CVE-2026-90623 andreashappe cochise SSH Host Key ssh_connection.py asyncssh.connect certificate validation

A weakness has been identified in andreashappe cochise up to 0.4.1. Affected is the function asyncssh.connect of the file src/cochise/sshconnection.py of the component SSH Host Key Handler. Executing a manipulation can lead to improper certificate validation. The attack may be launched remotely...

CVE-2026-90623 andreashappe cochise SSH Host Key ssh_connection.py asyncssh.connect certificate validation

A weakness has been identified in andreashappe cochise up to 0.4.1. Affected is the function asyncssh.connect of the file src/cochise/sshconnection.py of the component SSH Host Key Handler. Executing a manipulation can lead to improper certificate validation. The attack may be launched remotely...

CVE-2026-90623

CVE-2026-90623 affects andreashappe cochise up to version 0.4.1 . The vulnerability resides in the SSH Host Key Handler component, specifically the asyncssh.connect function in src/cochise/ssh_connection.py, and stems from improper certificate validation . A remote attacker with high complexity c...

crypto/x509: golang: Go crypto/x509: Certificate validation bypass due to incorrect DNS constraint application

A flaw was found in the crypto/x509 package within Go golang. When verifying a certificate chain, excluded DNS Domain Name System constraints are not correctly applied to wildcard DNS Subject Alternative Names SANs if the case of the SAN differs from the constraint. This oversight could allow an...

Important: Red Hat Security Advisory: yggdrasil security update

An update for yggdrasil is now available for Red Hat Enterprise Linux 10.0 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available...

SCCM-CVE-2026-47301-Remote-Code-Execution-Exploit

SCCM-CVE-2026-47301-Remote-Code-Execution-Exploit Proof-of-concept exploit chain I have discovered assigned as CVE-2026-47301 for Microsoft Configuration Manager SCCM, combining broken access control, CAB extraction-path traversal arbitrary file write, certificate verification bypass, and DLL...

crypto-lab-merkle-proofs

crypto-lab-merkle-proofs What It Is This is an interactive demo of Merkle trees and Merkle inclusion proofs , built on SHA-256 via the browser's WebCrypto API. A Merkle tree hashes a set of data blocks into a single root hash that commits to all of them at once; an inclusion proof is the short li...

CurveBall

CurveBall CVE-2020-0601 - PoC CVE-2020-0601, or commonly referred to as CurveBall, is a vulnerability in which the signature of certificates using elliptic curve cryptography ECC is not correctly verified. ECC relies on different parameters. These parameters are standardized for many curves...

RHEL 9 : grafana-pcp (RHSA-2026:67160)

The remote Redhat Enterprise Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2026:67160 advisory. The Grafana plugin for Performance Co-Pilot includes datasources for scalable time series from pmseries and Redis, live PCP metrics and...

EUVD-2023-60651

The ca-certificates package before ca-certificates-2021.2.50-72 for Amazon Linux 2 AL2 does not properly remove certain TrustCor root certificates from the root store. NOTE: this issue exists because of an incorrect fix for CVE-2022-23491...

RHEL 9 : grafana-pcp (RHSA-2026:67159)

The remote Redhat Enterprise Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2026:67159 advisory. The Grafana plugin for Performance Co-Pilot includes datasources for scalable time series from pmseries and Redis, live PCP metrics and...

UBUNTU-CVE-2026-81018

In the Linux kernel, the following vulnerability has been resolved: platform/x86: think-lmi: Free system certificate signatures Multi-certificate support also allows the system authentication object to store -signature and -savesignature, which leak when the driver is removed. Free the signatures...

CurveBall

CurveBall CVE-2020-0601 - PoC CVE-2020-0601: Also known as CurveBall or ChainOffFools, is a vulnerability in the Microsoft CryptoApi specificly in Crypt32.dll where elliptic curve signatures ECDSA of certificates is not correctly verified. There is a very nice blog post here which explains the...

openssl-heartbleed-fix

openssl-heartbleed-fix OpenSSL Heartbleed CVE-2014-0160 Fix script Sammy Fung [email protected] OpenSSL Heartbleed CVE-2014-0160 http://www.us-cert.gov/ncas/alerts/TA14-098A bug is now discovered by network security professionals, which many systems using some OpenSSL versions are affected. ...

PIVert

PIVert - PIV smart card emulator Introduction PIVert is a NIST SP 800-73 PIV smart card emulator. You can supply PIVert with a PFX file containing a certificate and corresponding private key and the tool will emulate the card to Windows as a genuine PIV card. The card can then be used for...

CVE-2024-29050

CVE-2024-29050 CVE-2024-29050 is a security vulnerability in Windows' cryptographic services, particularly in how certificates are processed during cryptographic operations. The issue stems from an integer overflow, which occurs when calculations on data like file sizes or buffer lengths exceed t...

CVE-2020-0601

ChainOfFools AKA CurveBall AKA CVE-2020-0601 Collection of CVE-2020-0601 ChainOfFools | CurveBall resources General A summary from the NSA advisory states. NSA has discovered a critical vulnerability CVE-2020-0601 affecting Microsoft Windows®1 cryptographic functionality. The certificate validati...

ssl-kill-switch2

SSL Kill Switch 2 Blackbox tool to disable SSL/TLS certificate validation - including certificate pinning - within iOS and macOS applications. Second iteration of https://github.com/iSECPartners/ios-ssl-kill-switch . Description Once loaded into an iOS or macOS application, SSL Kill Switch 2 will...

ssl-kill-switch2

SSL Kill Switch 2 黑盒工具，用于在 iOS 和 macOS 应用程序中禁用 SSL/TLS 证书验证（包括证书固定）。这是 https://github.com/iSECPartners/ios-ssl-kill-switch 的第二代版本。 描述 一旦加载到 iOS 或 macOS 应用程序中，SSL Kill Switch 2 将修补负责处理 SSL/TLS 连接的底层函数，以覆盖并禁用系统的默认证书验证，以及任何类型的自定义证书验证（例如证书固定）。 它已成功针对各种实现证书固定的应用程序进行了测试，包括 Apple App Store。SSL Kill Swit...

CVE-2022-26923

CVE-2022-26923 – Certifried Exploit AD CS Abuse Automation of the exploitation of CVE-2022-26923 Certifried allowing privilege escalation via abuse of Active Directory Certificate Services AD CS and Resource-Based Constrained Delegation RBCD, leading to the dump of the NTLM hash of a domain...