Lucene search
+L

216 matches found

Kitploit
Kitploit
added 2026/09/04 5:24 a.m.3 views

pared

Pared Pared — это легковесная, безопасная контрольная плоскость и административная веб-панель реального времени, написанная на Crystal для обеспечения безопасности Linux-хостов. Она предоставляет централизованное управление интерфейсами firewalld DBus/CLI и подключениями NetworkManager, с...

5.4AI score
SaveExploits0References10
Kitploit
Kitploit
added 2026/09/02 9:49 p.m.5 views

CVE-2026-29145-Tester

Среда тестирования CVE-2026-29145 📌 Обзор Этот репозиторий содержит среду proof-of-concept PoC, предназначенную для тестирования CVE-2026-29145. Уязвимость представляет собой обход аутентификации в реализации Mutual TLS CLIENTCERT в Apache Tomcat. Когда OCSP Online Certificate Status Protocol...

9.1CVSS7.6AI score0.00715EPSS
SaveExploits2
Kitploit
Kitploit
added 2026/09/02 4:25 p.m.7 views

CVE-2026-29145-Tester

Среда тестирования CVE-2026-29145 📌 Обзор Этот репозиторий содержит среду proof-of-concept PoC, предназначенную для тестирования CVE-2026-29145. Уязвимость представляет собой обход аутентификации в реализации Mutual TLS CLIENTCERT Apache Tomcat. Когда OCSP Online Certificate Status Protocol...

9.1CVSS7.6AI score0.00715EPSS
SaveExploits2
NVD
NVD
added 2026/08/19 9:17 p.m.10 views

CVE-2026-75595

Netty is an asynchronous, event-driven network application framework. Prior to 4.1.137.Fina and 4.2.17.Final, io.netty.handler.ssl.SslClientHelloHandlerdecode checks the wrong offset before reading the four-byte TLS handshake header, so a ClientHello whose handshake header spans records can cause...

9.1CVSS0.00317EPSS
SaveExploits0References7
OSV
OSV
added 2026/08/19 9:17 p.m.9 views

DEBIAN-CVE-2026-75595

Netty is an asynchronous, event-driven network application framework. Prior to 4.1.137.Fina and 4.2.17.Final, io.netty.handler.ssl.SslClientHelloHandlerdecode checks the wrong offset before reading the four-byte TLS handshake header, so a ClientHello whose handshake header spans records can cause...

9.1CVSS5.5AI score0.00317EPSS
SaveExploits0References1
UbuntuCve
UbuntuCve
added 2026/08/19 9:17 p.m.13 views

CVE-2026-75595

Netty is an asynchronous, event-driven network application framework. Prior to 4.1.137.Fina and 4.2.17.Final, io.netty.handler.ssl.SslClientHelloHandlerdecode checks the wrong offset before reading the four-byte TLS handshake header, so a ClientHello whose handshake header spans records can cause...

9.1CVSS5.4AI score0.00317EPSS
SaveExploits0References9
OSV
OSV
added 2026/08/19 9:17 p.m.9 views

UBUNTU-CVE-2026-75595

Netty is an asynchronous, event-driven network application framework. Prior to 4.1.137.Fina and 4.2.17.Final, io.netty.handler.ssl.SslClientHelloHandlerdecode checks the wrong offset before reading the four-byte TLS handshake header, so a ClientHello whose handshake header spans records can cause...

9.1CVSS5.6AI score0.00317EPSS
SaveExploits0References10
Debian CVE
Debian CVE
added 2026/08/19 9:00 p.m.10 views

CVE-2026-75595

Netty is an asynchronous, event-driven network application framework. Prior to 4.1.137.Fina and 4.2.17.Final, io.netty.handler.ssl.SslClientHelloHandlerdecode checks the wrong offset before reading the four-byte TLS handshake header, so a ClientHello whose handshake header spans records can cause...

9.1CVSS5.5AI score0.00317EPSS
SaveExploits0
EUVD
EUVD
added 2026/08/19 9:00 p.m.14 views

EUVD-2026-63095

Netty is an asynchronous, event-driven network application framework. Prior to 4.1.137.Fina and 4.2.17.Final, io.netty.handler.ssl.SslClientHelloHandlerdecode checks the wrong offset before reading the four-byte TLS handshake header, so a ClientHello whose handshake header spans records can cause...

9.1CVSS5.4AI score0.00317EPSS
SaveExploits0References7
CVE
CVE
added 2026/08/19 9:00 p.m.163 views

CVE-2026-75595

Netty (asynchronous, event-driven network framework) is affected by an SNI routing bypass in io.netty.handler.ssl.SslClientHelloHandler#decode . The method checks the wrong offset before reading the four-byte TLS handshake header, so a ClientHello whose handshake header spans records triggers an ...

