cve-2020-0601_poc

Información Básica El código fuente de esta herramienta está destinado a ayudar a comprender la vulnerabilidad CVE-2020-0601 descubierta en la API de criptografía de Windows, consulte la visión general de CERT. La herramienta en sí se puede utilizar para producir un certificado para un dominio...

CVE-2020-0601-EXP

CVE-2020-0601-EXP Este recurso es una reproducción del autor de la vulnerabilidad del certificado de firma de Microsoft CVE-2020-0601, implementada combinando recursos y artículos relacionados. Se recomienda que los lectores consulten el blog del autor para comprender el algoritmo ECC, el mecanis...

CVE-2020-0601

CVE-2020-0601 : Explotación de CVE CurveBall Este script de Ruby se puede utilizar para suplantar una autoridad de certificación legítima y generar un certificado que será considerado válido para equipos Windows afectados por la vulnerabilidad CurveBall. Necesitas obtener un certificado provenien...

ForgeCert

ForgeCert ForgeCert uses the BouncyCastle C API and a stolen Certificate Authority CA certificate + private key to forge certificates for arbitrary users capable of authentication to Active Directory. This attack is codified as DPERSIST1 in our "Certified Pre-Owned" whitepaper. This code base was...

-CVE-2020-0601-ECC---EXPLOIT

CurveBall CVE-2020-0601 - ECC/Po2 EXPLOIT CVE-2020-0601, también conocido como CurveBall, es una vulnerabilidad en la que la firma de los certificados que usan criptografía de curva elíptica ECC no se verifica correctamente. ECC depende de diferentes parámetros. Para muchas curvas se usan...

CVE-2026-73251

A flaw was found in Mongoose. When configured with a Certificate Authority CA bundle, the built-in Transport Layer Security TLS implementation matches server certificates by name without verifying their cryptographic signatures. A remote network attacker can exploit this vulnerability by presenti...

Linux Distros Unpatched Vulnerability : CVE-2026-89102

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In wolfSSL versions 5.7.2 through 5.9.2 there is a client-side implementation flaw in RFC 6961, multiple OCSP response stapling, which can lead to certificate...

CurveBall

CurveBall CVE-2020-0601 - PoC CVE-2020-0601: También conocido como CurveBall o ChainOffFools, es una vulnerabilidad en la Microsoft CryptoApi específicamente en Crypt32.dll donde las firmas de curva elíptica ECDSA de los certificados no se verifican correctamente. Hay una muy buena publicación de...

DEBIAN-CVE-2026-89102

In wolfSSL versions 5.7.2 through 5.9.2 there is a client-side implementation flaw in RFC 6961, multiple OCSP response stapling, which can lead to certificate forgery. When a wolfSSL client enables OCSP stapling with the HAVECERTIFICATESTATUSREQUESTV2 feature and calls wolfSSLUseOCSPStaplingV2ssl...

AZL-105188 CVE-2026-89102 affecting package mariadb 10.11.19-1

In wolfSSL versions 5.7.2 through 5.9.2 there is a client-side implementation flaw in RFC 6961, multiple OCSP response stapling, which can lead to certificate forgery. When a wolfSSL client enables OCSP stapling with the HAVECERTIFICATESTATUSREQUESTV2 feature and calls wolfSSLUseOCSPStaplingV2ssl...

CVE-2026-89102

In wolfSSL versions 5.7.2 through 5.9.2 there is a client-side implementation flaw in RFC 6961, multiple OCSP response stapling, which can lead to certificate forgery. When a wolfSSL client enables OCSP stapling with the HAVECERTIFICATESTATUSREQUESTV2 feature and calls wolfSSLUseOCSPStaplingV2ssl...

UBUNTU-CVE-2026-89102

In wolfSSL versions 5.7.2 through 5.9.2 there is a client-side implementation flaw in RFC 6961, multiple OCSP response stapling, which can lead to certificate forgery. When a wolfSSL client enables OCSP stapling with the HAVECERTIFICATESTATUSREQUESTV2 feature and calls wolfSSLUseOCSPStaplingV2ssl...

CVE-2026-89102

In wolfSSL versions 5.7.2 through 5.9.2 there is a client-side implementation flaw in RFC 6961, multiple OCSP response stapling, which can lead to certificate forgery. When a wolfSSL client enables OCSP stapling with the HAVECERTIFICATESTATUSREQUESTV2 feature and calls wolfSSLUseOCSPStaplingV2ssl...

EUVD-2026-87923

In wolfSSL versions 5.7.2 through 5.9.2 there is a client-side implementation flaw in RFC 6961, multiple OCSP response stapling, which can lead to certificate forgery. When a wolfSSL client enables OCSP stapling with the HAVECERTIFICATESTATUSREQUESTV2 feature and calls wolfSSLUseOCSPStaplingV2ssl...

CVE-2026-89102

WolfSSL versions 5.7.2 through 5.9.2 contain a client-side implementation flaw in RFC 6961 regarding multiple OCSP response stapling. When the HAVE_CERTIFICATE_STATUS_REQUEST_V2 feature is enabled and the client calls wolfSSL_UseOCSPStaplingV2 with WOLFSSL_CSR2_OCSP_MULTI , the client fails to ve...

CVE-2026-89102 OCSP stapling v2 multi accepts non-CA chain certificates as issuers

In wolfSSL versions 5.7.2 through 5.9.2 there is a client-side implementation flaw in RFC 6961, multiple OCSP response stapling, which can lead to certificate forgery. When a wolfSSL client enables OCSP stapling with the HAVECERTIFICATESTATUSREQUESTV2 feature and calls wolfSSLUseOCSPStaplingV2ssl...

CVE-2026-89102

In wolfSSL versions 5.7.2 through 5.9.2 there is a client-side implementation flaw in RFC 6961, multiple OCSP response stapling, which can lead to certificate forgery. When a wolfSSL client enables OCSP stapling with the HAVECERTIFICATESTATUSREQUESTV2 feature and calls wolfSSLUseOCSPStaplingV2ssl...

CVE-2026-89102 OCSP stapling v2 multi accepts non-CA chain certificates as issuers

In wolfSSL versions 5.7.2 through 5.9.2 there is a client-side implementation flaw in RFC 6961, multiple OCSP response stapling, which can lead to certificate forgery. When a wolfSSL client enables OCSP stapling with the HAVECERTIFICATESTATUSREQUESTV2 feature and calls wolfSSLUseOCSPStaplingV2ssl...

CVE-2026-89102 OCSP stapling v2 multi accepts non-CA chain certificates as issuers

In wolfSSL versions 5.7.2 through 5.9.2 there is a client-side implementation flaw in RFC 6961, multiple OCSP response stapling, which can lead to certificate forgery. When a wolfSSL client enables OCSP stapling with the HAVECERTIFICATESTATUSREQUESTV2 feature and calls wolfSSLUseOCSPStaplingV2ssl...

CVE-2026-50751

CVE-2026-50751 — PoC Bypass de autenticación por certificado en la VPN Remote-Access de Check Point IKEv1. Descripción CVE-2026-50751 es un bypass de autenticación en el proceso iked de Check Point, presente en las versiones R81.10, R82 y R82.10 sin el hotfix sk185033. El fallo permite autenticar...