CLSA-2026-1783702691 java-11-openjdk: Fix of 14 CVEs

Upgrade to openjdk-11.0.31+11 GA. The following CVEs were fixed: - CVE-2025-66293: update bundled libpng to 1.6.57 - CVE-2026-22007: enhance crypto algorithm support - CVE-2026-22013: improve Kerberos credentialing - CVE-2026-22016: enhance path factories - CVE-2026-22018: enhance Zip file...

CVE-2026-54919

cpp-httplib is a C++11 single-file header-only cross platform HTTP/HTTPS library. In affected Mbed TLS backend versions from 0.31.0 through 0.46.1 and wolfSSL backend versions from 0.33.0 through 0.46.1, when cpp-httplib is built with CPPHTTPLIBMBEDTLSSUPPORT or CPPHTTPLIBWOLFSSLSUPPORT and a...

UBUNTU-CVE-2026-54919

cpp-httplib is a C++11 single-file header-only cross platform HTTP/HTTPS library. In affected Mbed TLS backend versions from 0.31.0 through 0.46.1 and wolfSSL backend versions from 0.33.0 through 0.46.1, when cpp-httplib is built with CPPHTTPLIBMBEDTLSSUPPORT or CPPHTTPLIBWOLFSSLSUPPORT and a...

CVE-2026-54919

cpp-httplib is a C++11 single-file header-only cross platform HTTP/HTTPS library. In affected Mbed TLS backend versions from 0.31.0 through 0.46.1 and wolfSSL backend versions from 0.33.0 through 0.46.1, when cpp-httplib is built with CPPHTTPLIBMBEDTLSSUPPORT or CPPHTTPLIBWOLFSSLSUPPORT and a...

CVE-2026-54919

cpp-httplib is a C++11 single-file header-only cross platform HTTP/HTTPS library. In affected Mbed TLS backend versions from 0.31.0 through 0.46.1 and wolfSSL backend versions from 0.33.0 through 0.46.1, when cpp-httplib is built with CPPHTTPLIBMBEDTLSSUPPORT or CPPHTTPLIBWOLFSSLSUPPORT and a...

EUVD-2026-42942

cpp-httplib is a C++11 single-file header-only cross platform HTTP/HTTPS library. In affected Mbed TLS backend versions from 0.31.0 through 0.46.1 and wolfSSL backend versions from 0.33.0 through 0.46.1, when cpp-httplib is built with CPPHTTPLIBMBEDTLSSUPPORT or CPPHTTPLIBWOLFSSLSUPPORT and a...

CVE-2026-54919 cpp-httplib: TLS certificate chain verification bypassed for IP-literal hosts on Mbed TLS and wolfSSL backends

cpp-httplib is a C++11 single-file header-only cross platform HTTP/HTTPS library. In affected Mbed TLS backend versions from 0.31.0 through 0.46.1 and wolfSSL backend versions from 0.33.0 through 0.46.1, when cpp-httplib is built with CPPHTTPLIBMBEDTLSSUPPORT or CPPHTTPLIBWOLFSSLSUPPORT and a...

CVE-2026-54919 cpp-httplib: TLS certificate chain verification bypassed for IP-literal hosts on Mbed TLS and wolfSSL backends

cpp-httplib is a C++11 single-file header-only cross platform HTTP/HTTPS library. In affected Mbed TLS backend versions from 0.31.0 through 0.46.1 and wolfSSL backend versions from 0.33.0 through 0.46.1, when cpp-httplib is built with CPPHTTPLIBMBEDTLSSUPPORT or CPPHTTPLIBWOLFSSLSUPPORT and a...

