27268 matches found
k8s-cve-2020-8554-mitigations
Средства защиты Prisma Cloud Compute для Kubernetes CVE-2020-8554 Этот репозиторий содержит правила Admission для Prisma Cloud Compute, которые снижают риск эксплуатации CVE-2020-8554, неисправленной уязвимости Kubernetes. Для правильного использования следуйте инструкциям, приведенным в разделе...
btlejuice
BtleJuice Framework 소개 BtleJuice는 Bluetooth Smart 기기Bluetooth Low Energy라고도 함에 대한 중간자Man-in-the-Middle 공격을 수행하기 위한 완전한 프레임워크입니다. 구성 요소는 다음과 같습니다: 인터셉션 코어 인터셉션 프록시 전용 웹 인터페이스 Python 및 Node.js 바인딩 BtleJuice를 설치하는 방법은? BtleJuice 설치는 아주 쉽습니다. 먼저 시스템이 최신 버전의 Node.js=4.3.2와 npm 을 사용하는지 확인하세요. 그런 다음 필요한...
EUVD-2026-76916
ASE/Kalkitech ASE2000 V2 Communication Test Set 2.35 through 2.37 on Windows contains an improper certificate validation vulnerability in the IEC 60870-5-104 TLS client Task Mode. This allows a network-positioned attacker to bypass certificate validation via a certificate with multiple simultaneo...
CVE-2026-90651
Socket Firewall socketdev/socket-registry-firewall in registry mode before 2.0.0 does not verify upstream TLS certificates by default. When the apisslverify and upstreamsslverify configuration keys are omitted from socket.yml, the generated configuration sets SOCKETAPISSLVERIFY='false' and...
CVE-2026-90651
Socket Firewall (socketdev/socket-registry-firewall) in registry mode before 2.0.0 does not verify upstream TLS certificates by default. When api_ssl_verify and upstream_ssl_verify are omitted from socket.yml, the generated OpenResty/Lua HTTP client accepts any certificate without chain validatio...
CVE-2026-90651
Socket Firewall socketdev/socket-registry-firewall in registry mode before 2.0.0 does not verify upstream TLS certificates by default. When the apisslverify and upstreamsslverify configuration keys are omitted from socket.yml, the generated configuration sets SOCKETAPISSLVERIFY='false' and...
CVE-2026-90647
ASE/Kalkitech ASE2000 V2 Communication Test Set 2.35 through 2.37 on Windows contains an improper certificate validation vulnerability in the IEC 60870-5-104 TLS client Task Mode. This allows a network-positioned attacker to bypass certificate validation via a certificate with multiple simultaneo...
CVE-2026-90647
ASE/Kalkitech ASE2000 V2 Communication Test Set 2.35 through 2.37 on Windows contains an improper certificate validation vulnerability in the IEC 60870-5-104 TLS client Task Mode. This allows a network-positioned attacker to bypass certificate validation via a certificate with multiple simultaneo...
CVE-2026-90647
ASE/Kalkitech ASE2000 V2 Communication Test Set versions 2.35 through 2.37 (Windows) contains an improper certificate validation vulnerability in its IEC 60870-5-104 TLS client (Task Mode). A network-positioned attacker can bypass certificate validation by presenting a certificate with multiple s...
CVE-2025-56513-NiceHash-Update-Chain-Compromise
CVE-2025-56513 NiceHash QuickMiner 업데이트 메커니즘의 심각한 공급망 취약점 작성자: Prince T Philip 역할: 독립 보안 연구원 심각도: CRITICAL — CVSS 9.8 영향: 원격 코드 실행 / 공급망 손상 상태: 공개 공개 및 CVE-2025-56513 할당됨 요약 CVE-2025-56513은 NiceHash QuickMiner v6.12.0에서 발견된 심각한 취약점으로, 원격 공격자가 소프트웨어 업데이트 프로세스를 손상시키고 피해자 시스템에서 임의 코드를 실행할 수 있게 합니다. ...
EUVD-2026-76741
Requests from the reverse proxy to the identity-provider service for token discovery, introspection, and credential exchange do not verify the identity provider's server certificate. An attacker positioned on the network path between the proxy and the identity provider could impersonate the...
PT-2026-90725
ASE/Kalkitech ASE2000 V2 Communication Test Set 2.35 through 2.37 on Windows contains an improper certificate validation vulnerability in the IEC 60870-5-104 TLS client Task Mode. This allows a network-positioned attacker to bypass certificate validation via a certificate with multiple simultaneo...
CVE-2026-90452
Requests from the reverse proxy to the identity-provider service for token discovery, introspection, and credential exchange do not verify the identity provider's server certificate. An attacker positioned on the network path between the proxy and the identity provider could impersonate the...
CVE-2026-90452
CVE-2026-90452 affects a reverse proxy component where requests to an identity-provider service (for token discovery, introspection, and credential exchange) do not verify the IdP's server certificate . An attacker positioned on the network path between the proxy and the identity provider could i...
CVE-2026-90452
Requests from the reverse proxy to the identity-provider service for token discovery, introspection, and credential exchange do not verify the identity provider's server certificate. An attacker positioned on the network path between the proxy and the identity provider could impersonate the...
CVE-2026-90452
Requests from the reverse proxy to the identity-provider service for token discovery, introspection, and credential exchange do not verify the identity provider's server certificate. An attacker positioned on the network path between the proxy and the identity provider could impersonate the...
Central Dogma: SSH host-key verification permanently disabled in Git mirror (SshGitMirror)
Vulnerability Central Dogma's Git mirror SSH client installs an Apache MINA SSHD ServerKeyVerifier lambda that returns true unconditionally for every outbound SSH connection used by git+ssh:// mirrors. The accompanying lines disable the knownhosts and /.ssh/config fallbacks, and a repo-wide searc...
EUVD-2026-38206
Central Dogma: SSH host-key verification permanently disabled in Git mirror SshGitMirror...
PT-2026-90521
Requests from the reverse proxy to the identity-provider service for token discovery, introspection, and credential exchange do not verify the identity provider's server certificate. An attacker positioned on the network path between the proxy and the identity provider could impersonate the...
io.netty/netty-handler: Netty: TLS hostname verification bypass via OpenSSL client path misconfiguration
A flaw was found in Netty io.netty:netty-handler. When using the SslProvider.OPENSSL client path with a plain X509TrustManager and without Unsafe-based trust-manager wrapping Java 25+, TLS hostname verification is disabled. This misconfiguration allows a man-in-the-middle attacker to present a...