CVE-2026-86889

A certificate validation issue was addressed with improved certificate validation. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An attacker in a privileged network position may be able to intercept network traffic...

CVE-2026-86881

CVE-2026-86881 is a certificate validation issue affecting multiple Apple operating systems, including iOS 26.7, iPadOS 26.7, macOS Sequoia 15.8, macOS Tahoe 26.7 , and other Apple platforms. The root cause is insufficient validation of extended key usages on certificates. An attacker with a comp...

EUVD-2026-77977

A certificate validation issue was addressed with improved certificate validation. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. An attacker with a compromised intermediate...

rsync: rsync: TLS Certificate Validation Bypass allows interception of encrypted sessions

A flaw was found in the rsync-ssl wrapper script's TLS certificate validation. An on-path attacker can present self-signed or invalid certificates to intercept, decrypt, or tamper with encrypted sessions. Because rsync fails to validate the certificate against a trusted CA or verify hostname...

CVE-2026-18251

IBM i (versions 7.3, 7.4, 7.5, and 7.6 ) is affected by a vulnerability in Navigator for i where improper validation of the WebSocket origin allows a remote, unauthenticated attacker to obtain sensitive information. The underlying cause is classified as CWE-1385: Missing Origin Validation in WebS...

CVE-2026-18251 IBM i is Affected By Multiple Vulnerabilities in Navigator for i and Digital Certificate Manager for i.

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to obtain sensitive information due to improper validation of the WebSocket origin...

rsync: rsync: TLS Certificate Validation Bypass allows interception of encrypted sessions

A flaw was found in the rsync-ssl wrapper script's TLS certificate validation. An on-path attacker can present self-signed or invalid certificates to intercept, decrypt, or tamper with encrypted sessions. Because rsync fails to validate the certificate against a trusted CA or verify hostname...

CVE-2022-0778

CVE-2022-0778 Description We refer to the concept of drago-96 and then rewrite a PoC based on the P12 and PEM format. You can use it to verify the CVE-2022-0778 vulns, i.e., a dangerous SSL certificate without any private password, leave it empty. If the device is affected, it may cause the CPU o...

CVE-2026-18151

CVE-2026-18151 affects IBM Navigator for i and Digital Certificate Manager for i on IBM i 7.3–7.6 . The vulnerability is a race condition (CWE-362) during the WebSocket handshake process , allowing a remote authenticated attacker to obtain sensitive information. The CVSS 3.1 score is 4.2 (MEDIUM)...

CVE-2026-18151 IBM i is Affected By Multiple Vulnerabilities in Navigator for i and Digital Certificate Manager for i.

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to obtain sensitive information due to a race condition during the WebSocket handshake process...

CVE-2026-18515

IBM i Navigator for i is vulnerable to improper path validation (CWE-22, Path Traversal), allowing a remote authenticated attacker to place files into locations in the file system that Navigator configuration intended to block. The impact is limited: the condition applies only if the user's profi...

CVE-2026-18515 IBM i is Affected By Multiple Vulnerabilities in Navigator for i and Digital Certificate Manager for i.

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to place files into the file system with Navigator for i when they should be blocked by Navigator configuration. This could allow attackers to upload files onto the system to places the Navigator support did not intend, but...

CVE-2026-90942

Casdoor through 4.4.0 fails to properly mask the instance-wide built-in certificate private key in /api/get-certs and /api/get-cert endpoints, allowing organization administrators to retrieve it. Attackers can use the exposed private key to forge JWT tokens for any user in any organization,...

CVE-2026-90942 Casdoor through 4.4.0 Private Key Exposure via Certificate Endpoints

Casdoor through 4.4.0 fails to properly mask the instance-wide built-in certificate private key in /api/get-certs and /api/get-cert endpoints, allowing organization administrators to retrieve it. Attackers can use the exposed private key to forge JWT tokens for any user in any organization,...

CVE-2026-90942

Casdoor through 4.4.0 fails to properly mask the instance-wide built-in certificate private key in the /api/get-certs and /api/get-cert endpoints, allowing organization administrators to retrieve it. An attacker with this low-privilege access can use the exposed key to forge JWT tokens for any us...

EUVD-2026-77710

Casdoor through 4.4.0 fails to properly mask the instance-wide built-in certificate private key in /api/get-certs and /api/get-cert endpoints, allowing organization administrators to retrieve it. Attackers can use the exposed private key to forge JWT tokens for any user in any organization,...

CVE-2026-0257

使用 TLS 的公钥伪造 GlobalProtect 身份验证覆盖 Cookie CVE-2026-0257 一个概念验证脚本，用于测试目标 PAN-OS GlobalProtect 门户或网关是否存在 CVE-2026-0257。该脚本会遍历 HTTPS 服务使用的证书链，并针对链中的每个公钥伪造一个有效的身份验证覆盖 Cookie，然后对 GlobalProtect 目标进行测试，验证其是否有效。 成功伪造的 Cookie 将登录 GlobalProtect 目标并检索 VPN 连接信息（使用 --verbose 参数查看详细信息）。 使用方法 root@kitploit: $...

CVE-2026-6789-Stack-Buffer-Overflow-in-Embedded-TLS-Certificate-Parser

9. CVE-2026-6789 – Stack Buffer Overflow in Embedded TLS Certificate Parser Overview A popular lightweight TLS library simulated contains a stack buffer overflow when parsing X.509 certificate Subject Alternative Name extensions with a crafted length field. Severity: Critical RCE on IoT/Industria...

cve-2020-0601

CVE-2020-0601 用 Zeek テストスクリプト このスクリプトは CVE-2020-0601 の悪用試行を検出できます。証明書で既知の曲線が使用されているかどうかを簡単にチェックし、そうでない場合に通知を発行します。 notice.log 内の通知例: root@kitploit: 1579043477.791522 CHhAvVGS1DHFjwGM9 192.241.209.49 46110 192.241.202.21 4433 F37z6n1B8zn1fZjpj application/x-x509-user-cert 192.241.202.21:4433/tcp t...

cve-2020-0601

Zeek test script for CVE-2020-0601 This script can detect exploit attempts for CVE-2020-0601. It performs a simple check to see if a known curve is used in a certificate - if this is not the case a notice is raised. Example notice in notice.log: root@kitploit: 1579043477.791522 CHhAvVGS1DHFjwGM9...