9.1CVSS5.4AI score0.00317EPSS
SaveExploits0References7
OSV
OSV
added 2026/08/19 9:00 p.m.56 views

CVE-2026-75595 Netty: SNI Routing Bypass via Fragmented TLS ClientHello Causing Fallback to Default SslContext

Netty is an asynchronous, event-driven network application framework. Prior to 4.1.137.Fina and 4.2.17.Final, io.netty.handler.ssl.SslClientHelloHandlerdecode checks the wrong offset before reading the four-byte TLS handshake header, so a ClientHello whose handshake header spans records can cause...

9.1CVSS5.5AI score
SaveExploits0References9
NVD
NVD
added 2026/08/18 5:16 p.m.7 views

CVE-2026-50578

ePA 3.x Integration implements the authorization workflow and writes Medical Information Objects to Germany's electronic patient record. Prior to 1.3.0, ePA 3.x Integration disables TLS certificate verification for both ePA connections in app/vau/VAUProtokoll.py and Konnektor connections in...

7.5CVSS0.00185EPSS
SaveExploits0References5
CVE
CVE
added 2026/08/18 4:51 p.m.39 views

CVE-2026-50578

Versions of ePA 3.x Integration before 1.3.0 disable TLS certificate verification (self.session.verify=False) in app/vau/VAUProtokoll.py and app/konnektor/Konnektor.py, allowing a network attacker to present arbitrary certificates, terminate TLS, and intercept or observe mutual-TLS smartcard exch...

7.5CVSS5.5AI score0.00185EPSS
SaveExploits0References5
OSV
OSV
added 2026/08/18 4:51 p.m.15 views

CVE-2026-50578 ePA 3.x Integration: TLS Certificate Verification Universally Disabled

ePA 3.x Integration implements the authorization workflow and writes Medical Information Objects to Germany's electronic patient record. Prior to 1.3.0, ePA 3.x Integration disables TLS certificate verification for both ePA connections in app/vau/VAUProtokoll.py and Konnektor connections in...

7.5CVSS5.6AI score
SaveExploits0References7
Cvelist
Cvelist
added 2026/08/18 4:51 p.m.26 views

CVE-2026-50578 ePA 3.x Integration: TLS Certificate Verification Universally Disabled

ePA 3.x Integration implements the authorization workflow and writes Medical Information Objects to Germany's electronic patient record. Prior to 1.3.0, ePA 3.x Integration disables TLS certificate verification for both ePA connections in app/vau/VAUProtokoll.py and Konnektor connections in...

7.5CVSS0.00185EPSS
SaveExploits0References5
EUVD
EUVD
added 2026/08/18 4:51 p.m.11 views

EUVD-2026-61056

ePA 3.x Integration implements the authorization workflow and writes Medical Information Objects to Germany's electronic patient record. Prior to 1.3.0, ePA 3.x Integration disables TLS certificate verification for both ePA connections in app/vau/VAUProtokoll.py and Konnektor connections in...

7.5CVSS5.5AI score0.00185EPSS
SaveExploits0References5
Snyk
Snyk
added 2026/08/17 6:15 p.m.5 views

Insufficient Verification of Data Authenticity

Overview openssl-encrypt is an A package for secure file encryption and decryption based on modern ciphers using heavy-compute-load chaining of hashing and KDF to generate strong encryption password based on users provided password to ensure secure encryption of files Affected versions of this...

9.1CVSS5.9AI score0.00126EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2026/07/31 3:34 p.m.11 views

CVE-2026-18141 Aap-gateway: aap-gateway: authentication bypass in event-driven ansible via forged http header

A flaw was found in aap-gateway, a component of Ansible Automation Platform's Event-Driven Ansible EDA. An unauthenticated remote attacker can bypass mutual Transport Layer Security mTLS authentication for event streams. This is achieved by manipulating the event stream URL and forging the HTTP...

8.2CVSS5.7AI score0.00309EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2026/07/31 12:00 a.m.29 views

PT-2026-66778

A flaw was found in aap-gateway, a component of Ansible Automation Platform's Event-Driven Ansible EDA. An unauthenticated remote attacker can bypass mutual Transport Layer Security mTLS authentication for event streams. This is achieved by manipulating the event stream URL and forging the HTTP...

8.2CVSS5.7AI score0.00309EPSS
SaveExploits0References3
OSV
OSV
added 2026/07/30 6:25 a.m.8 views

ALPINE-CVE-2026-56850

A flaw in Node.js HTTPS Agent connection reuse can cause PFX object-array key collisions, allowing mutual TLS mTLS client identities to be reused across requests configured with different client certificates. This vulnerability affects Node.js 26.x, 24.x, and 22.x...

4.4CVSS5.8AI score0.00084EPSS
SaveExploits0References1
Rows per page
Query Builder