undici vulnerable to TLS certificate validation bypass via dropped connect options in BalancedPool

Impact undici's BalancedPool passes its constructor options through a JSON-based deep clone JSON.parseJSON.stringify... before forwarding them to each per-upstream Pool. JSON cannot represent functions, so a caller-supplied connect or tls option containing a checkServerIdentity callback or a cust...

NPM: undici vulnerable to TLS certificate validation bypass via dropped connect options in BalancedPool

NPM: undici vulnerable to TLS certificate validation bypass via dropped connect options in BalancedPool vulnerability discovered by ? in WordPress Npm undici versions = 7.24.1, 7.29.1...

badecparams

BADECPARAMS Prueba de concepto para CVE-2020-0601. badecparams.py genera una autoridad de certificación intermedia que explota la vulnerabilidad y luego emite certificados Authenticode y TLS Los certificados TLS tienen Validación Extendida en Microsoft Edge e Internet Explorer. httpd.py sirve el...

Meterpreter_Paranoid_Mode-SSL

MeterpreterParanoidMode v1.4 - Conexiones SSL/TLS Versión publicada: v1.4 Estable Autor: pedro ubuntu r00t-3xp10it Distribuciones soportadas: Linux Kali, Mint, Ubuntu Suspicious-Shell-Activity SSA RedTeam desarrollado @2017 Descripción: MeterpreterParanoidMode.sh permite a los usuarios asegurar s...

Invoke-SelfSignedWebRequest

Invoke-SelfSignedWebRequest Para el trabajo de InfoSec, usar HTTPS es un mecanismo increíblemente práctico para C2 y para maniobrar dentro del espacio de red objetivo. Además, PowerShell es una herramienta de productividad asombrosa que puede ayudar a un operador a lograr resultados dinámicos. Un...

CVE-2026-73594

Dell Secure Connect Gateway SCG Policy Manager, versions prior to 5.34.00.16, Versions prior to 5.36, contains an Improper Certificate Validation vulnerability. An unauthenticated attacker with adjacent network access could potentially exploit this vulnerability, leading to Information disclosure...

EUVD-2026-88736

Dell Secure Connect Gateway SCG Policy Manager, versions prior to 5.34.00.16, Versions prior to 5.36, contains an Improper Certificate Validation vulnerability. An unauthenticated attacker with adjacent network access could potentially exploit this vulnerability, leading to Information disclosure...

CVE-2026-73594

Dell Secure Connect Gateway SCG Policy Manager, versions prior to 5.34.00.16, Versions prior to 5.36, contains an Improper Certificate Validation vulnerability. An unauthenticated attacker with adjacent network access could potentially exploit this vulnerability, leading to Information disclosure...

CVE-2026-73594

Dell Secure Connect Gateway (SCG) Policy Manager versions prior to 5.34.00.16 and 5.36 are affected by an Improper Certificate Validation vulnerability. An unauthenticated attacker with adjacent network access could exploit this flaw to cause Information disclosure , Information tampering , and a...

TWSL2011-007_iOS_code_workaround

= testcert 用于 TWSL2011-007 漏洞变通方案的参考实现（即 CVE-2011-0228）。 作者：Eric Monti 日期：2011 年 7 月 28 日 = 编译 使用 Apple iOS SDK CFLAGS 编译，并添加： gcc -o testcert testcert.m -framework Foundation -framework Security 如果你只是想测试一下，上述编译参数在 OS X 下可以直接使用。 = 用法： $ testcert path/to/file.der severname 文件应为原始 DER 格式，即编码证书中 BEG...

shim

shim, un cargador de arranque UEFI de primera etapa shim es una aplicación EFI trivial que, al ejecutarse, intenta abrir y ejecutar otra aplicación. Inicialmente intentará hacerlo mediante las llamadas estándar de EFI LoadImage y StartImage. Si estas fallan porque Secure Boot está habilitado y el...

qark

Quick Android Review Kit This tool is designed to look for several security related Android application vulnerabilities, either in source code or packaged APKs. The tool is also capable of creating "Proof-of-Concept" deployable APKs and/or ADB commands, capable of exploiting many of the...

rustbuster

rustbuster A Comprehensive Web Fuzzer and Content Discovery Tool Introduction Check the blog post: Introducing Rustbuster — A Comprehensive Web Fuzzer and Content Discovery Tool Download You can download prebuilt binaries from here. Installation installrustbuster echo "Installing latest version o...

gringotts

CVE-2020-0601 prueba de concepto Una divertida prueba de concepto para crear tu propia CA raíz y certificado firmado basada en la vulnerabilidad CVE-2020-0601 en Windows 10. La base del problema es que el método CertGetCertificateChain validaba incorrectamente las autoridades de certificados raíz...

thunderbird security update

140.16.0-1.0.1 - Add Oracle prefs 140.16.0-1 - Update to 140.16.0 ESR 140.15.0-1 - Update to 140.15.0 ESR - Fix ML-DSA certificate validation Resolves: RHEL-252227...

SUSE CVE-2026-91769

PHP's OpenSSL stream peer verification checks the certificate's subjectAltName entries first and, whenever no entry matches, falls back to the Common Name. RFC 6125 requires the CN to be ignored once the certificate presents any service identity, so a certificate carrying a non-matching DNS SAN w...

sslyze

Nota El desarrollo actual de SSLyze ahora tiene lugar en un repositorio separado: https://github.com/nabla-c0d3/sslyze. Este repositorio se actualizará periódicamente desde este nuevo repositorio principal, pero para la versión más actual, consulte el nuevo repo. Si clonó el repositorio pero dese...

crypto/tls: crypto/tls: Incorrect certificate validation during TLS session resumption

A flaw was found in the crypto/tls component. This vulnerability occurs during Transport Layer Security TLS session resumption when certificate authority CA settings are modified between the initial and resumed handshakes. An attacker could exploit this to bypass certificate validation, allowing ...

crypto/tls: crypto/tls: Incorrect certificate validation during TLS session resumption

A flaw was found in the crypto/tls component. This vulnerability occurs during Transport Layer Security TLS session resumption when certificate authority CA settings are modified between the initial and resumed handshakes. An attacker could exploit this to bypass certificate validation, allowing ...

curl: libcurl: Improper certificate validation due to cached TLS settings reuse

A flaw was found in libcurl. When handling secure connections TLS and reusing connection settings, libcurl could incorrectly apply a cached security setting related to certificate chain validation. This could allow libcurl to accept a server's security certificate that it should have otherwise...