PoC_TLS1_3_CVE-2020-13777

PoC TLS1.3 CVE-2020-13777 Der Zweck dieses PoC Dieses PoC und der zugehörige Artikel wurden erstellt, um sich für das Projekt „Challenge CVE-2020-13777" zu bewerben. CVE-2020-13777 ist eine GnuTLS-Schwachstelle, deren Patch weithin verteilt wird. Dieses PoC soll dazu beitragen, die...

Dead.Letter-CVE-2026-45185

CVE-2026-45185 — Scanner di vulnerabilità Exim "Dead.Letter" Uno script shell per rilevare se un sistema Linux è vulnerabile a CVE-2026-45185, un use-after-free nell'Exim mail transfer agent che può portare all'esecuzione di codice remota. Progettato per l'uso in pipeline CI/CD, strumenti di...

POC_CVE-2026-45185

CVE-2026-45185 Nuclei-Vorlagen-Validierungslabor Dieses Repository ist kein Allzweck-Exploit-PoC-Repository. Es ist ein lokales Validierungslabor zur Reproduktion und Überprüfung des Verhaltens einer CVE-2026-45185-Vorlage, die für einen Beitrag zu projectdiscovery/nuclei-templates vorgesehen ist...

cve-2020-13777

Script di test Zeek per CVE-2020-13777 Questo script esegue un semplice test per verificare se un server è potenzialmente vulnerabile a CVE-2020-13777. CVE-2020-13777 porta GnuTLS a creare ticket di sessione non criptati. Sembra rilevabile controllando se gnutls imposta il keyname a zero - per il...

ciphertest

cipherTest.sh di Patrick Bogen cipherTest.sh è un controllore di cipher SSL "migliore" nel senso che usa gnutls, che ha supporto per molte più configurazioni rispetto a openssl. Testa potenzialmente 3.200 configurazioni diverse ma esegue una pre-ottimizzazione in modo da minimizzare i controlli...

CVE-2014-3466_PoC

Prova de Conceito para CVE-2014-3466 estouro de buffer no GnuTLS: verificação do comprimento do ID de sessão Informações Consulte: https://bugzilla.redhat.com/showbug.cgi?id=1101932 Este não é um exploit armado. estejam avisados: este código python é feio, eu praticamente criei o ServerHello à mã...

CVE-2026-45185

CVE-2026-45185 — Dead.Letter: Exim-Heap-UAF zu Remote-Root CVSS 9.8 Kritisch | Exim 4.97–4.99.2 | Ubuntu / GnuTLS-Builds | Ohne Authentifizierung Vollständiger Artikel mit GDB-Trace, Schritt-für-Schritt-Analyse und globalen Expositionsdaten:...

cryptodev-linux

cryptodev-linux Questo è un driver di dispositivo /dev/crypto, equivalente a quelli presenti in OpenBSD o FreeBSD. L'idea principale è accedere a cipher esistenti nello spazio kernel dallo spazio utente, consentendo così il riutilizzo di un'implementazione hardware di un cipher. Per domande e...

Security Bulletin: Multiple Vulnerabilities in watsonx.data

Summary Multiple vulnerabilities were addressed in watsonx.data 2.4.0 patch 5 version, which was present in different version from watson.data 2.4.0 Vulnerability Details CVEID:CVE-2026-2739 DESCRIPTION: This affects versions of the package bn.js before 5.2.3. Calling maskn0 on any BN instance...

Nutanix AOS : Multiple Vulnerabilities (NXSA-AOS-7.5.1.10)

The version of AOS installed on the remote host is prior to 7.5.1.10. It is, therefore, affected by multiple vulnerabilities as referenced in the NXSA-AOS-7.5.1.10 advisory. - A flaw was found in gnutls. Servers configured with RSA-PSK RivestShamirAdleman Pre-Shared Key wrongfully matched usernam...

Nutanix AOS : Multiple Vulnerabilities (NXSA-AOS-7.3.1.14)

The version of AOS installed on the remote host is prior to 7.3.1.14. It is, therefore, affected by multiple vulnerabilities as referenced in the NXSA-AOS-7.3.1.14 advisory. - A flaw was found in gnutls. Servers configured with RSA-PSK RivestShamirAdleman Pre-Shared Key wrongfully matched usernam...

Security Bulletin: Vulnerability in gnutls affects IBM Netezza Appliance

Summary The gnutls package is used by IBM Netezza Appliance . IBM Netezza Appliance has addressed the applicable CVE CVE-2026-42012 Vulnerability Details CVEID:CVE-2026-42012 DESCRIPTION: A flaw was found in gnutls. A remote attacker could exploit this vulnerability by presenting a specially...

gnutls security update

3.3.29-9.0.3 - Backport fixes for CVE-2026-3833 CVE-2026-42012 CVE-2026-42013 CVE-2026-42014 CVE-2026-42015 Orabug: 39770407 - CVE-2026-42011 is not applicable to this baseline. 3.3.29-9.0.1 - Regenerate PKCS11 test certificates Orabug: 39674042 - Fix for CVE-2026-33845 CVE-2026-33846...

Security Bulletin: Multiple vulnerabilities found in CICS Transaction Gateway for Multiplatforms.

Summary Multiple vulnerabilities have been found in CICS Transaction Gateway for Multiplatforms due to the use of IBM WebSphere Application Server Liberty, IBM WebSphere Application Server and Jackson Databind. The versions of IBM WebSphere Application Server Liberty, IBM WebSphere Application...

OESA-2026-3121 gnutls security update

GnuTLS is a secure communications library implementing the SSL, TLS and DTLS protocols and technologies around them. It provides a simple C language application programming interface API to access the secure communications protocols as well as APIs to parse and write X.509, PKCS 12, and other...

RHSA-2026:43575 Red Hat Security Advisory: gnutls security update

Bulletin has no description...

RHSA-2026:41921 Red Hat Security Advisory: gnutls security update

Bulletin has no description...

Moderate: Red Hat Security Advisory: gnutls security update

An update for gnutls is now available for Red Hat Enterprise Linux 7 Extended Lifecycle Support. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...

gnutls: gnutls: Certificate validation bypass due to improper handling of URI and SRV SANs

A flaw was found in gnutls. A remote attacker could exploit this vulnerability by presenting a specially crafted certificate that contains Uniform Resource Identifier URI or Service SRV Subject Alternative Names SANs. This could cause the certificate validation process to incorrectly fall back to...

gnutls: gnutls: Use-after-free in gnutls_pkcs11_token_set_pin

A flaw was found in GnuTLS. The gnutlspkcs11tokensetpin function, used for changing the Security Officer PIN, can lead to a use-after-free vulnerability. This occurs when an attacker attempts to change the PIN with a NULL old PIN for a token that lacks a protected authentication path...