1096 matches found
afot
Automation FOrensics Tool The Automation FOrensics Tool AFOT is an automation tool build in Python and used for Windows Forensics in order to combine the following tools: AnalyzePESig http://didierstevens.com/files/software/AnalyzePESigV0002.zip National Software Reference Library reduced set...
CVE-2026-29145-Tester
CVE-2026-29145 Testing Environment 📌 Overview This repository contains a proof-of-concept PoC environment designed to test for CVE-2026-29145. The vulnerability is an authentication bypass in Apache Tomcat's Mutual TLS CLIENTCERT implementation. When OCSP Online Certificate Status Protocol is...
openssl: openssl: Denial of Service via crafted CMP certificate revocation response
A flaw was found in OpenSSL. When a Certificate Management Protocol CMP client requests certificate revocation using a PKCS10 Certificate Signing Request CSR, it omits the certificate issuer name and serial number. A malicious or compromised CMP server, or an attacker possessing valid message...
openssl: openssl: Denial of Service via crafted CMP certificate revocation response
A flaw was found in OpenSSL. When a Certificate Management Protocol CMP client requests certificate revocation using a PKCS10 Certificate Signing Request CSR, it omits the certificate issuer name and serial number. A malicious or compromised CMP server, or an attacker possessing valid message...
CVE-2026-29145-Tester
CVE-2026-29145 Testing Environment 📌 Overview This repository contains a proof-of-concept PoC environment designed to test for CVE-2026-29145. The vulnerability is an authentication bypass in Apache Tomcat's Mutual TLS CLIENTCERT implementation. When OCSP Online Certificate Status Protocol is...
CVE-2026-109462
Improper check for certificate revocation in Azure Firmware allows an authorized attacker to bypass a security feature locally...
EUVD-2026-121554
Improper check for certificate revocation in Azure Firmware allows an authorized attacker to bypass a security feature locally...
CVE-2026-109462
A vulnerability exists in Azure Firmware due to an improper check for certificate revocation (CWE-299). This flaw allows an authorized attacker to perform a local security feature bypass . The impact is characterized as a bypass of security measures with a CVSSv3.1 score of 4.4 (Medium) . Microso...
Azure Firmware Security Feature Bypass Vulnerability
Improper check for certificate revocation in Azure Firmware allows an authorized attacker to bypass a security feature locally...
PT-2026-143405
Improper check for certificate revocation in Azure Firmware allows an authorized attacker to bypass a security feature locally...
tomcat: Apache Tomcat: TLS implementations ignore Certificate Revocation Lists
A flaw was found in Apache Tomcat. Both the OpenSSL and OpenSSL-FFM Transport Layer Security TLS implementations fail to properly check Certificate Revocation Lists CRLs when a certificate uses a keystore. This oversight could allow an attacker to use a revoked certificate, potentially leading to...
tomcat: Apache Tomcat: TLS implementations ignore Certificate Revocation Lists
A flaw was found in Apache Tomcat. Both the OpenSSL and OpenSSL-FFM Transport Layer Security TLS implementations fail to properly check Certificate Revocation Lists CRLs when a certificate uses a keystore. This oversight could allow an attacker to use a revoked certificate, potentially leading to...
Security update for mozilla-nss
This update for mozilla-nss fixes the following issue: remove compromised eMudhra Intermediates CA bsc1286261. Changes for mozilla-nss: update to NSS 3.125.1 bsc1289144: bmo2088196 - backport nssckbi 2.92. bmo2082793 - Don't cache sessions when ECH was rejected. bmo2082792 - Keep DTLS handshake...
JetBrains PhpStorm < 2025.3.6.2 / 2026.1.x < 2026.1.5.1 / 2026.2.x < 2026.2.4 Improper Certificate Revocation Check
According to its self-reported version, the JetBrains PhpStorm installation on the remote host is prior to 2025.3.6.2, or 2026.1.x prior to 2026.1.5.1, or 2026.2.x prior to 2026.2.4. It is, therefore, affected by an improper certificate revocation check vulnerability. In JetBrains PhpStorm before...
CVE-2026-115557
The eMudha certificate authority issues a set of intermediate CA certificates with weak private keys. A man-in-the-middle attacker could use these weak intermediate CA certificates to issue certificates for arbitrary host names and have them accepted by TLS/SSL clients as valid if those clients...
tomcat: Apache Tomcat: TLS implementations ignore Certificate Revocation Lists
A flaw was found in Apache Tomcat. Both the OpenSSL and OpenSSL-FFM Transport Layer Security TLS implementations fail to properly check Certificate Revocation Lists CRLs when a certificate uses a keystore. This oversight could allow an attacker to use a revoked certificate, potentially leading to...
tomcat: Apache Tomcat: TLS implementations ignore Certificate Revocation Lists
A flaw was found in Apache Tomcat. Both the OpenSSL and OpenSSL-FFM Transport Layer Security TLS implementations fail to properly check Certificate Revocation Lists CRLs when a certificate uses a keystore. This oversight could allow an attacker to use a revoked certificate, potentially leading to...
SUSE SLED15: apache-commons-codec / apache-commons-io / apache-commons-logging / etc (SUSE-SU-2026:5017-1)
The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2026:5017-1 advisory. This update for apache-commons-codec, apache-commons-io, apache-commons-logging, avalon-framework, avalon- logkit,...
Security update for apache-commons-codec, apache-commons-io, apache-commons-logging, avalon-framework, avalon-logkit, glassfish-jsp, jsch, maven-file-management, opentest4j
This update for apache-commons-codec, apache-commons-io, apache-commons-logging, avalon-framework, avalon-logkit, glassfish-jsp, jsch, maven-file-management, opentest4j fixes the following issue: CVE-2026-86231: improper check for certificate revocation when processing knownhosts entries...