EUVD-2026-91026

The Joyland AI app accepts any TLS certificates from any server without validation...

CVE-2026-15911

Confluent Kafka Python client's HashiCorp Vault KMS integration could allow a remote attacker to obtain sensitive information due to improper TLS certificate validation...

EUVD-2026-91008

Confluent Kafka Python client's HashiCorp Vault KMS integration could allow a remote attacker to obtain sensitive information due to improper TLS certificate validation...

CVE-2026-103921

GraphQL Tools provides utilities for building, stitching, and mocking GraphQL schemas. Prior to 1.1.35, the executor-legacy-ws buildWSLegacyExecutor function hardcodes TLS certificate rejection off for Node.js connections to wss:// endpoints. Applications using the executor directly, or url-loade...

ligolo

Ligolo : 渗透测试者打造的简易反向隧道工具 目录 引言 使用场景 快速演示 性能 使用方法 设置/编译 如何使用？ 太长不看 选项 功能特点 待办事项 许可证 致谢 引言 Ligolo 是一款 简单 且 轻量 的工具，用于通过反向连接安全地建立 SOCKS5 或 TCP 隧道（使用椭圆曲线 TLS 证书）。 它类似于 Meterpreter 配合 Autoroute + Socks4a ，但更稳定、更快速。 使用场景 你在外部审计期间攻陷了一台 Windows / Linux / Mac 服务器。该服务器位于局域网内部，而你需要与该网络上的其他机器建立连接。 Ligolo...

CVE-2026-103921 GraphQL Tools: TLS Certificate Validation Disabled in Legacy GraphQL WebSocket Executor

GraphQL Tools provides utilities for building, stitching, and mocking GraphQL schemas. Prior to 1.1.35, the executor-legacy-ws buildWSLegacyExecutor function hardcodes TLS certificate rejection off for Node.js connections to wss:// endpoints. Applications using the executor directly, or url-loade...

EUVD-2026-90922

GraphQL Tools provides utilities for building, stitching, and mocking GraphQL schemas. Prior to 1.1.35, the executor-legacy-ws buildWSLegacyExecutor function hardcodes TLS certificate rejection off for Node.js connections to wss:// endpoints. Applications using the executor directly, or url-loade...

CVE-2026-103921

The GraphQL Tools library (prior to version 1.1.35 ) contains a vulnerability where the executor-legacy-ws buildWSLegacyExecutor() function hardcodes TLS certificate rejection to be disabled for Node.js connections to wss:// endpoints. If an application uses this executor directly or uses url-loa...

CVE-2025-65753

CVE-2025-65753 CVE-2025-65753 的概念验证：在 Gryphon Guardian 接入点（固件版本 01.06.0006.22）上，由于 TLS 证书验证不当而导致的远程代码执行。 描述 Gryphon Guardian WiFi 接入点（固件版本 01.06.0006.22）未能正确验证通过应用提示后下载的互联网 speedtest 客户端的 TLS 证书。此缺陷使攻击者能够拦截并操纵通信，向该客户端注入恶意代码，随后该代码会以 root 身份在接入点上执行。 PoC 利用此漏洞有两种方式： 通过 MitM 攻击，直接拦截接入点与服务器之间的通信 通过伪造...

nodejs24 security, bug fix, and enhancement update

An update is available for nodejs24. This update affects Rocky Linux 10. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Node.js is a platform built on Chrome's JavaScript runtime for easily...

CVE-2022-0778-POC

一个针对 CVE-2022-0778 的简单远程触发 POC 为什么 在尝试验证我们这边的服务器实现是否受到 CVE-2022-0778 影响时，发现远程验证极其繁琐。虽然关于如何构造恶意证书来触发 BNnodsqrt 中的解析漏洞的教程早已存在，但主要问题在于大多数客户端实现会尝试解析客户端证书以便在 TLS 握手中使用它。这反过来意味着： 如果实现存在漏洞，该漏洞会被触发，客户端将占用 100% CPU 并停滞。 如果实现不存在漏洞，则无法解析证书，客户端会理所当然地退出。 是什么 实际需要的是能够在 TLS 握手中注入一条消息，从而替换客户端在响应 CertificateReque...

rustbuster

rustbuster A Comprehensive Web Fuzzer and Content Discovery Tool Introduction Check the blog post: Introducing Rustbuster — A Comprehensive Web Fuzzer and Content Discovery Tool Download You can download prebuilt binaries from here. Installation installrustbuster echo "Installing latest version o...

nodejs:24 security, bug fix, and enhancement update

An update is available for module.nodejs, nodejs, module.nodejs-packaging, nodejs-packaging, nodejs-nodemon, module.nodejs-nodemon. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability...

Important: Red Hat Security Advisory: nodejs:24 security, bug fix, and enhancement update

An update for the nodejs:24 module is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

undici: undici: TLS certificate validation bypass in BalancedPool via dropped connect options

A flaw was found in undici's BalancedPool component. This vulnerability allows a remote attacker to bypass Transport Layer Security TLS certificate validation. The BalancedPool constructor incorrectly processes its options, silently discarding custom certificate validation functions. Consequently...

CVE-2026-10726

Cato Windows SDP Client before version 6.12.6 contains an arbitrary file disclosure vulnerability. A low-privileged local user can cause the Windows service, running as Local System, to read and disclose arbitrary local files due to improper file path validation and missing TLS certificate...

nodejs:24 security, bug fix, and enhancement update

An update is available for module.nodejs, nodejs, module.nodejs-packaging, nodejs-packaging, nodejs-nodemon, module.nodejs-nodemon. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability...

EUVD-2026-89780

Cato Windows SDP Client before version 6.12.6 contains an arbitrary file disclosure vulnerability. A low-privileged local user can cause the Windows service, running as Local System, to read and disclose arbitrary local files due to improper file path validation and missing TLS certificate...

CVE-2026-10726 Cato Windows SDP Client arbitrary file disclosure due to improper TLS certificate validation

Cato Windows SDP Client before version 6.12.6 contains an arbitrary file disclosure vulnerability. A low-privileged local user can cause the Windows service, running as Local System, to read and disclose arbitrary local files due to improper file path validation and missing TLS certificate...

CVE-2026-10726

The Cato Windows SDP Client before version 6.12.6 is vulnerable to an arbitrary file disclosure vulnerability. A low-privileged local user can exploit this flaw to force the Windows service—which operates with Local System privileges—to read and disclose arbitrary local files. The root cause is a...