CVE-2024-43468_mTLS_go

CVE-2024-43468 SCCM SQL 注入利用（基于 macOS 钥匙串的 mTLS 客户端证书版本） 使用 macOS 钥匙串进行 mTLS 认证（无需从钥匙串导出密钥）的 CVE-2024-43468 利用的 Go 实现。 此外： 增加了代理支持，避免使用有问题的 proxychains。 增加了 getcertname.py 用于获取证书通用名称（是的，你也可以手动从钥匙串访问 GUI 中获取）。 增加了大量调试信息，以便了解实际运行情况。 基于： 原始 Python 利用 mTLS Go 客户端示例 描述 利用 Microsoft Configuration...

CVE-2026-8932

🚨 CVE-2026-8932 - libcurl 最古老的安全漏洞 libcurl 中不完整的 mTLS 配置匹配 libcurl 中修补的最古老安全漏洞——隐藏超过25年未被发现。 📖 概述 CVE-2026-8932 是 libcurl 中的一个安全漏洞，该库可能在双向 TLS（mTLS） 客户端认证设置更改后错误地重用现有 TLS 连接。 由于某些私钥相关选项 未被纳入 libcurl 的连接匹配逻辑，即使客户端证书配置已变更且应强制进行新的 TLS 握手，现有已验证连接仍可能被重用。 注意： 独立 curl 命令行工具不受影响 。仅嵌入 libcurl 的应用程序存在漏洞。 ⚠️...

Linux Distros Unpatched Vulnerability : CVE-2026-87106

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Consul and Consul Enterprise are vulnerable to a denial of service in the native RPC listener that may allow an authenticated client to exhaust server memory...

secret_handshake

Secret Handshake - Un canal C2 de malware que utiliza certificados x509 sobre mTLS Motivación En primer lugar, ¿por qué liberaría esto como código abierto? MITRE ATT&CK solo habla de certificados robados o autofirmados, y los NDR por lo que sé prestan muy poca atención al contenido de los...

UAP-protocol

root@kitploit: ██╗ ██╗ █████╗ ██████╗ ██║ ██║██╔══██╗██╔══██╗ ██║ ██║███████║██████╔╝ ██║ ██║██╔══██║██╔═══╝ ╚██████╔╝██║ ██║██║ ╚═════╝ ╚═╝ ╚═╝╚═╝ Universal Agent Protocol Un protocolo de comunicación unificado y centrado en la seguridad para el acceso a herramientas, la coordinación de agentes ...

CVE-2026-87106

Consul and Consul Enterprise are vulnerable to a denial of service in the native RPC listener that may allow an authenticated client to exhaust server memory before ACL authorization is evaluated. A client that can complete the internal RPC mTLS handshake may exploit this issue without holding a...

CVE-2026-87106 Consul vulnerable to a denial of service in the native RPC listener

Consul and Consul Enterprise are vulnerable to a denial of service in the native RPC listener that may allow an authenticated client to exhaust server memory before ACL authorization is evaluated. A client that can complete the internal RPC mTLS handshake may exploit this issue without holding a...

EUVD-2026-75680

Consul and Consul Enterprise are vulnerable to a denial of service in the native RPC listener that may allow an authenticated client to exhaust server memory before ACL authorization is evaluated. A client that can complete the internal RPC mTLS handshake may exploit this issue without holding a...

CVE-2026-87106

Consul and Consul Enterprise are vulnerable to a denial of service in the native RPC listener . An authenticated client that can complete the internal RPC mTLS handshake may exhaust server memory before ACL authorization is evaluated , meaning a valid ACL token is not strictly required to trigger...

CVE-2026-87106 Consul vulnerable to a denial of service in the native RPC listener

Consul and Consul Enterprise are vulnerable to a denial of service in the native RPC listener that may allow an authenticated client to exhaust server memory before ACL authorization is evaluated. A client that can complete the internal RPC mTLS handshake may exploit this issue without holding a...

CVE-2026-85597

A flaw was found in Traefik. This vulnerability allows unauthenticated attackers to bypass client-certificate authentication. By creating conflicting Transport Layer Security TLS options on multi-host routers, attackers can exploit shared TLS resolution across multiple hostnames in a single route...

CVE-2026-88883

Renovate is an automated dependency update tool. In versions before 44.14.4 and Mend Renovate CE/EE images before 15.4.0 and the mend-renovate-enterprise-edition Helm chart before 10.4.0, log sanitisation for TLS private keys used for Mutual TLS was incomplete. While the value of...

CVE-2026-88883

A flaw was found in Renovate, an automated dependency update tool. Due to incomplete log sanitization, Transport Layer Security TLS private keys used for Mutual TLS could be written to logs in cleartext. This occurs when these keys are configured in a specific way without utilizing the documented...

safe-check-CVE-2025-23419

Safe Check CVE-2025-23419 - NGINX mTLS Session Resumption CVE-2025-23419 の安全な検証スクリプトを含むリポジトリです。この脆弱性は NGINX 、mTLS 、TLS session resumption に関連しています。 スクリプトは、能動的な悪用を行わず、クライアント証明書による認証を回避しようとせず、ヒューリスティックなチェックを実行して脆弱性への露出の可能性を特定します。 その目的は、許可された環境における技術的なトリアージ、防御的検証、露出分析を支援することです。 対象の CVE...

C2-and-Post-Exploitation-Framework

Capstone Docker Lab Overview and Purpose The victim browses to a hosted webpage. The exploit initiates via shellcode embedded in utils.js runs client-side in the victim's browser via CVE-2021-21220. The shellcode runs on the victim's machine, calls the HTTPS delivery server, downloads...

CVE-2026-29145-Everything

CVE-2026-29145 Everything Apache Tomcat CLIENTCERT + OCSP soft-fail bypass 完整复现环境、利用流量包，以及 Suricata 检测规则编写素材。 仅供授权安全研究与检测规则开发。请勿用于未授权系统。 漏洞摘要 项目| 说明 ---|--- CVE| CVE-2026-29145 组件| Apache Tomcat / Tomcat Native 类型| 认证绕过（mTLS / CLIENTCERT） CVSS| 9.1（NVD）/ Moderate（Apache） 影响版本| Tomcat...

rewerse-engineering v1.4.0

rewerse engineering An unofficial REWE API client in Go and Python. It implements the publicly accessible unauthenticated endpoints the REWE app uses for querying current discounts Angebote, products, markets and recalls. Current supported APK version: 5.16.2 as of 06.08.26 !CAUTION The...

CVE-2026-19283

IBM Observability with Instana Agent Build 1.0.303 through 1.0.323 IBM Instana Agent Operator could allow an authenticated remote attacker to obtain sensitive information, caused by missing destination namespace validation when copying etcd mTLS client credentials from the openshift-etcd system...

CVE-2026-19283

IBM Instana Agent Operator (part of IBM Observability with Instana, builds 1.0.303 through 1.0.323) is vulnerable to information disclosure caused by missing destination namespace validation when copying etcd mTLS client credentials from the openshift-etcd system namespace into an attacker-contro...

EUVD-2026-71272

IBM Observability with Instana Agent Build 1.0.303 through 1.0.323 IBM Instana Agent Operator could allow an authenticated remote attacker to obtain sensitive information, caused by missing destination namespace validation when copying etcd mTLS client credentials from the openshift-etcd system...