rustbuster

rustbuster A Comprehensive Web Fuzzer and Content Discovery Tool Introduction Check the blog post: Introducing Rustbuster — A Comprehensive Web Fuzzer and Content Discovery Tool Download You can download prebuilt binaries from here. Installation installrustbuster echo "Installing latest version o...

undici vulnerable to TLS certificate validation bypass via dropped connect options in BalancedPool

Impact undici's BalancedPool passes its constructor options through a JSON-based deep clone JSON.parseJSON.stringify... before forwarding them to each per-upstream Pool. JSON cannot represent functions, so a caller-supplied connect or tls option containing a checkServerIdentity callback or a cust...

NPM: undici vulnerable to TLS certificate validation bypass via dropped connect options in BalancedPool

NPM: undici vulnerable to TLS certificate validation bypass via dropped connect options in BalancedPool vulnerability discovered by ? in WordPress Npm undici versions = 7.24.1, 7.29.1...

[SECURITY] [DSA 6514-1] php8.4 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-6514-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff September 25, 2026 https://www.debian.org/security/faq -...

CVE-2026-67598

CVE-2026-67598 Emlog Pro — Validación de certificados TLS deshabilitada en el asistente de IA MITM adyacente a la red → robo de clave de API del proveedor de LLM e inyección de respuestas de IA Resumen · Flujo del ataque · Código afectado · Prueba · Mitigación · Cronología · Referencias 📋 Resumen...

Debian dsa-6514 : libapache2-mod-php8.4 - security update

The remote Debian 13 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-6514 advisory. - ------------------------------------------------------------------------- Debian Security Advisory DSA-6514-1 [email protected] https://www.debian.org/securit...

CVE-2026-77707

The HAVELSAN Inc. Liman Render Engine (versions 1.0 before 1.2-75 ) is vulnerable to an improper certificate validation flaw. This security weakness allows an Adversary in the Middle (AiTM) to intercept or manipulate traffic due to TLS certificate validation being disabled specifically for Keyclo...

CVE-2025-65753

CVE-2025-65753 Prueba de concepto para CVE-2025-65753: Ejecución remota de código en el punto de acceso Gryphon Guardian, versión de firmware 01.06.0006.22, debido a una validación incorrecta del certificado TLS. Descripción El punto de acceso WiFi Gryphon Guardian, con la versión de firmware...

EUVD-2026-80386

The lack of TLS certificate validation when downloading firmware updates in VEO and VEO-XS Wi-Fi monitors, in versions prior to 01.48.001, allows an attacker to perform man-in-the-middle attacks on the update channel...

DRUPAL-CONTRIB-2026-142

This module allows you to configure your Drupal site as a SAML 2.0 Service Provider so that users can authenticate through an external identity provider. The module does not properly validate TLS certificates when making outbound HTTPS requests. An attacker in a position to intercept network...

CVE-2026-9036

IBM Netezza Software 11.3.0.3 through Interim Fix 002 does not validate or improperly validates TLS certificate validation, which could allow an attacker to obtain sensitive information using man in the middle techniques...

CVE-2026-9744 Vulnerabilities exists in IBM Netezza Software

IBM Netezza Software 11.3.0.3 through Interim Fix 002 does not validate or improperly validates TLS certificate validation, which could allow an attacker to obtain sensitive information using man in the middle techniques...

CVE-2026-9036 Vulnerabilities exists in IBM Netezza Software

IBM Netezza Software 11.3.0.3 through Interim Fix 002 does not validate or improperly validates TLS certificate validation, which could allow an attacker to obtain sensitive information using man in the middle techniques...

CVE-2026-9036

IBM Netezza Software versions 11.3.0.3 through Interim Fix 002 contain a TLS certificate validation flaw where the software does not validate or improperly validates TLS certificates. This allows a network-based attacker to perform a man-in-the-middle attack to obtain sensitive information , with...

EUVD-2026-70743

IBM Netezza Software 11.3.0.3 through Interim Fix 002 does not validate or improperly validates TLS certificate validation, which could allow an attacker to obtain sensitive information using man in the middle techniques...

CVE-2026-84736

In the current development version of Eclipse aeriOS, for which no official release has yet been published, the Federator component disables TLS certificate validation for outbound HTTPS connections by default. When the TLSCERTIFICATEVALIDATION environment variable is unset or set to false, the...

CVE-2026-9036: Improper Certificate Validation

IBM Netezza Software 11.3.0.3 through Interim Fix 002 does not validate or improperly validates TLS certificate validation, which could allow an attacker to obtain sensitive information using man in the middle techniques...

PT-2026-85258

IBM Netezza Software 11.3.0.3 through Interim Fix 002 does not validate or improperly validates TLS certificate validation, which could allow an attacker to obtain sensitive information using man in the middle techniques...

RHCOS 4 : OpenShift Container Platform 4.17.57 (RHSA-2026:60018)

The remote Red Hat Enterprise Linux CoreOS 4 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:60018 advisory. - crypto/tls: crypto/tls: Incorrect certificate validation during TLS session resumption CVE-2025-68121 - net/url: Incorrect parsin...

BIT-MARIADB-2026-55215 MariaDB Connector/Node.js: Connector leaks the cleartext password to an MitM despite `ssl: true`

MariaDB Connector/Node.js is used to connect applications developed on Node.js to MariaDB and MySQL databases. Prior to versions 3.3.3, 3.4.6, and 3.5.3, when ssl is enabled without a pinned CA or server certificate, MariaDB Connector/Node.js sends credentials before completing certificate...