CVE-2026-86199

PocketMine-MP versions before 5.43.1 fail to properly validate the Certificate field during offline login authentication. An unauthenticated player can trigger an uninitialized property access error that crashes the server , resulting in a denial of service. The issue is resolved in version 5.43....

CVE-2026-86199 PocketMine-MP before 5.43.1 Denial of Service via unauthenticated login

PocketMine-MP versions before 5.43.1 fail to properly validate the Certificate field during offline login authentication. Unauthenticated players can trigger an uninitialized property access error that crashes the server...

Certighost_CVE-2026-54121

certighost-oneclick CVE-2026-54121（Certighost）一键化利用工具 —— 仅用于本地靶场/授权测试。 基于上游 PoC（@h0j3n 分析 / @aniqfakhrul 实现）改造的 Windows 原生版 ： 内置自研 WinDivert 重定向器（pydivert），一条命令完成"建号 → 重定向 → rogue 监听 → CA chase → 域控身份证书 → PKINIT → 域控机器账户 NT 哈希"，全程不停止 Server 服务、 不改动主机任何配置，退出即恢复。 与上游的差异（补丁清单）...

CurveBall

CurveBall CVE-2020-0601 - PoC CVE-2020-0601, or commonly referred to as CurveBall, is a vulnerability in which the signature of certificates using elliptic curve cryptography ECC is not correctly verified. ECC relies on different parameters. These parameters are standardized for many curves...

CVE-2026-85103

A heap-based buffer overflow in VPN certificate ASN.1 decoding may allow an unauthenticated remote attacker to execute arbitrary code on Check Point Quantum Security Management and Quantum Security Gateway systems...

CVE-2026-85102

Improper certificate trust validation during VPN negotiation in Check Point Quantum Security Gateway may allow an unauthenticated remote attacker to execute arbitrary code on the Gateway...

CVE-2026-85103

Check Point Quantum Security Management and Quantum Security Gateway are affected by a heap-based buffer overflow in the VPN certificate ASN.1 decoding process. An unauthenticated remote attacker may exploit this to achieve arbitrary code execution , yielding a CVSS 3.1 score of 9.8 (Critical) wi...

CVE-2026-85103 Heap-based Buffer Overflow in VPN Certificate ASN.1 Decoding

A heap-based buffer overflow in VPN certificate ASN.1 decoding may allow an unauthenticated remote attacker to execute arbitrary code on Check Point Quantum Security Management and Quantum Security Gateway systems...

EUVD-2026-75010

A heap-based buffer overflow in VPN certificate ASN.1 decoding may allow an unauthenticated remote attacker to execute arbitrary code on Check Point Quantum Security Management and Quantum Security Gateway systems...

CVE-2026-85102 Improper Certificate Validation in Quantum Security Gateway

Improper certificate trust validation during VPN negotiation in Check Point Quantum Security Gateway may allow an unauthenticated remote attacker to execute arbitrary code on the Gateway...

CVE-2026-85102

Check Point Quantum Security Gateway contains an improper certificate trust validation flaw during VPN negotiation . An unauthenticated remote attacker can exploit this to execute arbitrary code on the Gateway. The vulnerability is rated CVSS 9.8 (CRITICAL) with a vector of AV:N/AC:L/PR:N/UI:N/S:...

EUVD-2026-75009

Improper certificate trust validation during VPN negotiation in Check Point Quantum Security Gateway may allow an unauthenticated remote attacker to execute arbitrary code on the Gateway...

Invoke-RunAsWithCert

Invoke-RunAsWithCert A PowerShell script to perform PKINIT authentication with the Windows API from a non domain-joined machine. Description This cmdlet creates a new logon session with the specified certificate via PKINIT. It is meant to be run on a non domain-joined VM. The cmdlet has two modes...

CVE-2026-29114

CVE-2026-29114 — Dahua Exposed Device CA Root Certificate Advisory type: Vendor-coordinated security disclosure CVE ID: CVE-2026-29114 Vendor: Dahua Technology Published: 2026-06-10T05:44:50 UTC Last Modified: 2026-06-10T05:44:50 UTC Source: Dahua Product Security Incident PSI Trust Center Table ...

CVE-2026-78489

Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Certificate Validation vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to protection mechanism...

CVE-2026-79637

Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Certificate Validation vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to unauthorized access...

CVE-2026-78492

Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Certificate Validation vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to unauthorized access...

python3.14-cryptography security update

An update is available for python3.14-cryptography. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Python is an interpreted, interactive, object-oriented...

CVE-2013-3900-WinTrustVerify

Windows-Cert-Padding-Check...

CVE-2026-54121

🛡️ CVE-2026-54121 — Certighost CTI 调查报告 Active Directory 证书服务权限提升 / 域失陷风险 由 Pratik Chhetri 创建 报告日期: 2026-07-28 📌 执行摘要 字段| 发现 ---|--- CVE| CVE-2026-54121 名称| Certighost 厂商| 微软 组件| Active Directory Certificate Services, AD CS 弱点| CWE-285 — 授权不当 影响| 权限提升；可能模拟域控制器身份 CVSS v3.1| 8.8 高 —...