cve-2021-34558

CVE-2021-34558 的 POC Run the malicious TLS server go run main.go -mode server Run a normal http.Get client call against the server which panics go run main.go -mode client 对 ./vendor/github.com/refraction-networking/utls/handshakeserver.go 做了微小修改，以允许发送证书/密码套件不匹配的恶意握手。 看起来像这样： $ go run main.go -mo...

explain-my-curl

explain-my-curl explain-my-curl 是一个本地优先的命令行界面（CLI），用于理解 curl 命令在 DNS、TLS 和 HTTP 层面的行为。 本仓库目前包含： 一个解析并解释 curl 输入的命令行工具 一个用于交互式探索的启动 TUI 针对 DNS、TCP 连接、TLS 握手以及首字节时间的执行遥测 命令显示和错误字符串的敏感信息遮蔽 支持协议透明度的证据标签（Observed、Inferred、Estimated） 位于 docs/transparency-contract.md 的透明度契约 快速开始 go mod tidy go run...

CVE-2014-3466_PoC

CVE-2014-3466 GnuTLS 缓冲区溢出：会话 ID 长度检查 的概念验证 信息 参见：https://bugzilla.redhat.com/showbug.cgi?id=1101932 这不是一个武器化的利用程序。 警告：这段 Python 代码很丑陋，我基本上手工构建了 ServerHello，并且在 Python 部分只花了大约五分钟 十五分钟。 欢迎随心所欲地改进这个利用程序（如果可能的话请让我知道！）。 示例 使用恶意 ServerHello 代码启动监听器： $ python poc.py 4433 使用链接到易受攻击版本的 GnuTLS 的客户端连接（例如...

netty-handler: Netty: Denial of Service due to eager buffer allocation in TLS handshake

A flaw was found in Netty, a network application framework. A remote attacker can exploit this vulnerability by sending a crafted TLS Transport Layer Security ClientHello message. This can lead to an eager allocation of a large memory buffer, causing a Denial of Service DoS due to excessive memor...

netty-handler: Netty: Denial of Service due to eager buffer allocation in TLS handshake

A flaw was found in Netty, a network application framework. A remote attacker can exploit this vulnerability by sending a crafted TLS Transport Layer Security ClientHello message. This can lead to an eager allocation of a large memory buffer, causing a Denial of Service DoS due to excessive memor...

netty-handler: Netty: Denial of Service due to eager buffer allocation in TLS handshake

A flaw was found in Netty, a network application framework. A remote attacker can exploit this vulnerability by sending a crafted TLS Transport Layer Security ClientHello message. This can lead to an eager allocation of a large memory buffer, causing a Denial of Service DoS due to excessive memor...

CVE-2026-8932

🚨 CVE-2026-8932 - libcurl 最古老的安全漏洞 libcurl 中不完整的 mTLS 配置匹配 libcurl 中修补的最古老安全漏洞——隐藏超过25年未被发现。 📖 概述 CVE-2026-8932 是 libcurl 中的一个安全漏洞，该库可能在双向 TLS（mTLS） 客户端认证设置更改后错误地重用现有 TLS 连接。 由于某些私钥相关选项 未被纳入 libcurl 的连接匹配逻辑，即使客户端证书配置已变更且应强制进行新的 TLS 握手，现有已验证连接仍可能被重用。 注意： 独立 curl 命令行工具不受影响 。仅嵌入 libcurl 的应用程序存在漏洞。 ⚠️...

netty-handler: Netty: Denial of Service due to eager buffer allocation in TLS handshake

A flaw was found in Netty, a network application framework. A remote attacker can exploit this vulnerability by sending a crafted TLS Transport Layer Security ClientHello message. This can lead to an eager allocation of a large memory buffer, causing a Denial of Service DoS due to excessive memor...

POC-CVE-2026-0073

POC-CVE-2026-0073 ADB Authentication Bypass — Proof of Concept Security Research PoC by naheeju Security Notice: CVE-2026-0073 has been patched as of 2026-05-01. This PoC is provided strictly for security research, vulnerability analysis, and authorized testing of affected systems. Table of...

