CVE-2026-8932

🚨 CVE-2026-8932 - The Oldest libcurl Security Bug Incomplete mTLS Configuration Matching in libcurl The oldest security vulnerability ever fixed in libcurl—remaining unnoticed for over 25 years. 📖 Overview CVE-2026-8932 is a security vulnerability in libcurl where the library may incorrectly reus...

CVE-2026-71297

A flaw was found in the maestro gRPC broker. This vulnerability allows a remote attacker, with a valid client certificate, to bypass authentication. This bypass enables the attacker to subscribe to other consumers' event streams, leading to unauthorized information disclosure, or to publish forge...

phantom-grid

Phantom Grid - 엔터프라이즈 제로 트러스트 네트워크 액세스 ZTNA Phantom Grid는 차세대 제로 트러스트 네트워크 액세스ZTNA 및 능동 방어 시스템입니다. 커널 수준eBPF과 애플리케이션 수준mTLS 모두에서 동작하여 Linux 서버를 강력하고 기만적인 공격 표면으로 변환합니다. 현대 기업을 위해 설계되었으며, 권한이 부여된 인원에게는 높은 접근성을 유지하면서 네트워크 스캐너로부터 인프라의 가시성을 크게 줄이도록 설계되었습니다. 핵심 기능 eBPF 네트워크 클로킹 및 SPA 레이어 4 제로 트러스트 중요한...

CVE-2026-8932-PoC

CVE-2026-8932 PoC Proof-of-concept reproduction of CVE-2026-8932 , an incomplete mTLS configuration matching issue in libcurl connection reuse. Overview CVE-2026-8932 affects libcurl's connection reuse logic when mutual TLS mTLS configuration changes between requests. Under vulnerable conditions,...

secret_handshake

Secret Handshake - mTLS를 통한 x509 인증서를 사용하는 악성코드 C2 채널 동기 먼저, 왜 이것을 오픈소스로 공개하는가? MITRE ATT&CK는 탈취되거나 자체 서명된 인증서에 대해서만 다루며, NDR네트워크 탐지 및 대응은 내가 아는 한 x509 인증서의 내용에 대해 발급 CA가 누구인지 외에는 거의 주의를 기울이지 않는다. 일반적으로 x509 인증서는 신뢰되며 우리 방화벽을 아무런 제재 없이 통과하도록 허용된다. 그러나 본질적으로 인증서는 다른 파일과 마찬가지로 악성 페이로드를 쉽게 포함할 수 있는...

UAP-protocol

██╗ ██╗ █████╗ ██████╗ ██║ ██║██╔══██╗██╔══██╗ ██║ ██║███████║██████╔╝ ██║ ██║██╔══██║██╔═══╝ ╚██████╔╝██║ ██║██║ ╚═════╝ ╚═╝ ╚═╝╚═╝ Universal Agent Protocol 도구 액세스, 에이전트 조정, 구조화된 RPC를 위한 통합 보안 우선 와이어 프로토콜. MCP가 구조적으로 열어 둔 CVE-2025-49596과 도구 중독tool-poisoning 및 샌드박스 탈출 계열 취약점을 해결하기 위해 설계되었습니다. 30초...

C2-and-Post-Exploitation-Framework

Capstone Docker Lab 概要と目的 被害者はホストされた Web ページを閲覧します。エクスプロイトは utils.js に埋め込まれたシェルコードを介して開始されます（CVE-2021-21220 により被害者のブラウザ内でクライアント側で実行されます）。シェルコードは被害者のマシン上で実行され、HTTPS 配信サーバーを呼び出し、MicrosoftEdgeUpdate.exe をダウンロードして実行します。実行されると、インプラントは中間ホップ（C2 リダイレクタ）を介して C2 サーバーに TLS で接続し、署名付き証明書を受け取った後、完全な相互 TLS...

safe-check-CVE-2025-23419

안전 점검 CVE-2025-23419 - NGINX mTLS 세션 재개 CVE-2025-23419 에 대한 안전한 검증 스크립트가 포함된 저장소로, NGINX , mTLS 및 TLS 세션 재개 와 관련된 취약점입니다. 이 스크립트는 활성 익스플로잇을 실행하거나 클라이언트 인증서 인증을 우회하려 시도하지 않고, 취약점에 대한 잠재적 노출을 식별하기 위해 휴리스틱 점검을 수행합니다. 목적은 승인된 환경에서 기술적 분류, 방어적 검증 및 노출 분석을 지원하는 것입니다. 포함된 CVE CVE| 기술| 유형| 영향받는 구성요소...

Security Bulletin: IBM Operational Decision Manager for Sept 2026 - Multiple CVEs addressed

Summary In addition to many updates of operating system level packages, the following security vulnerabilities are addressed with IBM Operational Decision Manager Vulnerability Details CVEID:CVE-2026-87822 DESCRIPTION: t-digest versions 3.1 through 3.3 fail to validate centroid means during...

