27224 matches found
Project-Field-Analysis-and-Memory-Leak-Demonstration
Objetivo El objetivo de este proyecto era evaluar un host remoto para la vulnerabilidad Heartbleed CVE-2014-0160, verificar su presencia y explotarla para extraer información potencialmente sensible de la memoria del servidor a través del protocolo TLS. Ejecución 1. Identificación de servicios...
CVE-2026-85088
A flaw was found in Apache Thrift. During Transport Layer Security TLS certificate validation, the client libraries improperly evaluate the certificate's Common Name CN when subject alternative name SAN entries do not match the target host. A network-positioned attacker possessing a trusted...
dugganusa-ietf
DugganUSA — Contribuciones al Hackathon de la IETF Contribuciones de inteligencia de amenazas del mundo real de DugganUSA LLC al Hackathon de la IETF, ofrecidas a los impulsores de proyectos como fundamento empírico para el trabajo de estándares. Somos una empresa de inteligencia de amenazas...
go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploggrpc: OpenTelemetry-Go: TLS certificate bypass allows log telemetry interception and alteration
A flaw was found in OpenTelemetry-Go, specifically within its gRPC log exporter. This vulnerability allows a network attacker to bypass the intended private Certificate Authority CA pinning and mutual Transport Layer Security TLS configurations. The issue arises because the environment-only TLS...
CVE-2026-45185
CVE-2026-45185 — Dead.Letter: Exim Heap UAF to Remote Root CVSS 9.8 Critical | Exim 4.97–4.99.2 | Ubuntu / GnuTLS builds | Unauthenticated Full write-up with GDB trace, step-by-step analysis, and global exposure data: https://0init.github.io/cve-2026-45185-dead-letter-exim-rce.html What is it...
midonescanner-android
MidONe Scanner اسکنر حرفهای آیپی تمیز CDN · CLOUDFLARE · DNS ⬇️ دانلود APK · 🖥️ دانلود Windows · 📣 کانال تلگرام 🔍 چرا MidONe Scanner؟ بیشتر ابزارهای اسکن IP فقط یک ping ساده میزنند — عددی که هیچ ربطی به سرعت واقعی اتصال ندارد. MidONe Scanner متفاوت است: داده واقعی دانلود میکند. سرعتی که اپ نشان...
go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploggrpc: OpenTelemetry-Go: TLS certificate bypass allows log telemetry interception and alteration
A flaw was found in OpenTelemetry-Go, specifically within its gRPC log exporter. This vulnerability allows a network attacker to bypass the intended private Certificate Authority CA pinning and mutual Transport Layer Security TLS configurations. The issue arises because the environment-only TLS...
Security update for python-anyio
This update for python-anyio fixes the following issues: CVE-2026-63374: : TLSStream IDNA 2003 host name encoding enables potential TLS certificate spoofing bsc1281476. CVE-2026-64847: AnyIO process-pool workers can block indefinitely on undrained stderr bsc1281475. Patch Instructions: To install...
SUSE-SU-2026:4416-1 Security update for python-anyio
This update for python-anyio fixes the following issues: - CVE-2026-63374: : TLSStream IDNA 2003 host name encoding enables potential TLS certificate spoofing bsc1281476. - CVE-2026-64847: AnyIO process-pool workers can block indefinitely on undrained stderr bsc1281475...
CVE-2026-80443 Insecure TLS Certificate Validation in API Tool Runner in HAVELSAN's Sef - AI Chatbot Platform
Improper certificate validation vulnerability in HAVELSAN Inc. Sef - AI Chatbot Platform allows Adversary in the Middle AiTM. This issue affects Sef - AI Chatbot Platform: before 2.1. NOTE: The vendor was contacted and it was learned that the product is not supported...
CVE-2026-80443 Insecure TLS Certificate Validation in API Tool Runner in HAVELSAN's Sef - AI Chatbot Platform
Improper certificate validation vulnerability in HAVELSAN Inc. Sef - AI Chatbot Platform allows Adversary in the Middle AiTM. This issue affects Sef - AI Chatbot Platform: before 2.1. NOTE: The vendor was contacted and it was learned that the product is not supported...
burp-awesome-tls
Awesome TLS This extension hijacks Burp's HTTP and TLS stack, allowing you to spoof any browser TLS fingerprint JA3. It boosts the power of Burp Suite while reducing the likelihood of fingerprinting by various WAFs like CloudFlare, PerimeterX, Akamai, DataDome, etc. This extension works without...
CVE-2026-0073
0-Click RCE en Android Vulnerabilidad crítica CVE‑2026‑0073 en el ADB de Android, un fallo de bypass de autenticación en la verificación del certificado TLS del daemon adbd, específicamente en la función adbdtlsverifycert la verificación del certificado TLS hace que la depuración inalámbrica...
pared
Pared Pared is a lightweight, secure control plane and real-time administrative web dashboard written in Crystal for Linux host security. It provides centralized management for firewalld DBus/CLI interfaces and NetworkManager connections, featuring mutual TLS mTLS, PAM/SSSD authentication, and...
CVE-2026-67598
CVE-2026-67598 Emlog Pro — Validación de certificados TLS deshabilitada en el asistente de IA MITM adyacente a la red → robo de clave de API del proveedor de LLM e inyección de respuestas de IA Resumen · Flujo del ataque · Código afectado · Prueba · Mitigación · Cronología · Referencias 📋 Resumen...
driftwood
Driftwood ⚠️ The Driftwood CLI tool is no longer supported. Please use TruffleHog instead! ⚠️ Driftwood is a tool that can enable you to lookup whether a private key is used for things like TLS or as a GitHub SSH key for a user. Driftwood performs lookups with the computed public key, so the...
driftwood
Driftwood ⚠️ La herramienta CLI Driftwood ya no es compatible. ¡Por favor, usa TruffleHog en su lugar! ⚠️ Driftwood es una herramienta que te permite verificar si una clave privada se utiliza para cosas como TLS o como clave SSH de GitHub para un usuario. Driftwood realiza búsquedas con la clave...
mitmengine
MITMEngine AVISO DE OBSOLESCENCIA: Este software ya no recibe mantenimiento. El objetivo de este proyecto es permitir la detección precisa de la interceptación HTTPS y la robusta toma de huellas dactilares TLS. Este proyecto se basa en The Security Impact of HTTPS Interception, y comenzó como un...
HRShell
HRShell: Un avanzado Reverse Shell HTTPS construido con Flask HRShell es un reverse shell HTTPS/HTTP construido con Flask y es compatible con python 3.x. El client.py ha sido probado exitosamente en: Linux Ubuntu 18.04 LTS, Kali Linux 2019.3 macOS Mojave/Catalina Windows 7/10 mientras que el...