4812 matches found
CVE-2026-45185
CVE-2026-45185 — Dead.Letter: UAF sull'heap di Exim fino a root remota CVSS 9.8 Critico | Exim 4.97–4.99.2 | Build Ubuntu / GnuTLS | Non autenticato Analisi completa con trace GDB, analisi passo-passo e dati sull'esposizione globale: https://0init.github.io/cve-2026-45185-dead-letter-exim-rce.htm...
POC_CVE-2026-45185
Laboratorio di validazione del template Nuclei per CVE-2026-45185 Questo repository non è un repository PoC proof-of-concept di exploit generici. È un laboratorio di validazione locale per riprodurre e verificare il comportamento di un template CVE-2026-45185 pensato per essere contribuito a...
CVE-2014-3466_PoC
Prova di concetto per CVE-2014-3466 Buffer overflow di GnuTLS: controllo lunghezza ID sessione Informazioni Vedi: https://bugzilla.redhat.com/showbug.cgi?id=1101932 Questo non è un exploit weaponizzato. attenzione: questo codice python è brutto, ho praticamente creato a mano il ServerHello e ho...
ciphertest
cipherTest.sh di Patrick Bogen cipherTest.sh è un controllore di cipher SSL "migliore" nel senso che usa gnutls, che ha supporto per molte più configurazioni rispetto a openssl. Testa potenzialmente 3.200 configurazioni diverse ma esegue una pre-ottimizzazione in modo da minimizzare i controlli...
PoC_TLS1_3_CVE-2020-13777
PoC TLS1.3 CVE-2020-13777 Lo scopo di questo PoC Questo PoC e l'articolo correlato sono stati creati per candidarsi al progetto "Challenge CVE-2020-13777". CVE-2020-13777 è una vulnerabilità di GnuTLS la cui patch è ampiamente distribuita. Questo PoC mira a contribuire al miglioramento...
cryptodev-linux
cryptodev-linux Questo è un driver di dispositivo /dev/crypto, equivalente a quelli presenti in OpenBSD o FreeBSD. L'idea principale è accedere a cipher esistenti nello spazio kernel dallo spazio utente, consentendo così il riutilizzo di un'implementazione hardware di un cipher. Per domande e...
cve-2020-13777
Zeek test script para CVE-2020-13777 Este script realiza um teste simples para verificar se um servidor é potencialmente vulnerável ao CVE-2020-13777. O CVE-2020-13777 faz com que o GnuTLS crie tickets de sessão não criptografados. Isto parece ser detectável verificando se o gnutls define o keyna...
Dead.Letter-CVE-2026-45185
CVE-2026-45185 — Scanner di vulnerabilità Exim "Dead.Letter" Uno script shell per rilevare se un sistema Linux è vulnerabile a CVE-2026-45185, un use-after-free nell'Exim mail transfer agent che può portare all'esecuzione di codice remota. Progettato per l'uso in pipeline CI/CD, strumenti di...
Important: Red Hat Security Advisory: OpenShift Container Platform 4.19.44 bug fix and security update
Red Hat OpenShift Container Platform release 4.19.44 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.19. Red Hat Product Security has rated this update as having a...
Important: Red Hat Security Advisory: OpenShift Container Platform 4.18.54 bug fix and security update
Red Hat OpenShift Container Platform release 4.18.54 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.18. Red Hat Product Security has rated this update as having a...
Security Bulletin:Vulnerabilities exists in IBM Netezza Appliance
Summary Vulnerabilities identified in IBM Netezza Software have been addressed in version 1.0.2.0. Vulnerability Details CVEID:CVE-2024-28835 DESCRIPTION: A flaw has been discovered in GnuTLS where an application crash can be induced when attempting to verify a specially crafted .pem bundle using...
Astra Linux – Vulnerability in gnutls28
A flaw was discovered in GnuTLS, which relies on libtasn1 for ASN.1 data processing. Due to an inefficient algorithm in libtasn1, decoding certain DER-encoded certificate data can take excessive time, leading to increased resource consumption. This flaw allows a remote attacker to send a speciall...
Security Bulletin: Multiple Vulnerabilities in watsonx.data
Summary Multiple vulnerabilities were addressed in watsonx.data 2.4.0 patch 5 version, which was present in different version from watson.data 2.4.0 Vulnerability Details CVEID:CVE-2026-2739 DESCRIPTION: This affects versions of the package bn.js before 5.2.3. Calling maskn0 on any BN instance...
Nutanix AOS : Multiple Vulnerabilities (NXSA-AOS-7.5.1.10)
The version of AOS installed on the remote host is prior to 7.5.1.10. It is, therefore, affected by multiple vulnerabilities as referenced in the NXSA-AOS-7.5.1.10 advisory. - A flaw was found in gnutls. Servers configured with RSA-PSK RivestShamirAdleman Pre-Shared Key wrongfully matched usernam...
Nutanix AOS : Multiple Vulnerabilities (NXSA-AOS-7.3.1.14)
The version of AOS installed on the remote host is prior to 7.3.1.14. It is, therefore, affected by multiple vulnerabilities as referenced in the NXSA-AOS-7.3.1.14 advisory. - A flaw was found in gnutls. Servers configured with RSA-PSK RivestShamirAdleman Pre-Shared Key wrongfully matched usernam...
Security Bulletin: Vulnerability in gnutls affects IBM Netezza Appliance
Summary The gnutls package is used by IBM Netezza Appliance . IBM Netezza Appliance has addressed the applicable CVE CVE-2026-42012 Vulnerability Details CVEID:CVE-2026-42012 DESCRIPTION: A flaw was found in gnutls. A remote attacker could exploit this vulnerability by presenting a specially...
gnutls security update
3.3.29-9.0.3 - Backport fixes for CVE-2026-3833 CVE-2026-42012 CVE-2026-42013 CVE-2026-42014 CVE-2026-42015 Orabug: 39770407 - CVE-2026-42011 is not applicable to this baseline. 3.3.29-9.0.1 - Regenerate PKCS11 test certificates Orabug: 39674042 - Fix for CVE-2026-33845 CVE-2026-33846...
Security Bulletin: Multiple vulnerabilities found in CICS Transaction Gateway for Multiplatforms.
Summary Multiple vulnerabilities have been found in CICS Transaction Gateway for Multiplatforms due to the use of IBM WebSphere Application Server Liberty, IBM WebSphere Application Server and Jackson Databind. The versions of IBM WebSphere Application Server Liberty, IBM WebSphere Application...
OESA-2026-3121 gnutls security update
GnuTLS is a secure communications library implementing the SSL, TLS and DTLS protocols and technologies around them. It provides a simple C language application programming interface API to access the secure communications protocols as well as APIs to parse and write X.509, PKCS 12, and other...