pwnage24mtk

pwnage24mtk Cert exploit for MTK devices.There is a logic flaw in MTK cert verification process.Similar to CVE-2023-20696. Patched. CVE-2023-20696 CVE-2025-20730 There are some issues about architecture detect.Need to be fixed when I am free.Or anyone can make a pull request. This is a vibe-coded...

universal-flutter-ssl-pinning

universal-flutter-ssl-pinning Ingeniería inversa de libflutter.so con PyGhidra para localizar la función de verificación del certificado SSL, luego genera scripts de omisión listos para usar tanto para Frida como para Renef. Cómo funciona 1. PyGhidra carga libflutter.so sin interfaz gráfica y...

ibmsecurity

IBM Sample Code This repository contains Python code to manage IBM Security Appliances using their respective REST APIs. ISAM appliance has the most mature code. Code for ISDS appliance is under development. Code for ISVG appliance is brand new tested with 10.0.1.0 and higher only. Requirements...

sslnuke

sslnuke -- SSL without verification isn't secure! We have all heard over and over that SSL without verification is not secure. If an SSL connection is not verified with a cached certificate, it can easily be hijacked by any attacker. So in 2013, one would think we had totally done away with this...

Check Point IKEv1 Remote-Access VPN - Certificate Authentication Bypass

IKEv1 key exchange contains a broken authentication caused by logic flow weakness in Remote Access and Mobile Access certificate validation, letting unauthenticated remote attackers bypass user authentication and establish VPN connections without valid passwords, exploit requires use of deprecate...

poc-CVE-2026-0073

CVE-2026-0073 PoC Wireless ADB TLS Auth Bypass Dieses Verzeichnis enthält einen Python Proof-of-Concept für CVE-2026-0073. Das Skript wurde unter Verwendung KI-gestützter Codegenerierungstechniken erstellt. Zusammenfassung CVE-2026-0073 ist ein logisches Problem in der ADB-Daemon-Zertifikatsprüfu...

CVE-2026-55856

MariaDB Connector/J is used to connect applications developed in Java to MariaDB and MySQL databases. Prior to 2.7.14, 3.3.5, 3.4.3, and 3.5.9, when a Java application connects with sslMode=verify-full or sslMode=verify-ca, supplies a password, and does not configure serverSslCert or trustStore,...

nogotofail

nogotofail Nogotofail è uno strumento di test della sicurezza di rete progettato per aiutare sviluppatori e ricercatori di sicurezza a individuare e correggere connessioni TLS/SSL deboli e traffico in chiaro sensibile su dispositivi e applicazioni in modo flessibile, scalabile e potente. Include...

p5-ssl-tools

Raccolta di Strumenti SSL Questo repository contiene vari strumenti, pensati per eseguire il debug o analizzare problemi relativi a SSL/TLS. Analisi dello stato di TLS analyze-ssl.pl verifica il supporto per varie versioni di SSL/TLS verifica quali cifrari sono supportati verifica il certificato...

CVE-2026-54876

A flaw was found in OpenSSL. A malicious TLS Transport Layer Security server can exploit this vulnerability by sending a specially crafted OCSP Online Certificate Status Protocol response during the X.509 certificate chain verification process. This can lead to a memory leak in client application...

CVE-2026-19854

CVE-2026-19854 affects the ClickHouse plugin (Grafana) when it uses the Native protocol (the default) together with PDC or secure SOCKS . The root cause is that the underlying connection library requests TLS but then ignores it, resulting in plaintext communication with ClickHouse. Concretely, us...

CVE-2026-19854 CVE-2026-19854 CVE Record

When the ClickHouse plugin uses Native protocol the default with PDC or secure SOCKS, it asks for TLS but the connection library ignores that and talks to ClickHouse in the clear. Username, password, queries, and results can be read on the hop after the proxy. The server certificate is never...

poc-CVE-2026-0073

CVE-2026-0073 PoC Wireless ADB TLS Auth Bypass Dieses Verzeichnis enthält einen Python-Proof-of-Concept für CVE-2026-0073. Das Skript wurde mit KI-gestützten Codegenerierungstechniken erstellt. Zusammenfassung CVE-2026-0073 ist ein Logikfehler in der Zertifikatsprüfung des ADB-Daemons...

CVE-2026-81034

Netmaker disables certificate verification on the connection to the configured mail server. The sender in pro/email/smtp.go assigns a TLS configuration whose skip-verify field is set to true unconditionally, directly beneath a comment stating that the setting should be false in production. No...

crypto/x509: golang: golang crypto/x509: Denial of Service via excessive processing of DNS SAN entries

A flaw was found in the crypto/x509 package of golang. This vulnerability allows a remote attacker to cause a Denial of Service DoS by presenting a specially crafted X.509 certificate with a large number of DNS Subject Alternative Name SAN entries. The certificate verification process, specifical...

Astra Linux – Vulnerability in requests

Requests is an HTTP library. Prior to version 2.32.0, when making requests through a Requests Session, if the first request was made with verify=False to disable certificate verification, all subsequent requests to the same host would continue to ignore certificate verification, regardless of...

Astra Linux – Vulnerability in PostgresSQL 11

When the server is configured to use trust authentication with a clientcert requirement or to use cert authentication, a man-in-the-middle attacker can inject arbitrary SQL queries during the initial establishment of a connection, despite the use of SSL certificate verification and encryption...

Astra Linux – Vulnerability in Twisted

In words.protocols.jabber.xmlstream in Twisted through version 19.2.1, XMPP support did not verify certificates when used with TLS, allowing an attacker to intercept connections...

Astra Linux – Vulnerability in PostgresSQL 11

A man-in-the-middle attacker can inject false responses to the client’s first few queries, despite the use of SSL certificate verification and encryption...

Astra Linux – Vulnerability in curl

When performing multi-threaded LDAPS transfers LDAP over TLS with libcurl, changing TLS options in one thread will inadvertently change them globally, and thus may also affect other concurrently running transfers. Disabling certificate verification for a specific transfer can unintentionally...