skyhook

Skyhook Skyhook is a REST-driven utility used to smuggle files into and out of networks defended by IDS implementations. It comes with a pre-packaged web client that uses a blend of React, vanilla JS, and web assembly to manage file transfers. Key Links Download here See the user documentation to...

1Panel-CVE-2025-54424-

CVE-2025-54424 CVE-2025-54424: 1Panel 클라이언트 인증서 우회 RCE 취약점 통합 도구 스캔+익스플로잇 취약점 개요 1Panel은 오픈 소스의 현대적인 Linux 운영 관리 패널로, 웹 사이트 배포, 서버 관리 및 서비스 실행을 위한 그래픽 인터페이스를 제공합니다. 영향을 받는 버전에서 Agent 측 TLS 인증 정책은 tls.RequireAnyClientCert로 설정되어 있으며, 이는 인증서를 요구하지만 신뢰성을 검증하지 않습니다. 공격자는 자체 서명된 인증서로 TLS 검증을 우회하고, CN 필...

CVE-2025-54424

CVE-2025-54424 CVE-2025-54424: 1Panel 클라이언트 인증서 우회 RCE 취약점 통합 도구 스캔+익스플로잇 취약점 개요 1Panel은 오픈 소스, 현대적인 Linux 운영 관리 패널로, 웹사이트 배포, 서버 관리 및 서비스 실행을 위한 그래픽 인터페이스를 제공합니다. 영향을 받는 버전에서 Agent 측 TLS 인증 정책은 tls.RequireAnyClientCert로, 인증서 제공만 요구하고 신뢰성을 검증하지 않습니다. 공격자는 자체 서명된 인증서로 TLS 검증을 우회하고 CN 필드를...

EUVD-2026-85567

All published s2s-proxy versions through 0.2.2 are affected. In versions 0.1.16 through 0.2.2, TLS server listeners use Go's RequireAnyClientCert mode when skipCAVerification is false. This mode checks that the client holds the certificate's private key but does not verify the certificate against...

CVE-2026-96770

The s2s-proxy software is vulnerable in all published versions through 0.2.2 (specifically versions 0.1.16 through 0.2.2 ). The root cause is that TLS server listeners use Go's RequireAnyClientCert mode while skipCAVerification is set to false. This configuration validates that the client possess...

CVE-2026-96770 s2s-proxy accepts untrusted client certificates

All published s2s-proxy versions through 0.2.2 are affected. In versions 0.1.16 through 0.2.2, TLS server listeners use Go's RequireAnyClientCert mode when skipCAVerification is false. This mode checks that the client holds the certificate's private key but does not verify the certificate against...

PT-2026-97535

All published s2s-proxy versions through 0.2.2 are affected. In versions 0.1.16 through 0.2.2, TLS server listeners use Go's RequireAnyClientCert mode when skipCAVerification is false. This mode checks that the client holds the certificate's private key but does not verify the certificate against...

rsync: rsync: TLS Certificate Validation Bypass allows interception of encrypted sessions

A flaw was found in the rsync-ssl wrapper script's TLS certificate validation. An on-path attacker can present self-signed or invalid certificates to intercept, decrypt, or tamper with encrypted sessions. Because rsync fails to validate the certificate against a trusted CA or verify hostname...

python-cryptography: python-cryptography: Duplicate self-signed intermediates can cause exponential path-building

A flaw was found in python-cryptography. When processing invalid certificate chains that include duplicate self-signed certificates, the system recursively invokes the same certificate, leading to an exponential increase in processing time. A remote attacker could exploit this by providing a...

CVE-2026-82180

In Eclipse Arrowhead versions from 5.0.0 to 5.2.1 when the MQTT API is enabled with the certificate authentication policy, CertificateMqttFilter parses an X.509 certificate that the client sends inside the MQTT message payload the authentication field of MqttRequestTemplate and treats its Subject...

CVE-2026-82180

Eclipse Arrowhead versions 5.0.0 through 5.2.1 are affected when the MQTT API is enabled with the certificate authentication policy. The CertificateMqttFilter decodes an X.509 certificate from the MQTT message payload using CertificateFactory.generateCertificate() but never verifies its signature...

EUVD-2026-70467

In Eclipse Arrowhead versions from 5.0.0 to 5.2.1 when the MQTT API is enabled with the certificate authentication policy, CertificateMqttFilter parses an X.509 certificate that the client sends inside the MQTT message payload the authentication field of MqttRequestTemplate and treats its Subject...

CVE-2026-82180

In Eclipse Arrowhead versions from 5.0.0 to 5.2.1 when the MQTT API is enabled with the certificate authentication policy, CertificateMqttFilter parses an X.509 certificate that the client sends inside the MQTT message payload the authentication field of MqttRequestTemplate and treats its Subject...

PT-2026-85023

In Eclipse Arrowhead versions from 5.0.0 to 5.2.1 when the MQTT API is enabled with the certificate authentication policy, CertificateMqttFilter parses an X.509 certificate that the client sends inside the MQTT message payload the authentication field of MqttRequestTemplate and treats its Subject...

CVE-2026-55856

A flaw was found in MariaDB Connector/J. An active man-in-the-middle MITM attacker or hostile server can exploit a vulnerability during the initial connection handshake. When a Java application connects using specific SSL modes without proper certificate configuration, the connector may accept an...

Linux Distros Unpatched Vulnerability : CVE-2026-55856

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - MariaDB Connector/J is used to connect applications developed in Java to MariaDB and MySQL databases. Prior to 2.7.14, 3.3.5, 3.4.3, and 3.5.9, when a Java...

CVE-2026-55856 MariaDB Connector/J: Cleartext password disclosure to a MITM on the initial-handshake

MariaDB Connector/J is used to connect applications developed in Java to MariaDB and MySQL databases. Prior to 2.7.14, 3.3.5, 3.4.3, and 3.5.9, when a Java application connects with sslMode=verify-full or sslMode=verify-ca, supplies a password, and does not configure serverSslCert or trustStore,...

CVE-2026-55856: Insufficiently Protected Credentials

MariaDB Connector/J is used to connect applications developed in Java to MariaDB and MySQL databases. Prior to 2.7.14, 3.3.5, 3.4.3, and 3.5.9, when a Java application connects with sslMode=verify-full or sslMode=verify-ca, supplies a password, and does not configure serverSslCert or trustStore,...

EUVD-2026-63494

Mongoose is an embedded web server and network library. Prior to 7.23, a network attacker can impersonate a TLS server to a Mongoose client configured with a multi-certificate CA bundle. In src/tlsbuiltin.c, the mgtlsinit function stores the bundle in tls-cabundleder while tls-cader.len remains...

PT-2026-77210

Name of the Vulnerable Software and Affected Versions RabbitMQ Java client library versions prior to 5.33.0 Description The library allows Java and JVM-based applications to interact with RabbitMQ nodes. The functions useSslProtocol and useSslProtocolString within...