CentOS Linux 8.5 [TuxCare] Security Update: curl / curl-minimal / libcurl / libcurl-devel / libcurl-minimal (CENTOS8.5:CLSA-2026:1786092535)

The CentOS Linux 8.5 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS8.5:CLSA-2026:1786092535 advisory. - libcurl would reuse a previously created connection even when some mTLS config related option had been changed that should have prohibited...

Rocky Linux 9.6 [TuxCare] Security Update: curl / curl-minimal / libcurl / libcurl-devel / libcurl-minimal Multiple Vulnerabilities (ALMALINUX9.6:CLSA-2026:1785925031)

The Rocky Linux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1785925031 advisory. - When reusing a libcurl handle for sequential transfers driven by environment-variable proxy configuration, libcurl fails to clea...

AlmaLinux 9.6 [TuxCare] Security Update: curl / curl-minimal / libcurl / libcurl-devel / libcurl-minimal Multiple Vulnerabilities (ALMALINUX9.6:CLSA-2026:1785925031)

The AlmaLinux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1785925031 advisory. - When reusing a libcurl handle for sequential transfers driven by environment-variable proxy configuration, libcurl fails to clear...

AlmaLinux 9.2 [TuxCare] Security Update: curl / curl-minimal / libcurl / libcurl-devel / libcurl-minimal Multiple Vulnerabilities (ALMALINUX9.2:CLSA-2026:1785925784)

The AlmaLinux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1785925784 advisory. - When reusing a libcurl handle for sequential transfers driven by environment-variable proxy configuration, libcurl fails to clear...

CVE-2026-29145-Everything

CVE-2026-29145 모든 것 Apache Tomcat CLIENTCERT + OCSP soft-fail 우회 완전 재현 환경, 익스플로잇 트래픽 패킷, 그리고 Suricata 탐지 규칙 작성 자료입니다. 승인된 보안 연구 및 탐지 규칙 개발용으로만 사용하세요. 승인되지 않은 시스템에는 사용하지 마십시오. 취약점 요약 항목| 설명 ---|--- CVE| CVE-2026-29145 구성 요소| Apache Tomcat / Tomcat Native 유형| 인증 우회 mTLS / CLIENTCERT CVSS| 9.1 NVD /...

CVE-2024-43468_mTLS_go

CVE-2024-43468 SCCM SQL 인젝션 익스플로잇 macOS 키체인의 mTLS 클라이언트 인증서 버전 macOS 키체인을 사용하여 mTLS 인증을 수행하는 키체인에서 키를 내보낼 필요 없이 CVE-2024-43468 익스플로잇의 Go 구현입니다. 추가로: 문제가 있는 proxychains를 사용하지 않도록 프록시 지원을 추가했습니다. 인증서 Common Name을 가져오는 getcertname.py를 추가했습니다 네, Keychain Access GUI에서 수동으로 할 수도 있습니다. 어떤 일이 일어나고 있는지 확인...

CentOS Linux 6 [TuxCare] Security Update: curl / libcurl / libcurl-devel Multiple Vulnerabilities (CENTOS6:CLSA-2026:1787062885)

The CentOS Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS6:CLSA-2026:1787062885 advisory. - When reusing a libcurl handle for sequential transfers driven by environment-variable proxy configuration, libcurl fails to clear the...

CentOS Linux 8 [TuxCare] Security Update: curl / curl-minimal / libcurl / libcurl-devel / libcurl-minimal (CENTOS-STREAM8:CLSA-2026:1786034295)

The CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS- STREAM8:CLSA-2026:1786034295 advisory. - libcurl would reuse a previously created connection even when some mTLS config related option had been changed that should have...

CentOS Linux 8.4 [TuxCare] Security Update: curl / curl-minimal / libcurl / libcurl-devel / libcurl-minimal (CENTOS8.4:CLSA-2026:1786034027)

The CentOS Linux 8.4 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS8.4:CLSA-2026:1786034027 advisory. - libcurl would reuse a previously created connection even when some mTLS config related option had been changed that should have prohibited...

CentOS Linux 7 [TuxCare] Security Update: curl / libcurl / libcurl-devel Multiple Vulnerabilities (CENTOS7:CLSA-2026:1786028705)

The CentOS Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS7:CLSA-2026:1786028705 advisory. - When reusing a libcurl handle for sequential transfers driven by environment-variable proxy configuration, libcurl fails to clear the...

GO-2026-6508 OpenTelemetry-Go: Log gRPC exporter ignores env TLS certs, bypassing mTLS/pinning in go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploggrpc

OpenTelemetry-Go: Log gRPC exporter ignores env TLS certs, bypassing mTLS/pinning in go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploggrpc...