39406 matches found
EUVD-2026-74910
PocketMine-MP versions before 5.43.1 fail to properly validate the Certificate field during offline login authentication. Unauthenticated players can trigger an uninitialized property access error that crashes the server...
CVE-2026-86199
PocketMine-MP versions before 5.43.1 fail to properly validate the Certificate field during offline login authentication. An unauthenticated player can trigger an uninitialized property access error that crashes the server , resulting in a denial of service. The issue is resolved in version 5.43....
CVE-2026-86199 PocketMine-MP before 5.43.1 Denial of Service via unauthenticated login
PocketMine-MP versions before 5.43.1 fail to properly validate the Certificate field during offline login authentication. Unauthenticated players can trigger an uninitialized property access error that crashes the server...
Certighost_CVE-2026-54121
certighost-oneclick CVE-2026-54121（Certighost）一键化利用工具 —— 仅用于本地靶场/授权测试。 基于上游 PoC（@h0j3n 分析 / @aniqfakhrul 实现）改造的 Windows 原生版 ： 内置自研 WinDivert 重定向器（pydivert），一条命令完成"建号 → 重定向 → rogue 监听 → CA chase → 域控身份证书 → PKINIT → 域控机器账户 NT 哈希"，全程不停止 Server 服务、 不改动主机任何配置，退出即恢复。 与上游的差异（补丁清单）...
CurveBall
CurveBall CVE-2020-0601 - PoC CVE-2020-0601, comúnmente conocido como CurveBall, es una vulnerabilidad en la que la firma de certificados que utilizan criptografía de curva elíptica ECC no se verifica correctamente. ECC depende de diferentes parámetros. Estos parámetros están estandarizados para...
CVE-2026-85102
Improper certificate trust validation during VPN negotiation in Check Point Quantum Security Gateway may allow an unauthenticated remote attacker to execute arbitrary code on the Gateway...
CVE-2026-85103
A heap-based buffer overflow in VPN certificate ASN.1 decoding may allow an unauthenticated remote attacker to execute arbitrary code on Check Point Quantum Security Management and Quantum Security Gateway systems...
CVE-2026-85103
Check Point Quantum Security Management and Quantum Security Gateway are affected by a heap-based buffer overflow in the VPN certificate ASN.1 decoding process. An unauthenticated remote attacker may exploit this to achieve arbitrary code execution , yielding a CVSS 3.1 score of 9.8 (Critical) wi...
CVE-2026-85103 Heap-based Buffer Overflow in VPN Certificate ASN.1 Decoding
A heap-based buffer overflow in VPN certificate ASN.1 decoding may allow an unauthenticated remote attacker to execute arbitrary code on Check Point Quantum Security Management and Quantum Security Gateway systems...
EUVD-2026-75010
A heap-based buffer overflow in VPN certificate ASN.1 decoding may allow an unauthenticated remote attacker to execute arbitrary code on Check Point Quantum Security Management and Quantum Security Gateway systems...
CVE-2026-85102 Improper Certificate Validation in Quantum Security Gateway
Improper certificate trust validation during VPN negotiation in Check Point Quantum Security Gateway may allow an unauthenticated remote attacker to execute arbitrary code on the Gateway...
CVE-2026-85102
Check Point Quantum Security Gateway contains an improper certificate trust validation flaw during VPN negotiation . An unauthenticated remote attacker can exploit this to execute arbitrary code on the Gateway. The vulnerability is rated CVSS 9.8 (CRITICAL) with a vector of AV:N/AC:L/PR:N/UI:N/S:...
EUVD-2026-75009
Improper certificate trust validation during VPN negotiation in Check Point Quantum Security Gateway may allow an unauthenticated remote attacker to execute arbitrary code on the Gateway...
Invoke-RunAsWithCert
Invoke-RunAsWithCert Un script de PowerShell para realizar la autenticación PKINIT con la API de Windows desde una máquina no unida al dominio. Descripción Este cmdlet crea una nueva sesión de inicio de sesión con el certificado especificado mediante PKINIT. Está pensado para ejecutarse en una...
CVE-2026-29114
CVE-2026-29114 — Certificado raíz CA del dispositivo Dahua expuesto Tipo de aviso: Divulgación de seguridad coordinada con el proveedor ID de CVE: CVE-2026-29114 Proveedor: Dahua Technology Publicado: 2026-06-10T05:44:50 UTC Última modificación: 2026-06-10T05:44:50 UTC Fuente: Centro de confianza...
CVE-2026-78489
Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Certificate Validation vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to protection mechanism...
CVE-2026-79637
Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Certificate Validation vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to unauthorized access...
CVE-2026-78492
Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Certificate Validation vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to unauthorized access...
python3.14-cryptography security update
An update is available for python3.14-cryptography. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Python is an interpreted, interactive, object-oriented...