sslnuke

sslnuke -- 인증 없는 SSL은 안전하지 않습니다! 우리는 SSL 인증 없이는 안전하지 않다는 말을 계속 들어왔습니다. SSL 연결이 캐시된 인증서로 확인되지 않으면 공격자가 쉽게 가로챌 수 있습니다. 따라서 2013년이면 이 문제가 완전히 해결되었다고 생각할 것입니다. 브라우저는 인증서를 캐시하고 사이트가 자체 서명 인증서를 제공할 때 사용자에게 매우 강력하게 경고하며, 브라우저 공급업체는 이 문제를 거의 해결했습니다. 그러나 HTTPS만 SSL을 사용하는 프로토콜은 아닙니다. 불행히도 다른 프로토콜의 많은 클라이언트...

Check Point IKEv1 Remote-Access VPN - Certificate Authentication Bypass

IKEv1 key exchange contains a broken authentication caused by logic flow weakness in Remote Access and Mobile Access certificate validation, letting unauthenticated remote attackers bypass user authentication and establish VPN connections without valid passwords, exploit requires use of deprecate...

poc-CVE-2026-0073

CVE-2026-0073 PoC Wireless ADB TLS Auth Bypass Dieses Verzeichnis enthält einen Python Proof-of-Concept für CVE-2026-0073. Das Skript wurde unter Verwendung KI-gestützter Codegenerierungstechniken erstellt. Zusammenfassung CVE-2026-0073 ist ein logisches Problem in der ADB-Daemon-Zertifikatsprüfu...

nogotofail

nogotofail Nogotofail è uno strumento di test della sicurezza di rete progettato per aiutare sviluppatori e ricercatori di sicurezza a individuare e correggere connessioni TLS/SSL deboli e traffico in chiaro sensibile su dispositivi e applicazioni in modo flessibile, scalabile e potente. Include...

p5-ssl-tools

Raccolta di Strumenti SSL Questo repository contiene vari strumenti, pensati per eseguire il debug o analizzare problemi relativi a SSL/TLS. Analisi dello stato di TLS analyze-ssl.pl verifica il supporto per varie versioni di SSL/TLS verifica quali cifrari sono supportati verifica il certificato...

CVE-2026-54876

A flaw was found in OpenSSL. A malicious TLS Transport Layer Security server can exploit this vulnerability by sending a specially crafted OCSP Online Certificate Status Protocol response during the X.509 certificate chain verification process. This can lead to a memory leak in client application...

CVE-2026-19854

CVE-2026-19854 affects the ClickHouse plugin (Grafana) when it uses the Native protocol (the default) together with PDC or secure SOCKS . The root cause is that the underlying connection library requests TLS but then ignores it, resulting in plaintext communication with ClickHouse. Concretely, us...

CVE-2026-19854 CVE-2026-19854 CVE Record

When the ClickHouse plugin uses Native protocol the default with PDC or secure SOCKS, it asks for TLS but the connection library ignores that and talks to ClickHouse in the clear. Username, password, queries, and results can be read on the hop after the proxy. The server certificate is never...

poc-CVE-2026-0073

CVE-2026-0073 PoC Wireless ADB TLS Auth Bypass Dieses Verzeichnis enthält einen Python-Proof-of-Concept für CVE-2026-0073. Das Skript wurde mit KI-gestützten Codegenerierungstechniken erstellt. Zusammenfassung CVE-2026-0073 ist ein Logikfehler in der Zertifikatsprüfung des ADB-Daemons...

pwnage24mtk

pwnage24mtk Exploração de certificado para dispositivos MTK. Há uma falha lógica no processo de verificação de certificados MTK. Similar ao CVE-2023-20696. Corrigido. CVE-2023-20696 CVE-2025-20730 Existem alguns problemas com a detecção de arquitetura. Precisam ser corrigidos quando eu estiver...

universal-flutter-ssl-pinning

universal-flutter-ssl-pinning Dekompliliert libflutter.so mit PyGhidra, um die SSL-Zertifikatsprüfungsfunktion zu lokalisieren, und erstellt dann einsatzbereite Umgehungsskripte für Frida und Renef. Funktionsweise 1. PyGhidra lädt libflutter.so headless und durchsucht alle definierten Strings nac...

ibmsecurity

Codice di esempio IBM Questo repository contiene codice Python per gestire gli apparati IBM Security tramite le rispettive API REST. L'appliance ISAM dispone del codice più maturo. Il codice per l'appliance ISDS è in fase di sviluppo. Il codice per l'appliance ISVG è nuovissimo testato solo con...

CVE-2026-81034

Netmaker disables certificate verification on the connection to the configured mail server. The sender in pro/email/smtp.go assigns a TLS configuration whose skip-verify field is set to true unconditionally, directly beneath a comment stating that the setting should be false in production. No...

crypto/x509: golang: golang crypto/x509: Denial of Service via excessive processing of DNS SAN entries

A flaw was found in the crypto/x509 package of golang. This vulnerability allows a remote attacker to cause a Denial of Service DoS by presenting a specially crafted X.509 certificate with a large number of DNS Subject Alternative Name SAN entries. The certificate verification process, specifical...

Astra Linux – Vulnerability in requests

Requests is an HTTP library. Prior to version 2.32.0, when making requests through a Requests Session, if the first request was made with verify=False to disable certificate verification, all subsequent requests to the same host would continue to ignore certificate verification, regardless of...

Astra Linux – Vulnerability in Twisted

In words.protocols.jabber.xmlstream in Twisted through version 19.2.1, XMPP support did not verify certificates when used with TLS, allowing an attacker to intercept connections...

Astra Linux – Vulnerability in PostgresSQL 11

When the server is configured to use trust authentication with a clientcert requirement or to use cert authentication, a man-in-the-middle attacker can inject arbitrary SQL queries during the initial establishment of a connection, despite the use of SSL certificate verification and encryption...

Astra Linux – Vulnerability in PostgresSQL 11

A man-in-the-middle attacker can inject false responses to the client’s first few queries, despite the use of SSL certificate verification and encryption...

CVE-2026-53583

A flaw was found in libgit2, a C library for Git functionality. An inverted comparison in the OpenSSL backend's certificate verification logic, specifically when handling IP-literal hosts and certificate IP SubjectAltNames, allows a network attacker to intercept HTTPS connections. By presenting a...

crypto/x509: golang: golang crypto/x509: Denial of Service via excessive processing of DNS SAN entries

A flaw was found in the crypto/x509 package of golang. This vulnerability allows a remote attacker to cause a Denial of Service DoS by presenting a specially crafted X.509 certificate with a large number of DNS Subject Alternative Name SAN entries. The certificate verification process, specifical...