CVE-2026-78130

strongSwan 4.2.0 through 6.0.7 has a NULL pointer dereference in the x509 plugin's attribute certificate parser...

EUVD-2026-75903

strongSwan 4.2.0 through 6.0.7 has a NULL pointer dereference in the x509 plugin's attribute certificate parser...

EUVD-2026-75899

strongSwan 5.0.2 through 6.0.7 allows PKCS7 certificate enumeration in the openssl plugin that leads to a lack of release of memory after its effective lifetime...

CVE-2026-78124

strongSwan 5.0.2 through 6.0.7 allows PKCS7 certificate enumeration in the openssl plugin that leads to a lack of release of memory after its effective lifetime...

CVE-2026-78124

strongSwan 5.0.2 through 6.0.7 allows PKCS7 certificate enumeration in the openssl plugin that leads to a lack of release of memory after its effective lifetime...

CVE-2026-78124

strongSwan 5.0.2 through 6.0.7 allows PKCS7 certificate enumeration in the openssl plugin that leads to a lack of release of memory after its effective lifetime...

PT-2026-90148

In the Linux kernel, the following vulnerability has been resolved: platform/x86: think-lmi: Free system certificate signatures Multi-certificate support also allows the system authentication object to store -signature and -save signature, which leak when the driver is removed. Free the signature...

Linux Distros Unpatched Vulnerability : CVE-2026-45747

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to version 7.0.16, the Lua TLS...

PT-2026-89737

strongSwan 4.2.0 through 6.0.7 has a missing release of memory after its effective lifetime in the x509 plugin's attribute certificate parser...

PT-2026-89677

strongSwan 4.2.0 through 6.0.7 has a NULL pointer dereference in the x509 plugin's attribute certificate parser...

PT-2026-89673

strongSwan 5.0.2 through 6.0.7 allows PKCS7 certificate enumeration in the openssl plugin that leads to a lack of release of memory after its effective lifetime...

openSUSE 16 Security Update : trivy (openSUSE-SU-2026:21801-1)

The remote openSUSE 16 host has a package installed that is affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21801-1 advisory. - CVE-2026-24122: github.com/sigstore/cosign/v2/pkg/cosign: improper validation of certificates that outlive expired CA certificates bsc1258543....

PT-2026-89738

strongSwan 5.1.3 through 6.0.7 has an infinite loop in the x509 plugin's attribute certificate parser for ietfAttrSyntax...

PT-2026-90521

Requests from the reverse proxy to the identity-provider service for token discovery, introspection, and credential exchange do not verify the identity provider's server certificate. An attacker positioned on the network path between the proxy and the identity provider could impersonate the...

CVE-2025-36041

CVE-2025-36041 IBM MQ SSL 우회 익스플로잇 개요 이 저장소는 IBM MQ메시지 큐의 SSL 인증서 검증을 우회할 수 있는 취약점 CVE-2025-36041 에 대한 개념 증명PoC 익스플로잇을 포함합니다. 가짜 SSL 인증서를 주입하고 사용자 정의 MQCONNX 매개변수를 사용하여 IBM MQ 서버에 대한 무단 클라이언트 연결을 설정할 수 있습니다. 기능 SSL 우회 : 가짜 SSL KeyRepository를 주입하여 서버 인증서 검증을 비활성화합니다. 자동 익스플로잇 : 지정된 큐를 열고 테스트...

CVE-2025-54424

CVE-2025-54424 CVE-2025-54424：1Panel クライアント証明書バイパスRCE脆弱性 統合ツール（スキャン＋エクスプロイト） 脆弱性の概要 1Panel は、オープンソースでモダンな Linux 運用管理パネルであり、Web サイトのデプロイ、サーバー管理、サービスの実行をグラフィカルインターフェースで提供します。 影響を受けるバージョンでは、Agent 側の TLS 認証ポリシーが tls.RequireAnyClientCert に設定されており、証明書の提示のみを要求し、その信頼性は検証しません。攻撃者は自己署名証明書を使用して TLS...

io.netty/netty-handler: Netty: TLS hostname verification bypass via OpenSSL client path misconfiguration

A flaw was found in Netty io.netty:netty-handler. When using the SslProvider.OPENSSL client path with a plain X509TrustManager and without Unsafe-based trust-manager wrapping Java 25+, TLS hostname verification is disabled. This misconfiguration allows a man-in-the-middle attacker to present a...

blackboxprotobuf

Blackbox Protobuf Blackbox Protobuf now has an official package on PyPi under the namebbpb. The blackboxprotobuf package is an older fork Description Blackbox Protobuf is a set of tools for working with encoded Protocol Buffers protobuf without the matching protobuf definition. Protobuf is a bina...

DatajackProxy

Datajack Proxy Datajack Proxyは、ネイティブアプリケーションとサーバー間の非HTTPトラフィックを傍受するツールです。これにより、暗号化や証明書ピンニングが使用されていても、通信の傍受と改変が可能になります。これは、アプリケーションをフックし、一般的なソケットおよびTLSライブラリへの呼び出しを傍受して、暗号化前（送信時）および復号化後（受信時）のデータを読み取ることで実現されます。 これは、Frida APIを使用してネイティブプロセスにJavaScriptを注入することで実現されます。 特徴 プロセスへの注入...

Solitude

Solitude Solitudeは、誰でも自分自身のプライバシー調査を実施できるようにするプライバシー分析ツールです。好奇心旺盛な初心者であれ、より高度な研究者であれ、Solitudeはアプリ内のユーザープライバシーを評価するプロセスを誰にでも利用しやすいものにします。 重要な注意 Solitudeをインストールする前に、Solitudeは信頼できるプライベートネットワーク上で実行する必要があることに注意してください。 SolitudeのWebアプリインターフェースは現在、ユーザーがプライベートで信頼できるネットワーク上でツールを実行することを前提に構築されています。...