5362 matches found
CVE-2014-3466_PoC
Proof of Concept for CVE-2014-3466 GnuTLS buffer overflow: session id length check Information See: https://bugzilla.redhat.com/showbug.cgi?id=1101932 This is not a weaponized exploit. be warned: this python code is ugly, I pretty much handcrafted the ServerHello and spent only about five fifteen...
cryptodev-linux
cryptodev-linux This is a /dev/crypto device driver, equivalent to those in OpenBSD or FreeBSD. The main idea is to access existing ciphers in kernel space from userspace, thus enabling the re-use of a hardware implementation of a cipher. For questions and suggestions, please use the homepage at...
ciphertest
cipherTest.sh by Patrick Bogen cipherTest.sh is a "better" SSL cipher checker in that it uses gnutls, which has support for many more configurations than openssl. It tests potentially 3,200 different configurations but does some pre-optimization so that it minimizes "failed" checks. It relies on...
POC_CVE-2026-45185
CVE-2026-45185 Nuclei Template Validation Lab This repository is not a general-purpose exploit PoC repository. It is a local validation lab for reproducing and reviewing the behavior of a CVE-2026-45185 template intended for contribution to projectdiscovery/nuclei-templates. The nuclei code...
CVE-2026-107928
A flaw was found in curl. When curl is built with the GnuTLS library, a blocked transmission during communication with a malicious WebSocket server can trigger an out-of-bounds memory read. A malicious server can exploit this flaw to expose sensitive data from neighboring memory buffers or crash...
CVE-2026-45185
CVE-2026-45185 — Dead.Letter: Exim Heap UAF to Remote Root CVSS 9.8 Critical | Exim 4.97–4.99.2 | Ubuntu / GnuTLS builds | Unauthenticated Full write-up with GDB trace, step-by-step analysis, and global exposure data: https://0init.github.io/cve-2026-45185-dead-letter-exim-rce.html What is it...
CVE-2026-88648
Incomplete X.509 implementation in GnuTLS v3.8.13 allows attackers controlling a subordinate Certificate Authority to bypass cross-domain PKI restrictions and issue unauthorized certificates...
curl: curl: info leak uploading over WebSockets with GnuTLS
A flaw was found in curl. When curl is built with the GnuTLS library, a blocked transmission during communication with a malicious WebSocket server can trigger an out-of-bounds memory read. A malicious server can exploit this flaw to expose sensitive data from neighboring memory buffers or crash...
CVE-2026-107928
When curl is built with GnuTLS, a malicious WebSocket server can make curl send memory past its send buffer. This is due to an out of bounds read following when "gnutlsrecordsend" returns a number of bytes sent greater than the number of bytes it was given to send. GnuTLS does that after a blocke...
CURL-CVE-2026-107928 info leak uploading over WebSockets with GnuTLS
When curl is built with GnuTLS, a malicious WebSocket server can make curl send memory past its send buffer. This is due to an out of bounds read following when gnutlsrecordsend returns a number of bytes sent greater than the number of bytes it was given to send. GnuTLS does that after a blocked...
info leak uploading over WebSockets with GnuTLS
When curl is built with GnuTLS, a malicious WebSocket server can make curl send memory past its send buffer. This is due to an out of bounds read following when gnutlsrecordsend returns a number of bytes sent greater than the number of bytes it was given to send. GnuTLS does that after a blocked...
CVE-2026-107928
When curl is built with GnuTLS, a malicious WebSocket server can make curl send memory past its send buffer. This is due to an out of bounds read following when gnutlsrecordsend returns a number of bytes sent greater than the number of bytes it was given to send. GnuTLS does that after a blocked...
PT-2026-113731
Name of the Vulnerable Software and Affected Versions curl affected versions not specified Description When built with GnuTLS, a malicious WebSocket server can cause curl to send memory beyond its send buffer. This occurs because of an out-of-bounds read that happens when the gnutls record send...
Multiple TLS Libraries can Bypass Delegation Enforcement
Overview This note covers thirteen library-specific records VU948176.6, .8–.19 of how widely used TLS libraries apply X.509 Name Constraints. The records describe cases where a constrained name may be accepted by one library and rejected by another. Some are fixed, some remain under review, and...
CVE-2026-109832
A flaw was found in gnome-remote-desktop as shipped in Red Hat Enterprise Linux. In the VNC TLS I/O handlers, retryable GnuTLS results GNUTLSEAGAIN and GNUTLSEINTERRUPTED are handled with an unbounded busy loop instead of yielding to the event loop. A remote attacker who can reach an enabled VNC...
cve-2020-13777
Zeek test script for CVE-2020-13777 This script performs a simple test to check if a server is potentially vulnerable to CVE-2020-13777. CVE-2020-13777 causes GnuTLS to create unencrypted session tickets. This seems to be detectable by checking gnutls sets the keyname to zero - for which it uses...
UBUNTU-CVE-2026-95210
Improper certificate validation in gnutls v3.8.13 causes the application to accept certificates containing invalid extensions...
UBUNTU-CVE-2026-67693
An issue in gnutls v.3.8.13 allows an attacker to obtain sensitive information via failing to reject end-entity X.509 certificates that contain a contradictory combination of Key Usage KU and Extended Key Usage EKU...