CVE-2021-27876

CVE-2021-27876 Exploit de RCE sin autenticación para el agente de Veritas Backup Exec CVE-2021-27876/77/78 — omisión de autenticación SHA hacia SYSTEM mediante NDMP CVEs CVE| Descripción| CVSS 3.1 ---|---|--- CVE-2021-27876| Omisión de autenticación mediante manipulación del hash SHA en el...

secret_handshake

Secret Handshake - Un canal C2 de malware que utiliza certificados x509 sobre mTLS Motivación En primer lugar, ¿por qué liberaría esto como código abierto? MITRE ATT&CK solo habla de certificados robados o autofirmados, y los NDR por lo que sé prestan muy poca atención al contenido de los...

midonescanner-android

MidONe Scanner اسکنر حرفه‌ای آی‌پی تمیز CDN · CLOUDFLARE · DNS ⬇️ دانلود APK · 🖥️ دانلود Windows · 📣 کانال تلگرام 🔍 ¿Por qué MidONe Scanner? La mayoría de las herramientas de escaneo de IP solo hacen un ping simple — un número que no tiene ninguna relación con la velocidad real de conexión. MidONe...

CentOS Linux 8.5 [TuxCare] Security Update: openssl / openssl-devel / openssl-libs / openssl-perl / etc Multiple Vulnerabilities (CENTOS8.5:CLSA-2026:1790933161)

The CentOS Linux 8.5 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS8.5:CLSA-2026:1790933161 advisory. - Issue summary: A certificate with many nameRelativeToCRLIssuer CRL distribution points causes disproportionate heap growth when...

CentOS Linux 8.4 [TuxCare] Security Update: openssl / openssl-devel / openssl-libs / openssl-perl / etc Multiple Vulnerabilities (CENTOS8.4:CLSA-2026:1790933443)

The CentOS Linux 8.4 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS8.4:CLSA-2026:1790933443 advisory. - Issue summary: A certificate with many nameRelativeToCRLIssuer CRL distribution points causes disproportionate heap growth when...

Rocky Linux 9 [CIQ] Security Update: java-17-openjdk / java-17-openjdk-debuginfo / etc Multiple Vulnerabilities (crlsa-2023_1879)

The Rocky Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20231879 advisory. OpenJDK: improper connection handling during TLS handshake 8294474 CVE-2023-21930 OpenJDK: Swing HTML parsing issue 8296832 CVE-2023-21939 OpenJDK: incorre...

CentOS Linux 8 [TuxCare] Security Update: nss / nss-devel / nss-pkcs11-devel / nss-softokn / etc (CENTOS-STREAM8:CLSA-2026:1786093558)

The CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS- STREAM8:CLSA-2026:1786093558 advisory. - An unchecked return value in TLS handshake code could have caused a potentially exploitable crash. This vulnerability affects Firefox...

Rocky Linux 8 [CIQ] Security Update: java-11-openjdk / java-11-openjdk-debuginfo / etc Multiple Vulnerabilities (crlsa-2023_1895)

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20231895 advisory. OpenJDK: improper connection handling during TLS handshake 8294474 CVE-2023-21930 OpenJDK: Swing HTML parsing issue 8296832 CVE-2023-21939 OpenJDK: incorre...

Rocky Linux 8 [CIQ] Security Update: Cython-debugsource / PyYAML-debugsource / babel / numpy-debugsource / etc (crlsa-2023_5994)

The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20235994 advisory. python: TLS handshake bypass CVE-2023-40217 Tenable has extracted the preceding description block directly from the CIQ security advisory. Note that Nessus has not...

AlmaLinux 9.2 [TuxCare] Security Update: tomcat / tomcat-admin-webapps / tomcat-docs-webapp / etc (ALMALINUX9.2:CLSA-2025:1737654382)

The AlmaLinux 9.2 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2025:1737654382 advisory. - Allocation of Resources Without Limits or Throttling vulnerability in Apache Tomcat. This issue affects Apache Tomcat: from 11.0.0-M1 throu...

Rocky Linux 8 [CIQ] Security Update: java-17-openjdk / java-17-openjdk-debuginfo / etc Multiple Vulnerabilities (crlsa-2023_1898)

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20231898 advisory. OpenJDK: improper connection handling during TLS handshake 8294474 CVE-2023-21930 OpenJDK: Swing HTML parsing issue 8296832 CVE-2023-21939 OpenJDK: incorre...