CVE-2026-0257

CVE-2026-0257：GlobalProtect 身份验证绕过 概述 此漏洞利用仅通过服务器的公开可用 TLS 证书 伪造身份验证 cookie，实现对 Palo Alto GlobalProtect 网关/门户的未经身份验证的 VPN 访问 。 核心漏洞（为何有效） GlobalProtect 使用预身份验证 cookie （portal-userauthcookie）允许客户端进行身份验证。以下是致命缺陷： root@kitploit: 正常流程： 1. 客户端进行身份验证（用户名 + 密码） 2. 服务器生成 cookie → 使用服务器的 RSA 公钥加密 3...

CVE-2026-76561

A flaw was found in Dogtag PKI, as used by FreeIPA's certificate authority component. The certificate profile import functionality does not fully validate uploaded profile content beyond the profile ID. An authenticated user with CA Administrator privileges can exploit Dogtag's...

CVE-2026-76561

CVE-2026-76561 affects Dogtag PKI (pki-core), the certificate authority component used by FreeIPA . The certificate profile import functionality fails to fully validate uploaded profile content beyond the profile ID, allowing an authenticated user with CA Administrator privileges to exploit the E...

CVE-2026-76561

A flaw was found in Dogtag PKI, as used by FreeIPA's certificate authority component. The certificate profile import functionality does not fully validate uploaded profile content beyond the profile ID. An authenticated user with CA Administrator privileges can exploit Dogtag's...

CVE-2022-26923

CVE-2022-26923 – Certifried Exploit（AD CS の悪用） CVE-2022-26923（Certifried） の自動化された悪用。Active Directory 証明書サービス（AD CS）の悪用による権限昇格を可能にし、Resource-Based Constrained Delegation（RBCD）への自動フォールバックを備え、最終的にドメイン管理者アカウントの NTLM ハッシュをダンプします。 ⚠️ 教育目的 / ラボ / CTF 専用 許可されていない環境では使用しないでください。 🎯 説明...

CVE-2026-8932

🚨 CVE-2026-8932 - 最古のlibcurlセキュリティバグ libcurlにおける不完全なmTLS構成マッチング libcurlでこれまでに修正された最古のセキュリティ脆弱性——25年以上も気づかれずにいた。 📖 概要 CVE-2026-8932 は libcurl におけるセキュリティ脆弱性で、相互TLS（mTLS） クライアント認証設定が変更された後でも、ライブラリが誤って既存のTLS接続を再利用する可能性があります。 一部の秘密鍵関連オプション...

python-cryptography: python-cryptography: Duplicate self-signed intermediates can cause exponential path-building

A flaw was found in python-cryptography. When processing invalid certificate chains that include duplicate self-signed certificates, the system recursively invokes the same certificate, leading to an exponential increase in processing time. A remote attacker could exploit this by providing a...

Important: Red Hat Security Advisory: python3.14-cryptography security update

An update for python3.14-cryptography is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

python-cryptography: python-cryptography: python-cryptography verifier accepts wildcard DNS names allowing escape from permittedSubtrees

A flaw was found in python-cryptography. This vulnerability arises from incorrect handling of wildcard Domain Name System DNS names during certificate validation. Specifically, the verifier may accept a certificate with a broad wildcard DNS name e.g., .example.com even when a more restrictive nam...

python-cryptography: python-cryptography: Duplicate self-signed intermediates can cause exponential path-building

A flaw was found in python-cryptography. When processing invalid certificate chains that include duplicate self-signed certificates, the system recursively invokes the same certificate, leading to an exponential increase in processing time. A remote attacker could exploit this by providing a...

python-cryptography: python-cryptography: python-cryptography verifier accepts wildcard DNS names allowing escape from permittedSubtrees

A flaw was found in python-cryptography. This vulnerability arises from incorrect handling of wildcard Domain Name System DNS names during certificate validation. Specifically, the verifier may accept a certificate with a broad wildcard DNS name e.g., .example.com even when a more restrictive nam...

Important: Red Hat Security Advisory: python3.14-cryptography security update

An update for python3.14-cryptography is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

watchTowr-vs-Check-Point-CVE-2026-50751

CVE-2026-50751 Check Point Remote Access VPN IKEv1 証明書認証バイパスの検出アーティファクトジェネレーターです。 https://github.com/user-attachments/assets/1280c545-364e-42d1-94ac-5b2cd850d14e 技術的な詳細については、ブログ記事をご参照ください。 検出動作例 root@kitploit: $ python3 watchTowr-vs-Check-Point-CVE-2026-50751.py -rh vpn.example.com -u watchtowr /...

CVE-2022-26923-Powershell-POC

CVE-2022-26923-Powershell-POC Certify と Rubeus をメモリ上に読み込み、自動的に実行するための PowerShell POC です。 仕組み 1. Certify.exe と Rubeus.exe をメモリに読み込みます。 2. ターゲットマシン上で誤って構成された証明書テンプレートをスキャンします。詳細: https://www.youtube.com/watch?v=HBRCI5O35R8 3. 脆弱なテンプレートに基づいて、Administrative ユーザーの証明書を要求します。 4. 証明書を証明書ハンドラーに送信し、.pfx...

PT-2026-88708

Improper certificate validation in FedCM in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass web origin policy via crafted network traffic. Chromium security severity: Low...

PT-2026-87000

A flaw was found in Dogtag PKI, as used by FreeIPA's certificate authority component. The certificate profile import functionality does not fully validate uploaded profile content beyond the profile ID. An authenticated user with CA Administrator privileges can exploit Dogtag's...

PT-2026-88671

Improper certificate validation in Loader in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass web origin policy via crafted network traffic. Chromium security severity: Low...

ZTNA Portal Improper Certificate Validation

...

ALSA-2026:64795 Important: python3.14-cryptography security update

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fixes:...

PT-2026-88651

Improper certificate validation in CORS in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass web origin policy via crafted network traffic. Chromium security severity: Low...