BEAST-PoC

BEAST-PoC attaque à texte clair choisi Cette preuve de concept se concentre sur la cryptographie derrière l'attaque BEAST Browser Exploit Against SSL/TLS présentée par Thai Duong et Juliano Rizzo le 23 septembre 2011. Il s'agit d'une attaque à texte clair choisi et elle vous permet de récupérer d...

poodle-PoC

Poodle PoC 🐩 🐩 🐩 Концепт-доказательство атаки Poodle Padding Oracle On Downgraded Legacy Encryption: эксплойт типа «человек посередине», использующий откат клиентов интернет- и охранного ПО к SSL 3.0 Атака Poodle позволяет восстановить зашифрованные данные, отправленные клиентом на сервер, если...

openssl

Welcome to the OpenSSL Project OpenSSL is a robust, commercial-grade, full-featured Open Source Toolkit for the Transport Layer Security TLS, formerly SSL, Datagram TLS DTLS, and QUIC protocols. The protocol implementations are based on a full-strength general purpose cryptographic library, which...

OpenSSL-CCS-Inject-Test

OpenSSL CCS Inject Test 이 스크립트는 다양한 설정 환경에서 취약한 서버CVE-2014-0224를 탐지하기 위해 설계되었습니다. 영향을 받는 각 프로토콜 버전SSLv3, TLSv1, TLSv1.1 및 TLSv1.2으로 협상을 시도하며, 포괄적인 암호화 제품군을 제공합니다. 변경 사항: v0.1 - 더 긴 인증서 메시지를 처리하기 위해 수신 버퍼 크기 업데이트 v0.2 - 다른 TLS 레코드와 동일한 세그먼트에 포함된 종료 경보를 인식하도록 레코드 처리 업데이트 v0.3 - 도구 출력을 명확히 하기 위해 문구 ...

mangy-beast

Mangy Beast Red Hat 호스트에서 Apache와 modssl 또는 modnss를 실행하고 Windows Server 2008 및 2012서버 프로세스만 해당에서 CVE-2014-3566 일명 POODLE 취약점 탐지를 위한 CloudPassage Halo 정책 =========== CVE-2014-3566 일명 POODLE의 세부 사항을 다시 다루지 않겠습니다. 여기까지 오셨다면, 안정적으로 탐지하고 수정할 방법을 찾고 계실 것입니다. 배경: POODLE은 SSLSecure Sockets Layer 프로토콜 버전 ...

Openssl_V.1.1.1g

OpenSSL 1.1.1g 21 Apr 2020 Copyright c 1998-2020 The OpenSSL Project Copyright c 1995-1998 Eric A. Young, Tim J. Hudson 保留所有权利。 描述 OpenSSL 项目是一个协作项目，旨在开发一个健壮、商业级、功能齐全且开源的 工具包，实现传输层安全（TLS）协议（包括 SSLv3），以及一个完整强度的 通用加密库。 OpenSSL 源自 Eric A. Young 和 Tim J. Hudson 开发的 SSLeay 库。 OpenSSL 工具包采用双许可证（OpenSSL...

a2sv

1. A2SV? Auto Scanning to SSL Vulnerability. HeartBleed, CCS Injection, SSLv3 POODLE, FREAK... etc A. Support Vulnerability root@kitploit: - CVE-2007-1858 Anonymous Cipher - CVE-2012-4929 CRIMESPDY - CVE-2014-0160 CCS Injection - CVE-2014-0224 HeartBleed - CVE-2014-3566 SSLv3 POODLE -...

Security Bulletin: Vulnerability in SSLv3 affects IBM System Storage Tape Controller 3592 Model C07 (CVE-2014-3566)

Summary SSLv3 contains a vulnerability that has been referred to as the Padding Oracle On Downgraded Legacy Encryption POODLE attack. SSLv3 is enabled in IBM System Storage Tape Controller 3592 Model C07. Vulnerability Details CVE ID: CVE-2014-3566 DESCRIPTION: Product could allow a remote attack...

Security Bulletin: Vulnerability in SSLv3 affects TS3100/TS3200 (CVE-2014-3566)

Summary SSLv3 contains a vulnerability that has been referred to as the Padding Oracle On Downgraded Legacy Encryption POODLE attack. SSLv3 is enabled in TS3100/TS3200. Vulnerability Details CVE-ID : CVE-2014-3566 DESCRIPTION : Product could allow a remote attacker to obtain sensitive information...

MiracleLinux 4 : curl-7.19.7-46.AXS4 (AXSA:2015-432:02)

The remote MiracleLinux 4 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2015-432:02 advisory. cURL is a tool for getting files from HTTP, FTP, FILE, LDAP, LDAPS, DICT, TELNET and TFTP servers, using any of the supported protocols. cURL is...

EUVD-2016-4752

Malware in sbrugna...

EUVD-2019-6636

Malware in sbrugna...

EUVD-2013-6505

Malware in sbrugna...

EUVD-2015-4104

Malware in sbrugna...

EUVD-2014-6062

Malware in sbrugna...

wget security update

1.19.5-12.0.1 - SSLv3 support dropped from openssl, v3 test certificates need to be replaced Orabug: 29613455 1.19.5-12 - Resolves: RHEL-43559 - Misinterpretation of input may lead to improper behavior...

Oracle Linux 8 : wget (ELSA-2024-5299)

The remote Oracle Linux 8 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2024-5299 advisory. 1.19.5-12.0.1 - SSLv3 support dropped from openssl, v3 test certificates need to be replaced Orabug: 29613455 1.19.5-12 - Resolves: RHEL-43559 - Misinterpretati...

CVE-2024-0323

The FTP server used on the B&R Automation Runtime supports unsecure encryption mechanisms, such as SSLv3, TLSv1.0 and TLS1.1. An network-based attacker can exploit the flaws to conduct man-in-the-middle attacks or to decrypt communications between the affected product clients...

Design/Logic Flaw

Use of a Broken or Risky Cryptographic Algorithm vulnerability in B&R Industrial Automation Automation Runtime SDM modules. The FTP server used on the B&R Automation Runtime supports unsecure encryption mechanisms, such as SSLv3, TLSv1.0 and TLS1.1. An network-based attacker can exploit the flaws...

CVE-2024-0323 FTP uses unsecure encryption mechanisms

The FTP server used on the B&R Automation Runtime supports unsecure encryption mechanisms, such as SSLv3, TLSv1.0 and TLS1.1. An network-based attacker can exploit the flaws to conduct man-in-the-middle attacks or to decrypt communications between the affected product clients...