badecparams

BADECPARAMS Prova de Conceito para CVE-2020-0601. badecparams.py gera uma autoridade certificadora intermediária que explora a vulnerabilidade e emite certificados Authenticode e TLS. Os certificados TLS possuem Validação Estendida no Microsoft Edge e Internet Explorer. httpd.py serve o conteúdo ...

CVE-2026-18717 Improper Certificate Validation in ASE 2000

ASE2000 2.35 through 2.37 is vulnerable to an improper certificate validation vulnerability, which may allow an attacker to impersonate the trusted peer, complete the TLS handshake, and read or modify protected communications...

CVE-2026-18717

ASE2000 versions 2.35 through 2.37 (by ASE Systems) contain an improper certificate validation vulnerability in the TLS implementation. An attacker with network access may impersonate a trusted peer, complete the TLS handshake, and read or modify protected communications. The CISA ICS advisory ra...

shim

shim, un bootloader UEFI di primo stadio shim è un'applicazione EFI semplice che, quando viene eseguita, tenta di aprire ed eseguire un'altra applicazione. Inizialmente proverà a farlo tramite le chiamate EFI standard LoadImage e StartImage. Se queste falliscono ad esempio perché Secure Boot è...

CVE-2026-19854

When the ClickHouse plugin uses Native protocol the default with PDC or secure SOCKS, it asks for TLS but the connection library ignores that and talks to ClickHouse in the clear. Username, password, queries, and results can be read on the hop after the proxy. The server certificate is never...

CVE-2026-69248

A flaw was found in python-cryptography. This vulnerability arises from incorrect handling of wildcard Domain Name System DNS names during certificate validation. Specifically, the verifier may accept a certificate with a broad wildcard DNS name e.g., .example.com even when a more restrictive nam...

cve-2026-29145

CVE-2026-29145 — I controlli OCSP a volte falliscono in modalità soft-fail anche quando il soft-fail è disabilitato Scopritore: gregk4sec https://github.com/gregk4sec/cve Data della scoperta: 2026-02-26 Vendor interessato: Apache Prodotto interessato: Tomcat Gravità: 9.1 CRITICA CWE: CWE-287...

CVE-2025-65753

CVE-2025-65753 CVE-2025-65753 के लिए प्रमाण अवधारणा: Gryphon Guardian एक्सेस पॉइंट, फर्मवेयर संस्करण 01.06.0006.22, पर अनुचित TLS प्रमाणपत्र सत्यापन के माध्यम से दूरस्थ कोड निष्पादन। विवरण Gryphon Guardian WiFi एक्सेस पॉइंट, फर्मवेयर संस्करण 01.06.0006.22 के साथ, ऐप के माध्यम से संकेत देने के बाद...

PT-2026-82756

ASE2000 2.35 through 2.37 is vulnerable to an improper certificate validation vulnerability, which may allow an attacker to impersonate the trusted peer, complete the TLS handshake, and read or modify protected communications...

CVE-2026-41012- BOSH VSphere CPI Improper Cert Validation | Cloud Foundry

Severity HIGH CVSSv4: High 8.8 CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H CVSSv3: High 7.7 CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H Vendor Cloud Foundry Foundation Versions Affected Severity is HIGH unless otherwise noted. BOSH VSphere CPI All versions prior to v98.0.6...

CVE-2026-74774

Dell PowerProtect One, versions 20.1.0.0 and below, contain an Improper Certificate Validation vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Protection mechanism bypass...

CVE-2026-74774

Dell PowerProtect One , versions 20.1.0.0 and below , contains an Improper Certificate Validation vulnerability that allows an unauthenticated remote attacker to bypass a protection mechanism. The NVD-assigned score is 7.5 (HIGH) with a network vector, low complexity, and no privileges required, ...

EUVD-2026-66670

Dell PowerProtect One, versions 20.1.0.0 and below, contain an Improper Certificate Validation vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Protection mechanism bypass...

CVE-2026-74774

Dell PowerProtect One, versions 20.1.0.0 and below, contain an Improper Certificate Validation vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Protection mechanism bypass...

crypto/tls: crypto/tls: Incorrect certificate validation during TLS session resumption

A flaw was found in the crypto/tls component. This vulnerability occurs during Transport Layer Security TLS session resumption when certificate authority CA settings are modified between the initial and resumed handshakes. An attacker could exploit this to bypass certificate validation, allowing ...

Important: Red Hat Security Advisory: OpenShift Container Platform 4.15.68 packages and security update

Red Hat OpenShift Container Platform release 4.15.68 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.15. Red Hat Product Security has rated this update as having a...

CVE-2026-81034

Netmaker (through v1.6.0 ) unconditionally disables TLS certificate verification on its SMTP connection in pro/email/smtp.go , where the skip-verify field is set to true with no configuration path to override it. An attacker positioned between Netmaker and its mail relay can present a rogue certi...

CVE-2026-81034 Netmaker through 1.6.0 Improper Certificate Validation in SMTP Client

Netmaker disables certificate verification on the connection to the configured mail server. The sender in pro/email/smtp.go assigns a TLS configuration whose skip-verify field is set to true unconditionally, directly beneath a comment stating that the setting should be false in production. No...

crypto/tls: crypto/tls: Incorrect certificate validation during TLS session resumption

A flaw was found in the crypto/tls component. This vulnerability occurs during Transport Layer Security TLS session resumption when certificate authority CA settings are modified between the initial and resumed handshakes. An attacker could exploit this to bypass certificate validation, allowing ...

Important: Red Hat Security Advisory: OpenShift Container Platform 4.16.69 packages and security update

Red Hat OpenShift Container Platform release 4.16.69 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.16. Red Hat Product Security has rated this update as having a...