knockpy

🔍 Knockpy Subdomain Scan v9.0 ✅ Fast & Async • 🔐 Recon + Brute • 🔧 Easy to Extend KnockPy is a modular Python 3 tool to enumerate subdomains via passive reconnaissance and bruteforce, now with async/await support , enhanced performance, and modern HTTP/TLS handling. 🚀 Features v9 ✅ Async scanning...

CVE-2026-86474

The lack of TLS certificate validation when downloading firmware updates in VEO and VEO-XS Wi-Fi monitors, in versions prior to 01.48.001, allows an attacker to perform man-in-the-middle attacks on the update channel...

CVE-2022-21668-Pipenv-RCE-vulnerability

CVE-2022-21668-Pipenv-RCE-vulnerability 1. Introduction In this document the Pipenv vulnerabilityCVE-2022-21668 is discussed in detail. The following sections cover the bug code in pipenv/utils.py file which opens up the door for various RCE attacks and also about the recent fix which validates...

CVE-2025-32407

CVE-2025-32407 Proof of concept for CVE-2025-32407: a misconfiguration in the TLS certificate validation of the Samsung Galaxy Watch app "Samsung Internet for Galaxy Watch" version 5.0.9. Description The Galaxy Watch app "Samsung Internet for Galaxy Watch" version 5.0.9, available up until Samsun...

ssl-kill-switch2

SSL Kill Switch 2 黑盒工具，用于在 iOS 和 macOS 应用程序中禁用 SSL/TLS 证书验证（包括证书固定）。这是 https://github.com/iSECPartners/ios-ssl-kill-switch 的第二代版本。 描述 一旦加载到 iOS 或 macOS 应用程序中，SSL Kill Switch 2 将修补负责处理 SSL/TLS 连接的底层函数，以覆盖并禁用系统的默认证书验证，以及任何类型的自定义证书验证（例如证书固定）。 它已成功针对各种实现证书固定的应用程序进行了测试，包括 Apple App Store。SSL Kill Swit...

CVE-2026-25961-SumatraPDF-3.5.0---3.5.2-RCE

SumatraPDF Insecure Update PoC CVE-2026-25961 – Remote Code Execution via Malicious Update Server Author: Mohammed Idrees Banyamer Date: February 2026 CVE: CVE-2026-25961 GHSA: GHSA-xpm2-rr5m-x96q CVSS v3.1: 7.5 High AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H Affected versions: SumatraPDF 3.5.0 – 3.5.2...

CVE-2026-87872

A flaw was found in the OCAPI modules ocapicommand, ocapiinfo of the community.general Ansible collection. The shared OCAPI request helper disables TLS certificate validation on every request and the modules expose no parameter to re-enable it, while sending HTTP Basic-Auth credentials to an http...

DEBIAN-CVE-2026-87872

A flaw was found in the OCAPI modules ocapicommand, ocapiinfo of the community.general Ansible collection. The shared OCAPI request helper disables TLS certificate validation on every request and the modules expose no parameter to re-enable it, while sending HTTP Basic-Auth credentials to an http...

EUVD-2026-75086

A flaw was found in the OCAPI modules ocapicommand, ocapiinfo of the community.general Ansible collection. The shared OCAPI request helper disables TLS certificate validation on every request and the modules expose no parameter to re-enable it, while sending HTTP Basic-Auth credentials to an http...

CVE-2026-87872 Community.general: community.general: ocapi module_utils (ocapi_command, ocapi_info) hardcode validate_certs=false with no override, enabling tls man-in-the-middle and credential disclosure

A flaw was found in the OCAPI modules ocapicommand, ocapiinfo of the community.general Ansible collection. The shared OCAPI request helper disables TLS certificate validation on every request and the modules expose no parameter to re-enable it, while sending HTTP Basic-Auth credentials to an http...

CVE-2026-87872

A flaw in the OCAPI modules (ocapi_command, ocapi_info) of the community.general Ansible collection hardcodes validate_certs=false in the shared request helper with no parameter to re-enable it. Because the modules send HTTP Basic-Auth credentials over HTTPS, an attacker positioned on the network...

CVE-2026-87872

A flaw was found in the OCAPI modules ocapicommand, ocapiinfo of the community.general Ansible collection. The shared OCAPI request helper disables TLS certificate validation on every request and the modules expose no parameter to re-enable it, while sending HTTP Basic-Auth credentials to an http...

CVE-2024-40898-SSL-Bypass-Detection

CVE-2024-40898 SSL Certificate Validation Bypass Scanner This repository contains a Python-based proof-of-concept PoC script to detect CVE-2024-40898, a vulnerability in Apache HTTP Server that allows attackers to bypass SSL certificate verification. Overview CVE-2024-40898 is a security issue in...

PT-2026-89097

A flaw was found in the OCAPI modules ocapi command, ocapi info of the community.general Ansible collection. The shared OCAPI request helper disables TLS certificate validation on every request and the modules expose no parameter to re-enable it, while sending HTTP Basic-Auth credentials to an...

Linux Distros Unpatched Vulnerability : CVE-2026-87872

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in the OCAPI modules ocapicommand, ocapiinfo of the community.general Ansible collection. The shared OCAPI request helper disables TLS...

CVE-2026-84197

In Eclipse Ditto's Node.js JavaScript client, all released versions of @eclipse-ditto/ditto-javascript-client-node from 2.0.0 to 3.9.0 and of its predecessor package @eclipse-ditto/ditto-javascript-client-node1.0 from 1.0.0 to 2.1.0, the WebSocket transport hard-codes rejectUnauthorized: false wh...

CVE-2026-84197

In Eclipse Ditto's Node.js JavaScript client, all released versions of @eclipse-ditto/ditto-javascript-client-node from 2.0.0 to 3.9.0 and of its predecessor package @eclipse-ditto/ditto-javascript-client-node1.0 from 1.0.0 to 2.1.0, the WebSocket transport hard-codes rejectUnauthorized: false wh...

CVE-2026-84197

Eclipse Ditto's Node.js JavaScript client hard-codes rejectUnauthorized: false in its WebSocket transport, disabling TLS certificate chain and hostname validation for every wss:// connection. All released versions of @eclipse-ditto/ditto-javascript-client-node (2.0.0–3.9.0) and its predecessor @e...

EUVD-2026-74162

In Eclipse Ditto's Node.js JavaScript client, all released versions of @eclipse-ditto/ditto-javascript-client-node from 2.0.0 to 3.9.0 and of its predecessor package @eclipse-ditto/ditto-javascript-client-node1.0 from 1.0.0 to 2.1.0, the WebSocket transport hard-codes rejectUnauthorized: false wh...

CVE-2026-84961

undici's BalancedPool constructor passes its entire options object through an internal deep-clone that serializes and reparses the value as JSON. Because JSON cannot represent functions, any function-valued TLS option, such as a caller-supplied checkServerIdentity callback or a custom connector...