secret_handshake

Secret Handshake - канал C2 для вредоносного ПО с использованием x509-сертификатов через mTLS Мотивация Прежде всего, зачем я публикую это в открытом доступе? MITRE ATT&CK упоминает только украденные или самоподписанные сертификаты, а NDR-системы насколько мне известно уделяют очень мало внимания...

CVE-2026-19283

IBM Instana Agent Operator (part of IBM Observability with Instana, builds 1.0.303 through 1.0.323) is vulnerable to information disclosure caused by missing destination namespace validation when copying etcd mTLS client credentials from the openshift-etcd system namespace into an attacker-contro...

EUVD-2026-71272

IBM Observability with Instana Agent Build 1.0.303 through 1.0.323 IBM Instana Agent Operator could allow an authenticated remote attacker to obtain sensitive information, caused by missing destination namespace validation when copying etcd mTLS client credentials from the openshift-etcd system...

CVE-2026-85597

Traefik before v2.11.55 and v3.0.0 through v3.7.10 contain a TLS option conflict resolution vulnerability that allows unauthenticated attackers to bypass client-certificate authentication by creating conflicting TLS options on multi-host routers. Attackers can reach protected backends by exploiti...

CVE-2026-85597 Traefik before v2.11.55 and v3.0.0 through v3.7.10 mTLS Bypass via TLS Option Conflict

Traefik before v2.11.55 and v3.0.0 through v3.7.10 contain a TLS option conflict resolution vulnerability that allows unauthenticated attackers to bypass client-certificate authentication by creating conflicting TLS options on multi-host routers. Attackers can reach protected backends by exploiti...

CVE-2026-85597 Traefik before v2.11.55 and v3.0.0 through v3.7.10 mTLS Bypass via TLS Option Conflict

Traefik before v2.11.55 and v3.0.0 through v3.7.10 contain a TLS option conflict resolution vulnerability that allows unauthenticated attackers to bypass client-certificate authentication by creating conflicting TLS options on multi-host routers. Attackers can reach protected backends by exploiti...

EUVD-2026-71020

Traefik before v2.11.55 contains a TLS option conflict resolution vulnerability that allows unauthenticated attackers to bypass client-certificate authentication by creating conflicting TLS options on multi-host routers. Attackers can reach protected backends by exploiting shared TLS resolution...

CVE-2026-85597

Traefik before v2.11.55 is affected by a TLS option conflict resolution vulnerability. When a single router rule contains conflicting TLS options across multiple hostnames, the strict mTLS (client-certificate) requirement falls back to default options for all hosts, allowing unauthenticated attac...

CVE-2026-85597 Traefik before v2.11.55 mTLS Bypass via TLS Option Conflict

Traefik before v2.11.55 contains a TLS option conflict resolution vulnerability that allows unauthenticated attackers to bypass client-certificate authentication by creating conflicting TLS options on multi-host routers. Attackers can reach protected backends by exploiting shared TLS resolution...

UAP-protocol

root@kitploit: ██╗ ██╗ █████╗ ██████╗ ██║ ██║██╔══██╗██╔══██╗ ██║ ██║███████║██████╔╝ ██║ ██║██╔══██║██╔═══╝ ╚██████╔╝██║ ██║██║ ╚═════╝ ╚═╝ ╚═╝╚═╝ Universal Agent Protocol Un protocole de transmission unifié, orienté sécurité, pour l'accès aux outils, la coordination des agents et les RPC...

CVE-2026-15937

Improper certificate validation in Checkmk 2.5.0p10 allows a relay and a push agent that share the same UUID to reuse each other's mTLS certificate to authenticate against agent receiver endpoints in either direction, because the endpoints do not verify that the certificate was issued by their ow...

EUVD-2026-70973

Improper certificate validation in Checkmk 2.5.0p10 allows a relay and a push agent that share the same UUID to reuse each other's mTLS certificate to authenticate against agent receiver endpoints in either direction, because the endpoints do not verify that the certificate was issued by their ow...

CVE-2026-15937

Checkmk versions prior to 2.5.0p10 contain an improper certificate validation flaw in agent receiver endpoints . The endpoints fail to verify that a presented mTLS certificate was issued by their own root certificate. As a result, a relay and a push agent that share the same UUID can reuse each o...

CVE-2026-15937 Agent receiver certificate confusion allows authentication with a certificate issued for another endpoint

Improper certificate validation in Checkmk 2.5.0p10 allows a relay and a push agent that share the same UUID to reuse each other's mTLS certificate to authenticate against agent receiver endpoints in either direction, because the endpoints do not verify that the certificate was issued by their ow...

safe-check-CVE-2025-23419

Vérification sécurisée CVE-2025-23419 - Reprise de session mTLS NGINX Dépôt avec script de validation sécurisée pour la CVE-2025-23419 , vulnérabilité liée à NGINX , mTLS et reprise de session TLS. Le script effectue une vérification heuristique pour identifier une éventuelle exposition à la...

C2-and-Post-Exploitation-Framework

Лаборатория Docker Capstone Обзор и назначение Жертва переходит на размещенную веб-страницу. Эксплойт запускается через шелл-код, встроенный в utils.js выполняется на стороне клиента в браузере жертвы через CVE-2021-21220. Шелл-код выполняется на машине жертвы, вызывает HTTPS сервер доставки,...

CVE-2026-29145-Everything

CVE-2026-29145 Everything Apache Tomcat CLIENTCERT + contournement OCSP soft-fail – environnement de reproduction complet, paquets d'exploitation et règles de détection Suricata. Usage exclusif pour la recherche de sécurité autorisée et le développement de règles de détection. Ne pas utiliser sur...

CVE-2024-43468_mTLS_go

CVE-2024-43468 Exploit d'injection SQL SCCM version mTLS avec certificats clients depuis le trousseau MacOS Implémentation en Go de l'exploit CVE-2024-43468 qui utilise le trousseau macOS pour l'authentification mTLS sans avoir besoin d'exporter les clés du trousseau. De plus : Ajout d'un support...

CVE-2026-8932

🚨 CVE-2026-8932 - Самая старая проблема безопасности libcurl Неполное сопоставление конфигурации mTLS в libcurl Самая старая уязвимость, когда-либо исправленная в libcurl — остававшаяся незамеченной более 25 лет. 📖 Обзор CVE-2026-8932 — это уязвимость в libcurl , при которой библиотека может...

Linux Distros Unpatched Vulnerability : CVE-2026-15576

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Improper authentication in the agent receiver of Checkmk 2.5.0p10 allows an unauthenticated remote attacker to bypass mutual TLS client certificate verification...