cve-2026-45185-detection-script

CVE-2026-45185 检测脚本 c SECPlayground 平台 —https://www.secplayground.com 这些检测脚本归 SECPlayground 平台所有。 两个安全的检测脚本。两者都不会触发 closenotify-mid-BDAT 触发器，因此不会导致守护进程崩溃，也不会留下 panic 日志条目。 两个脚本的判定结果均为“可能易受攻击”——在不进行实际利用的情况下，远程区分 GnuTLS 与 OpenSSL 构建并不可靠。 Nuclei root@kitploit: from the lab dir, against the running...

CVE-2026-45185

CVE-2026-45185 — Dead.Letter：Exim 堆释放后使用（UAF）致远程 Root CVSS 9.8 严重 | Exim 4.97–4.99.2 | Ubuntu / GnuTLS 构建 | 未认证 包含 GDB 跟踪、逐步分析和全球暴露数据的完整技术文章： https://0init.github.io/cve-2026-45185-dead-letter-exim-rce.html 这是什么 当 Exim 处于 BDAT 主体传输中途时，发送 TLS closenotify 警报会导致 tlsclose 调用 gnutlsdeinit，释放 7,304 字节的...

Exploit for CVE-2026-45185

CVE-2026-45185 Nuclei Template Validation Lab This repository...

EUVD-2019-3591

Malware in sbrugna...

EUVD-2024-1125

Malicious code in bioql PyPI...

The vulnerability of the close_notify() function in the Apache MINA network Java framework allows a attacker to gain unauthorized access to protected information.

The vulnerability of the closenotify function in the Apache MINA network-oriented Java framework is related to the transmission of data in an open manner. Exploiting this vulnerability can allow a remote attacker to gain unauthorized access to protected information...

CVE-2024-32650

Rustls is a modern TLS library written in Rust. rustls::ConnectionCommon::completeio could fall into an infinite loop based on network input. When using a blocking rustls server, if a client send a closenotify message immediately after clienthello, the server's completeio will get in an infinite...

CVE-2024-32650

Rustls is a modern TLS library written in Rust. rustls::ConnectionCommon::completeio could fall into an infinite loop based on network input. When using a blocking rustls server, if a client send a closenotify message immediately after clienthello, the server's completeio will get in an infinite...

UBUNTU-CVE-2024-32650

Rustls is a modern TLS library written in Rust. rustls::ConnectionCommon::completeio could fall into an infinite loop based on network input. When using a blocking rustls server, if a client send a closenotify message immediately after clienthello, the server's completeio will get in an infinite...

CVE-2024-32650

Rustls is a modern TLS library written in Rust. rustls::ConnectionCommon::completeio could fall into an infinite loop based on network input. When using a blocking rustls server, if a client send a closenotify message immediately after clienthello, the server's completeio will get in an infinite...

CVE-2024-32650

CVE-2024-32650 affects rustls:complete_io in a blocking rustls server can enter an infinite loop if a client sends close_notify right after client_hello, leading to a denial of service. Fixes exist in rustls releases 0.23.5, 0.22.4, and 0.21.11. Remediation is to upgrade to one of these versions ...

RUSTSEC-2024-0336 `rustls::ConnectionCommon::complete_io` could fall into an infinite loop based on network input

If a closenotify alert is received during a handshake, completeio does not terminate. Callers which do not call completeio are not affected. rustls-tokio and rustls-ffi do not call completeio and are not affected. rustls::Stream and rustls::StreamOwned types use completeio and are affected...

Denial Of Service (DoS)

Folly is vulnerable to denial of service DoS attack. It is possible because it causes an out-of-bounds read in AsyncSSLSocket due to mishandling of closenotify alerts...

CVE-2019-11934

Improper handling of closenotify alerts can result in an out-of-bounds read in AsyncSSLSocket. This issue affects folly prior to v2019.11.04.00...

CVE-2019-11934

Improper handling of closenotify alerts can result in an out-of-bounds read in AsyncSSLSocket. This issue affects folly prior to v2019.11.04.00...

CVE-2019-11934

The CVE concerns the Folly library’s AsyncSSLSocket. The issue is an improper handling of close_notify alerts that can cause an out-of-bounds read, affecting Folly prior to v2019.11.04.00. Reported as a Denial of Service risk due to the out-of-bounds read, with Red Hat/Veracode descriptions align...

Information Disclosure

apache MINA is vulnerable to information disclosure. closenotify SSL/TLS messages are not handled properly and does not lead to a connection closure. This causes the server to keep the socket open, allowing the client to potentially receive clear-text messages that should have been encrypted...