CVE-2026-67598

CVE-2026-67598 Emlog Pro — Deaktivierte TLS-Zertifikatsprüfung im KI-Assistenten Netzwerknaher MITM → Diebstahl des LLM-Anbieter-API-Schlüssels & Injektion von KI-Antworten Zusammenfassung · Angriffsablauf · Betroffener Code · Nachweis · Behebung · Zeitplan · Referenzen 📋 Auf einen Blick | ---|--...

CVE-2026-35616-check

CVE-2026-35616 Vulnerability-Assessment-Tool Ermitteln Sie gefahrlos, ob ein FortiClient EMS-Server anfällig für CVE-2026-35616 ist, ohne Störungen zu verursachen. Den vollständigen Bericht finden Sie im Bishop-Fox-Blog. Beschreibung CVE-2026-35616 ist ein Pre-Authentication-API-Bypass in...

santa

Santa !NOTE As of 2025, Santa is no longer maintained by Google. We encourage existing users to migrate to an actively maintained fork of Santa, such as https://github.com/northpolesec/santa. Santa is a binary and file access authorization system for macOS. It consists of a system extension that...

Http-Asynchronous-Reverse-Shell

HTTP/S Asincrona Reverse Shell ✨ Introduzione In un'epoca in cui sistemi di rilevamento avanzati come IDS, IPS, EDR, AV e firewall dominano le reti aziendali, eluderli durante valutazioni di sicurezza offensive è una sfida. La maggior parte delle reverse shell sfruttano tunnel TCP L4, che ora...

msf-remote-console

Non mantenuto Questo strumento non sarà più mantenuto da me. Esistono alternative migliori direttamente da Rapid7 come descritto qui: Come eseguire metasploit da remoto Esempio: Per rendere i comandi msf utilizzabili al di fuori della directory metasploit-framework, imposta la variabile GEMHOME...

reternal-quickstart

RE:TERNAL Note: Still under development, only use for testing and do not expose interfaces! Current compose doesn't work yet, only try when you know what you're doing RE:TERNAL is a centralised purple team orchestration service to manage third-party C2 frameworks. Agents are installed on endpoint...

columbus-server

Columbus server This repository is deprecated! ‼️ The server component is moved to https://github.com/elmasy-com/columbus. Columbus Project is an API first subdomain discovery service, blazingly fast subdomain enumeration service with advanced features. Subdomain Lookup Columbus returned 638...

columbus-server

Server Columbus Questo repository è deprecato! ‼️ Il componente server è stato spostato su https://github.com/elmasy-com/columbus. Columbus Project è un servizio di scoperta di sottodomini API-first, un servizio di enumerazione di sottodomini incredibilmente veloce con funzionalità avanzate...

Mangle

QUESTO REPOSITORY È STATO ARCHIVIATO Per visualizzare l'ultima versione di Mangle o per inviare un problema, fare riferimento a https://github.com/Tylous/Mangle. Mangle Creato da Tyl0us Presentato a Source Zero Con 2022 Mangle è uno strumento che manipola aspetti di eseguibili compilati .exe o DL...

nogotofail

nogotofail Nogotofail è uno strumento di test della sicurezza di rete progettato per aiutare sviluppatori e ricercatori di sicurezza a individuare e correggere connessioni TLS/SSL deboli e traffico in chiaro sensibile su dispositivi e applicazioni in modo flessibile, scalabile e potente. Include...

Check Point IKEv1 Remote-Access VPN - Certificate Authentication Bypass

IKEv1 key exchange contains a broken authentication caused by logic flow weakness in Remote Access and Mobile Access certificate validation, letting unauthenticated remote attackers bypass user authentication and establish VPN connections without valid passwords, exploit requires use of deprecate...

p5-ssl-tools

Sammlung von SSL-Tools Dieses Repository enthält verschiedene Tools, die dazu dienen, Probleme im Zusammenhang mit SSL/TLS zu debuggen oder zu analysieren. Analyse des TLS-Zustands analyze-ssl.pl prüft die Unterstützung verschiedener SSL/TLS-Versionen prüft, welche Ciphers unterstützt werden...

EUVD-2026-95399

Improper certificate validation in Microsoft Partner Center allows an unauthorized attacker to elevate privileges over a network...

EUVD-2026-95333

IBM Guardium Data Protection 12.2.2 could allow a remote attacker to conduct a man-in-the-middle attack due to improper certificate validation...

The vulnerability of the Go Cryptography library allows a perpetrator to gain unauthorized access and influence the integrity of the protected information.

The vulnerability of the Go Cryptography library is related to errors in the certificate authentication process. Exploiting this vulnerability could allow an attacker to gain unauthorized access and influence the integrity of the protected information...

Linux Distros Unpatched Vulnerability : CVE-2026-88647

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A hostname verification bypass in GnuTLS v3.8.13 allows attackers to circumvent the Common Name fallback mechanism and eavesdrop on communications via a crafted...

CVE-2026-107708

A flaw was found in krb5. This vulnerability allows a compromised or malicious cross-realm trusted Key Distribution Center KDC to cause a Denial of Service DoS. By sending an S4U2Proxy delegation request containing a malformed client name within a Privilege Attribute Certificate PAC, an attacker...

CVE-2025-36041

CVE-2025-36041 Bypass SSL di IBM MQ Panoramica Questo repository contiene un proof-of-concept PoC per CVE-2025-36041 , una vulnerabilità in IBM MQ Message Queue che permette di bypassare la validazione del certificato SSL. Iniettando un certificato SSL falso e utilizzando parametri MQCONNX...

CVE-2026-67693

A flaw was found in GnuTLS. The certificate verification process fails to properly reject end-entity digital certificates containing contradictory Key Usage KU and Extended Key Usage EKU extensions, which define the permitted cryptographic operations of a certificate. A remote attacker could...

CVE-2025-54424

CVE-2025-54424 CVE-2025-54424: Integriertes Tool für die RCE-Schwachstelle durch Client-Zertifikatsumgehung in 1Panel Scan + Exploit Beschreibung der Schwachstelle 1Panel ist ein Open-Source-, modernes Linux-Betriebsverwaltungs-Panel, das eine grafische Oberfläche für die Bereitstellung von...