-CVE-2020-0601-ECC---EXPLOIT

CurveBall CVE-2020-0601 - ECC/Po2 漏洞利用 CVE-2020-0601，通常被称为CurveBall，是一个漏洞，其中使用椭圆曲线密码学（ECC）的证书签名并未被正确验证。 ECC依赖于不同的参数。许多曲线使用标准化参数。然而，微软并没有像他们那样的天才一样检查所有这些参数……参数 G（生成元）并未被检查，因此攻击者可以提供自定义的生成元，这样当微软尝试验证证书是否来自受信任的CA时，它只会查找匹配的公钥，然后嘣，它就会使用证书中的生成元。 NSA清楚地解释了此漏洞的破坏性影响以及更多信息，请参见此处。准备好就开始吧！...

crypto/x509: golang: Go crypto/x509: Certificate validation bypass due to incorrect DNS constraint application

A flaw was found in the crypto/x509 package within Go golang. When verifying a certificate chain, excluded DNS Domain Name System constraints are not correctly applied to wildcard DNS Subject Alternative Names SANs if the case of the SAN differs from the constraint. This oversight could allow an...

Important: Red Hat Security Advisory: ignition security update

An update for ignition is now available for Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

CVE-2022-26923

CVE-2022-26923 描述 此漏洞允许低权限用户在默认的 Active Directory 环境中，在安装了 Active Directory 证书服务 AD CS 服务器角色的情况下，将权限提升至域管理员。 该漏洞主要与 Active Directory 证书服务 AD CS 角色相关。AD CS 角色是一种 Windows Server 角色，允许您构建公钥基础设施 PKI，并为您的组织提供公钥加密、数字证书和数字签名功能。AD CS 角色用于为用户、计算机和服务颁发证书。 目录 CVE-2022-26923 描述 目录 前提条件 环境 利用 概念验证 参考文献 前提条件...

CVE-2024-40898-SSL-Bypass-Detection

CVE-2024-40898 SSL 证书验证绕过扫描器 本仓库包含一个基于 Python 的概念验证 PoC 脚本，用于检测 CVE-2024-40898——Apache HTTP Server 中允许攻击者绕过 SSL 证书验证的漏洞。 概述 CVE-2024-40898 是 Apache HTTP Server 中的一个安全问题，在特定条件下允许客户端绕过证书验证。这可能会在 TLS 上造成中间人 MitM 攻击。 此脚本的功能 • 从 ssl-ports.txt 读取 host:port 对列表。 • 对于每个条目： • 使用禁用证书验证的自定义 SSL 上下文建立 TLS 连接...

CVE-2013-3900-Remediation-Script

root@kitploit: CVE-2013-3900 Remediation Script Define registry paths for both 32-bit and 64-bit configurations $regPaths = @ "HKLM:\Software\Microsoft\Cryptography\Wintrust\Config", "HKLM:\Software\Wow6432Node\Microsoft\Cryptography\Wintrust\Config" Function to add or update the registry key...

CVE-2026-80122

Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Certificate Validation vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to unauthorized access...

CVE-2026-79967

Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Certificate Validation vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to protection mechanism...

CVE-2026-78494

Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Certificate Validation vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to unauthorized access...

CVE-2026-78491

Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Certificate Validation vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to unauthorized access...

EUVD-2026-74779

Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Certificate Validation vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to protection mechanism...

CVE-2026-79967

Dell Secure Connect Gateway (SCG) 5.0 Appliance (versions prior to 5.36.00.16 ) and Application (versions prior to 5.36.00.00 ) contain an Improper Certificate Validation vulnerability. An unauthenticated attacker with remote network access could exploit this to achieve a protection mechanism byp...

CVE-2026-79967

Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Certificate Validation vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to protection mechanism...

CVE-2026-78491

Dell Secure Connect Gateway (SCG) 5.0 contains an Improper Certificate Validation vulnerability affecting both the Appliance and Application editions. An unauthenticated remote attacker could potentially exploit this flaw to gain unauthorized access , with a CVSS 3.1 base score of 8.2 (HIGH) refl...

EUVD-2026-74771

Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Certificate Validation vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to unauthorized access...

CVE-2026-80122

Dell Secure Connect Gateway (SCG) 5.0 contains an Improper Certificate Validation vulnerability affecting both the Appliance and Application editions. Affected versions are Appliance prior to 5.36.00.16 and Application prior to 5.36.00.00 . An unauthenticated remote attacker could exploit this fl...

EUVD-2026-74770

Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Certificate Validation vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to unauthorized access...

CVE-2026-80122

Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Certificate Validation vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to unauthorized access...

CVE-2026-79636

Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Validation of Certificate with Host Mismatch vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to...

EUVD-2026-74766

Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Certificate Validation vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to unauthorized access...