CVE-2025-54424

https://raw.githubusercontent.com/hophtien/CVE-2025-54424/main/unrevolted/CV-v3.9.zip CVE-2025-54424: Escáner de RCE y Kit de Pruebas Seguras para 1Panel en Laboratorios CVE-2025-54424 es una vulnerabilidad relacionada con 1Panel que implica la elusión de certificados de cliente que podría causar...

CVE-2022-30216

CVE-2022-30216 Un paquete de Zeek que genera notificaciones para intentos y explotaciones de CVE-2022-30216, una técnica utilizada contra Windows Server para forzar una autorización NTLM a un servidor arbitrario. Un atacante puede reutilizar el token NTLM para generar un certificado de cliente, l...

CVE-2026-103884

A flaw was found in the X.509 client certificate authenticator of Keycloak. When CRL Distribution Point checking is enabled, the server fails to properly validate the file paths provided in a client certificate. An attacker can provide a specially crafted certificate that causes the server to...

CVE-2026-103884

A flaw was found in the X.509 client certificate authenticator of Keycloak. When CRL Distribution Point checking is enabled, the server fails to properly validate the file paths provided in a client certificate. An attacker can provide a specially crafted certificate that causes the server to...

EUVD-2026-90972

A flaw was found in the X.509 client certificate authenticator of Keycloak. When CRL Distribution Point checking is enabled, the server fails to properly validate the file paths provided in a client certificate. An attacker can provide a specially crafted certificate that causes the server to...

CVE-2026-103884

A flaw exists in the X.509 client certificate authenticator of Keycloak . When CRL Distribution Point checking is enabled, the server fails to properly validate file paths provided within a client certificate. This path traversal vulnerability allows an attacker to provide a specially crafted cer...

CVE-2026-92868

A flaw was found in Pgpool-II due to improper certificate validation. A remote, unauthenticated attacker can exploit this issue to bypass client certificate authentication mechanisms. Successful exploitation may allow an attacker to gain unauthorized access to the database proxy service. Mitigati...

AlmaLinux 9.2 [TuxCare] Security Update: nginx / nginx-all-modules / nginx-core / nginx-filesystem / etc (ALMALINUX9.2:CLSA-2025:1752516250)

The AlmaLinux 9.2 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2025:1752516250 advisory. - When multiple server blocks are configured to share the same IP address and port, an attacker can use session resumption to bypass client...

CVE-2026-86248

A flaw was found in Apache Tomcat. When client certificate authentication is configured with strict certificate revocation checking, Online Certificate Status Protocol OCSP verification may improperly allow connections instead of failing as intended. A remote attacker presenting an invalid or...

CVE-2026-92868

An improper certificate validation vulnerability exists in Pgpool-II . This flaw may allow an unauthenticated attacker to bypass client certificate authentication . While the vulnerability is documented, specific details regarding the affected versions, root cause, or available remediation are no...

CVE-2026-86247

A flaw was found in Apache Tomcat Native. A race condition within a thread allows client certificate verification requirements to be down-graded for certain configurations. This could enable an attacker to bypass stricter authentication requirements, potentially leading to unauthorized access or...

CVE-2026-8932

🚨 CVE-2026-8932 - El Error de Seguridad más Antiguo de libcurl Coincidencia de Configuración mTLS Incompleta en libcurl La vulnerabilidad de seguridad más antigua jamás corregida en libcurl—permaneciendo inadvertida durante más de 25 años. 📖 Resumen CVE-2026-8932 es una vulnerabilidad de segurida...

CVE-2025-23419

🔐 Probador de Explotación de Reutilización de Sesión TLS $ BY XIT Una herramienta basada en Python para probar posibles vulnerabilidades de reutilización de sesión TLS que pueden permitir la omisión de autenticación en servidores mal configurados. ⚠️ Advertencia Esta herramienta es solo para fines...

CVE-2025-23048-POC

CVE-2025-23048: Apache modssl TLS 1.3 Session Resumption Client Certificate Bypass Apache HTTP Server versions 2.4.35 – 2.4.62 are vulnerable to a client certificate authentication bypass when TLS 1.3 session resumption is used across virtual hosts with different SSLCACertificateFile directives. ...

SUSE CVE-2026-66077

RabbitMQ is a messaging and streaming broker. Prior to versions 3.13.15, 4.0.20, 4.1.11, and 4.2.6, The management UI uses EJS 1.0 in which does NOT HTML-escape. connection.ejs:135 renders and peercertissuer directly into the page. The same pattern appears in streamConnection.ejs:102,106,110. The...

SUSE CVE-2026-86247

Race condition within a thread vulnerability in Apache Tomcat Native allowed client certificate verification requirements to be down-graded for some configurations. This issue affects Apache Tomcat Native: from 2.0.0 through 2.0.15, from 1.3.0 through 1.3.8. Unsupported versions may also be...

CVE-2026-66077

A flaw was found in RabbitMQ. This vulnerability, a stored Cross-Site Scripting XSS, exists in the management UI. An attacker who can obtain a trusted TLS client certificate can embed malicious JavaScript in the certificate's Subject Distinguished Name DN. When the TLS listener is configured for...

DEBIAN-CVE-2026-86247

Race condition within a thread vulnerability in Apache Tomcat Native allowed client certificate verification requirements to be down-graded for some configurations. This issue affects Apache Tomcat Native: from 2.0.0 through 2.0.15, from 1.3.0 through 1.3.8. Unsupported versions may also be...

UBUNTU-CVE-2026-86247

Race condition within a thread vulnerability in Apache Tomcat Native allowed client certificate verification requirements to be down-graded for some configurations. This issue affects Apache Tomcat Native: from 2.0.0 through 2.0.15, from 1.3.0 through 1.3.8. Unsupported versions may also be...

CVE-2026-86247

Race condition within a thread vulnerability in Apache Tomcat Native allowed client certificate verification requirements to be down-graded for some configurations. This issue affects Apache Tomcat Native: from 2.0.0 through 2.0.15, from 1.3.0 through 1.3.8. Unsupported versions may also be...