-59825 Mastodon: Unwanted deactivation of SSL/TLS certificate verification

Mastodon is a free, open-source social network server based on ActivityPub. Prior to 4.4.19 and from 4.5.0 until 4.5.12, Mastodon's app/models/concerns/user/ldapauthenticable.rb mutates OpenSSL::SSL::SSLContext::DEFAULTPARAMS when LDAP authentication uses LDAPTLSNOVERIFY=true, disabling SSL and T...

K000162943: Spring boot vulnerability CVE-2026-40992

Security Advisory Description Spring Boot's Mail auto-configuration does not enable hostname verification. Applications that set the relevant JavaMail property, such as spring.mail.properties.mail.smtp.ssl.checkserveridentity=true, are not affected. Affected versions: Spring Boot 4.0.0 through...