shodan

Shodan Dorks by twitter.com/lothos612 Feel free to make suggestions Shodan Dorks Basic Shodan Filters city: Find devices in a particular city. city:"Bangalore" country: Find devices in a particular country. country:"IN" geo: Find devices by giving geographical coordinates...

trufflehog

TruffleHog Find leaked credentials. 🔎 Now Scanning ...and more To learn more about TruffleHog and its features and capabilities, visit our product page. 🌐 TruffleHog Enterprise Are you interested in continuously monitoring Git, Jira, Slack, Confluence, Microsoft Teams, Sharepoint and more for...

lumina_server

About POC of an offline server for IDA Lumina feature. More details on https://www.synacktiv.com/publications/investigating-ida-lumina-feature.html Instalation Python package installation Download project and run python lumina/setup.py or pip install .. Server can also be used as a standalone...

certstream-server-rust

certstream-server-rust A Certstream server written in Rust. It monitors Certificate Transparency CT logs and streams newly issued SSL/TLS certificates over WebSocket and Server-Sent Events SSE. Overview Certstream aggregates certificates from Certificate Transparency logs and streams them in real...

censys-enumeration

Censys Enumeration A script to extract subdomains/emails for a given domain using SSL/TLS certificates dataset on Censys The output is in JSON format Demo Screenshots Non verbose mode Verbose mode Sample JSON output 3rd party package dependency censys click Setup Clone this repo $ git clone...

CVE-2026-123848

In JetBrains IntelliJ IDEA before 2026.3 host name verification was missing for server TLS certificates...

CVE-2026-123848

In JetBrains IntelliJ IDEA before 2026.3 host name verification was missing for server TLS certificates...

CVE-2026-123848

In JetBrains IntelliJ IDEA versions prior to 2026.3 , the software fails to perform host name verification for server TLS certificates . This vulnerability (associated with CWE-297 ) could allow for potential man-in-the-middle attacks during secure communications. The impact includes high risks t...

EUVD-2026-118351

In JetBrains IntelliJ IDEA before 2026.3 host name verification was missing for server TLS certificates...

CVE-2026-123848: JetBrains IntelliJ IDEA: In JetBrains IntelliJ IDEA before 2026.3 host name verification was missing for server TLS certificates

In JetBrains IntelliJ IDEA before 2026.3 host name verification was missing for server TLS certificates...

Exploit for CVE-2026-111943

CVE-2026-111943-Emudhra-Ca-Compromise-POC eMudhra/emSign I...

CLEANSTART-2024-ED39538 error page for sites with invalid TLS certificates was missing the activation-delay Firefox uses to protect prompts and permission dialogs from attacks that exploit human response time delays

Security vulnerability affects the firefox-esr package. The error page for sites with invalid TLS certificates was missing the activation-delay Firefox uses to protect prompts and permission dialogs from attacks that exploit human response time delays...

Security Bulletin: IBM MQ Appliance is affected by a stack buffer overflow vulnerability (CVE-2026-12665)

Summary IBM MQ Appliance has addressed a stack buffer overflow vulnerability that could allow an unauthenticated attacker to execute arbitrary code when processing TLS certificates with malformed distinguished names during channel connection establishment. Vulnerability Details CVEID:CVE-2026-126...

Security Bulletin: IBM MQ is affected by an arbitrary code execution vulnerability (CVE-2026-12665)

Summary IBM MQ has addressed an arbitrary code execution vulnerability due to a stack buffer overflow when processing TLS certificates with malformed distinguished names during channel connection establishment Vulnerability Details CVEID:CVE-2026-12665 DESCRIPTION: IBM MQ could allow a remote...

Oracle Java SE 27.0.1 eMudhra Certificate Scanner

This tool checks Java and system trust stores for acceptance of TLS certificates chaining to compromised eMudhra intermediate CAs associated with the vulnerability...

GoDaddy Revokes 404,607 SSL Certificates After Policy Errors

GoDaddy revoked 404,607 SSL/TLS certificates after finding certificate-policy errors, with affected sites including some Gibraltar government websites...

Compromised TLS Certificates

The Indian CA eMudhra Limited has eight TLS certificates with laughably weak private keys: The compromised eMudhra keys were defective at a level that’s challenging the imagination of many of the engineers studying the incident. A normal size for a NIST P-384 elliptic curve cryptography private k...

Eight Compromised eMudhra CA Keys: What Happened and What Organizations Should Do Now

Key Takeaways The private keys of eight intermediate certificate authority CA certificates belonging to eMudhra, an India-based CA issuer, have been compromised. Six CAs can issue TLS certificates for websites and two can issue code-signing certificates. Until they were blocked, all eight chained...

FreeRDP encryption issue vulnerability

Versions FreeRDP from 2.0.0 up to 3.32.0 contain an encryption vulnerability. This vulnerability arises because the proxy fails to properly validate certificates when a validation module is not configured. It accepts TLS certificates from untrusted sources. Network location attackers can intercep...

CVE-2026-12665

IBM MQ could allow a remote attacker to execute arbitrary code due to a stack buffer overflow when processing TLS certificates with malformed distinguished names during channel connection establishment...