RustTLSX

RustTLSX 🦀 . An advanced stealth HTTP client for Rust. Built for privacy-conscious developers who need complete control over their network fingerprint. Looks like a browser. Acts like a browser. Written in Rust. Credits & Foundation Built onbogdanfinn/tls-client - the industry-leading TLS...

CVE-2022-21449

CVE-2022-21449 Zeek script to detect exploitation attempts of CVE-2022-21449 targeting TLS clients. Only works for TLS 1.2 and below. Install zkg install https://github.com/thack1/CVE-2022-21449 Run Run against supplied pcap file: $ zeek -Cr pcaps/CVE-2022-21449.pcap CVE-2022-21449 Example Notice...

CVE-2026-0073-Android-ADBD-bypass-POC

CVE-2026-0073 — Android ADBD TLS Auth Bypass EVPPKEYcmp type confusion → unauthorized ADB shell 🔥 Overview A critical authentication bypass in Android's ADB daemon adbd allows any attacker on the local network to obtain a full shell on a target device without user authorization. The vulnerability...

Forge: TLS client crash when the server sends no certificate

Summary The forge TLS client's check for a missing server certificate read the wrong property and never ran. A malicious TLS server, or an on-path attacker who removes the server's Certificate message, can make connection.process throw a TypeError, which crashes applications that use the forge TL...

npm: Forge: TLS client crash when the server sends no certificate

npm: Forge: TLS client crash when the server sends no certificate vulnerability discovered by ? in WordPress npm node-forge versions = 1.4.0...

GHSA-525V-9GP9-W22H Forge: TLS client crash when the server sends no certificate

Summary The forge TLS client's check for a missing server certificate read the wrong property and never ran. A malicious TLS server, or an on-path attacker who removes the server's Certificate message, can make connection.process throw a TypeError, which crashes applications that use the forge TL...

AZL-112513 CVE-2026-118778 affecting package python-tensorboard 2.16.2-6

Forge also called node-forge is a native implementation of Transport Layer Security in JavaScript. Prior to 1.4.1, the affected implementation used forge.tls.createConnection, c.session.serverCertificate, RSA key exchange to process the relevant input or security decision. node-forge's TLS client...

CVE-2026-118778 Forge: TLS client crash when the server sends no certificate

Forge also called node-forge is a native implementation of Transport Layer Security in JavaScript. Prior to 1.4.1, the affected implementation used forge.tls.createConnection, c.session.serverCertificate, RSA key exchange to process the relevant input or security decision. node-forge's TLS client...

CVE-2026-118778 Forge: TLS client crash when the server sends no certificate

Forge also called node-forge is a native implementation of Transport Layer Security in JavaScript. Prior to 1.4.1, the affected implementation used forge.tls.createConnection, c.session.serverCertificate, RSA key exchange to process the relevant input or security decision. node-forge's TLS client...

CVE-2026-118778

The Forge (also known as node-forge ) JavaScript TLS implementation is vulnerable to a crash in versions prior to 1.4.1 . The flaw exists in the TLS client when using forge.tls.createConnection(), c.session.serverCertificate, and RSA key exchange . Specifically, the client checks the incorrect pr...

DigitalBazaar Forge improper exception handling vulnerability

Versions of DigitalBazaar Forge prior to 1.4.1 contain an improper exception handling vulnerability. This vulnerability arises because the TLS client checks for an error attribute when determining whether a server certificate is missing. A malicious TLS server or peer on the path can omit the...

CVE-2026-114649

The MongoDB C Driver compares TLS client certificates by issuer and serial number only when deciding whether two clients can share cached connections. In an application that creates clients from certificates supplied by different users, a user who provides a certificate copying another user's...

CVE-2026-114649 Authentication bypass via issuer-and-serial-only certificate equality in shared cluster cache

The MongoDB C Driver compares TLS client certificates by issuer and serial number only when deciding whether two clients can share cached connections. In an application that creates clients from certificates supplied by different users, a user who provides a certificate copying another user's...

CVE-2026-114649 Authentication bypass via issuer-and-serial-only certificate equality in shared cluster cache

The MongoDB C Driver compares TLS client certificates by issuer and serial number only when deciding whether two clients can share cached connections. In an application that creates clients from certificates supplied by different users, a user who provides a certificate copying another user's...

Authentication bypass via issuer-and-serial-only certificate equality in shared cluster cache

The MongoDB C Driver compares TLS client certificates by issuer and serial number only when deciding whether two clients can share cached connections. In an application that creates clients from certificates supplied by different users, a user who provides a certificate copying another user's...

CVE-2026-114649

The MongoDB C# Driver is vulnerable to an authentication bypass due to insufficient certificate validation when managing cached connections. The driver incorrectly compares TLS client certificates using only the issuer and serial number . An attacker can provide a certificate mimicking another us...

EUVD-2026-108317

The MongoDB C Driver compares TLS client certificates by issuer and serial number only when deciding whether two clients can share cached connections. In an application that creates clients from certificates supplied by different users, a user who provides a certificate copying another user's...

CVE-2026-114649

The MongoDB C Driver compares TLS client certificates by issuer and serial number only when deciding whether two clients can share cached connections. In an application that creates clients from certificates supplied by different users, a user who provides a certificate copying another user's...

CVE-2026-114649 Authentication bypass via issuer-and-serial-only certificate equality in shared cluster cache

The MongoDB C Driver compares TLS client certificates by issuer and serial number only when deciding whether two clients can share cached connections. In an application that creates clients from certificates supplied by different users, a user who provides a certificate copying another user's...

CLEANSTART-2026-WR38385 Issue summary: A malicious TLS server can cause a memory leak in a TLS client that has enabled OCSP response checking by sending an OCSP response that contains no single response entries

CVE-2026-54876 affects multiple packages. Issue summary: A malicious TLS server can cause a memory leak in a TLS client that has enabled OCSP response checking by sending an OCSP response that contains no single response entries. See references for individual vulnerability details...