CLSA-2026-1783693981 java-11-openjdk: Fix of 14 CVEs

Upgrade to openjdk-11.0.31+11 GA. The following CVEs were fixed: - CVE-2025-66293: update bundled libpng to 1.6.57 - CVE-2026-22007: enhance crypto algorithm support - CVE-2026-22013: improve Kerberos credentialing - CVE-2026-22016: enhance path factories - CVE-2026-22018: enhance Zip file...

nodejs24 security, bug fix, and enhancement update

An update is available for nodejs24. This update affects Rocky Linux 10. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Node.js is a platform built on Chrome's JavaScript runtime for easily...

MQTT TLS Broker Detection

Detects MQTTS brokers and anonymous subscribe access on TCP 8883. !/usr/bin/env python3 -- coding: utf-8 -- """Detect MQTT brokers over TLS on port 8883.""" from kittysploit import from lib.protocols.ics.icsscannerclient import Icsscannerclient from lib.scanner.mqtt.detectors import...

Reverse QUIC C2 Listener

Reverse QUIC/TLS 1.3 listener for KittySploit implants ALPN kitty-quic. Supports shell commands, file upload/download, and shellcode execution. !/usr/bin/env python3 -- coding: utf-8 -- """Reverse QUIC C2 listener for compatible implants ALPN kitty-quic.""" from kittysploit import import asyncio...

SSL/TLS Configuration Audit

Audit a live TLS service: negotiated protocol and cipher, certificate chain metadata SAN, expiry, issuer, hostname coverage, weak/legacy TLS signals, and optional trust-store validation. !/usr/bin/env python3 -- coding: utf-8 -- """Live SSL/TLS configuration audit for TCP services.""" from future...

SSL/TLS Cipher Suite Enumeration

Enumerate cipher suites accepted by a TLS endpoint and flag weak or deprecated protocol versions. !/usr/bin/env python3 -- coding: utf-8 -- """Enumerate accepted TLS cipher suites on a live service.""" from future import annotations import json import re from kittysploit import from...

Palo Alto GlobalProtect CVE-2026-0257 auth override bypass

CVE-2026-0257: when GlobalProtect authentication override cookies are enabled and the encryption certificate is exposed via the HTTPS service, an attacker can retrieve the public key from the TLS chain and forge portal-userauthcookie values to bypass authentication on the portal or gateway...

SSL/TLS HSTS and OCSP Audit

Audit HTTP→HTTPS redirects, HSTS policy quality, and OCSP stapling on the live TLS service. !/usr/bin/env python3 -- coding: utf-8 -- """Audit HSTS policy and OCSP stapling for an HTTPS service.""" from future import annotations import json import re from kittysploit import from...

Command Shell, Reverse QUIC (via Python)

Connect back over QUIC/TLS 1.3 ALPN kitty-quic and expose a command channel with upload, download, and shellcode support. Requires aioquic on the target. !/usr/bin/env python3 -- coding: utf-8 -- from kittysploit import from lib.protocols.quic.constants import DEFAULTQUICALPN from...

PowerShell HTTPS Mimic Transform

Sends a fake TLS ClientHello then wraps C2 bytes in TLS Application Data records. !/usr/bin/env python3 -- coding: utf-8 -- from typing import Optional from modules.transforms.python.protocol.httpsmimic import CLIENTHELLOBYTES, Module as PythonHttpsTransform, class ModulePythonHttpsTransform:...

HTTPS Mimic Transform

Sends fake TLS 1.2 Client/Server Hello at start, then TLS Application Data. !/usr/bin/env python3 -- coding: utf-8 -- from typing import Optional from kittysploit import TLS record: type 1 + version 2 + length 2 + fragment TLSHEADERLEN = 5 TLSHANDSHAKE = 0x16 TLSAPPLICATIONDATA = 0x17 TLSVERSION1...

TLS/HTTPS Mimic Transform

Wraps C2 stream in TLS 1.2 Application Data records so traffic looks like HTTPS on the wire plain TCP. !/usr/bin/env python3 -- coding: utf-8 -- """ TLS/HTTPS mimic transform: wraps C2 traffic in TLS Application Data records so the stream looks like HTTPS TLS 1.2 on the wire while using plain TCP...