cipherscan

CipherScan Cipherscan tests the ordering of the SSL/TLS ciphers on a given target, for all major versions of SSL and TLS. It also extracts some certificates informations, TLS options, OCSP stapling and more. Cipherscan is a wrapper above the openssl sclient command line. Cipherscan is meant to ru...

PySCTChecker

PySCTChecker 설명 도메인이 인증서 투명성Certificate Transparency을 제대로 구현하고 있는지 확인하기 위한 빠르고 간단한 Python 스크립트입니다. 구현되어 있다면 서버 측에서 인증서 투명성이 어떻게 구현되었는지 관찰할 수 있습니다. 서버가 인증서 투명성을 구현할 때, 적어도 하나의 SCT서버 TLS 인증서가 투명성 로그에 포함되었다는 증명를 제공해야 합니다. SCT는 인증서에 포함, TLS 확장, OCSP Stapling의 세 가지 방식으로 제공될 수 있습니다. PySCTChecker를 사용하면...

ssl-certificate-expiry-date-checker

sslcertificateexpirydatechecker 어떤 인증서가 만료될 예정이며 갱신이 필요한지 확인합니다. 스캔 결과에서 다양한 정보만료일, 발급자, 서명, 일련 번호 등를 찾습니다. 조직의 SSL 인증서 관리자라면 동료, 팀에서 목록을 수집하고 인증서의 만료일을 확인하세요. SSL 인증서가 만료되기 전에 상세 결과로 사용자 알림을 보냅니다 WEBHOOK, Telegram-Bot, Slack.... 다른 유사 도구와의 차이점: 도메인별로 프록시 사용을 선택적으로 설정할 수 있습니다. 예를 들어, 제한된 사설 환경...

p5-ssl-tools

SSLツールコレクション このリポジトリには、SSL/TLSに関連する問題のデバッグや解析を目的としたさまざまなツールが含まれています。 TLSの状態の解析 analyze-ssl.pl さまざまなSSL/TLSバージョンのサポートを確認 サポートされている暗号スイートを確認 証明書の検証 OCSPの状態を確認 SNIがサポートされているか、および/または必須かどうかを確認 チェーン証明書を表示し、証明書の検証が成功した場合はローカルルートも表示 直接接続およびさまざまな形式のSTARTTLSをサポート ... SMTP TLSサポート（STARTTLS） mxstarttlsbulk....

CVE-2026-29145-Tester

CVE-2026-29145 テスト環境 📌 概要 このリポジトリには、CVE-2026-29145 をテストするために設計された概念実証（PoC）環境が含まれています。 この脆弱性は、Apache Tomcat の相互TLS（CLIENTCERT）実装における認証バイパス です。OCSP（オンライン証明書ステータスプロトコル）がソフトフェイル無効で構成されている場合、Tomcat は OCSP チェックの失敗をハード拒否として扱わない可能性があります。これにより、OCSP...

CVE-2026-29145-Tester

CVE-2026-29145 テスト環境 📌 概要 このリポジトリには、CVE-2026-29145 をテストするために設計された概念実証（PoC）環境が含まれています。 この脆弱性は、Apache Tomcat の相互TLS（CLIENTCERT）実装における認証バイパス です。OCSP（オンライン証明書状態プロトコル）がソフトフェイル無効で構成されている場合、Tomcat は OCSP チェックの失敗をハード拒否として扱わない可能性があります。これにより、OCSP...

cve-2026-29145

CVE-2026-29145 — OCSPチェックがソフトフェイル無効時でもソフトフェイルすることがある 発見者: gregk4sec https://github.com/gregk4sec/cve 発見日: 2026-02-26 影響を受けるベンダー: Apache 影響を受ける製品: Tomcat 深刻度: 9.1 CRITICAL CWE: CWE-287 不適切な認証 ステータス: 審査中 / 修正済み / 非公開 / 公開 ✅ 概要 CLIENTCERT認証は、ソフトフェイルが無効になっている一部のシナリオで、期待どおりにOCSPチェックを失敗させませんでした。 技術分析 参...

BIT-TOMCAT-2026-86248 Apache Tomcat: Fix for CVE-2026-34500 was incomplete. OCSP checks sometimes soft-fail with FFM even when soft-fail is disabled

CLIENTCERT authentication does not fail as expected for some scenarios when soft fail is disabled vulnerability in Apache Tomcat. This issue affects Apache Tomcat: from 11.0.0 through 11.0.25, from 10.1.22 through 10.1.59, from 9.0.92 through 9.0.121. Users are recommended to upgrade to version...

Rocky Linux 9.6 [TuxCare] Security Update: tomcat / tomcat-admin-webapps / tomcat-docs-webapp / etc (ALMALINUX9.6:CLSA-2026:1774442729)

The Rocky Linux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1774442729 advisory. - Improper Input Validation vulnerability in Apache Tomcat Native, Apache Tomcat. When using an OCSP responder, Tomcat Native and Tomcat's...

AlmaLinux 9.6 [TuxCare] Security Update: httpd / httpd-core / httpd-devel / httpd-filesystem / httpd-manual / etc Multiple Vulnerabilities (ALMALINUX9.6:CLSA-2026:1782224876)

The AlmaLinux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1782224876 advisory. - Buffer Over-read vulnerability in Apache HTTP Server via outbound OCSP requests to an attacker controlled OCSP server This issue...

Rocky Linux 8 [CIQ] Security Update: curl / curl-debuginfo / curl-debugsource / libcurl / etc Multiple Vulnerabilities (crlsa-2021_1610)

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20211610 advisory. curl: FTP PASV command response can cause curl to connect to arbitrary host CVE-2020-8284 curl: Malicious FTP server can trigger stack overflow when...

AlmaLinux 9.2 [TuxCare] Security Update: httpd / httpd-core / httpd-devel / httpd-filesystem / httpd-manual / etc (ALMALINUX9.2:CLSA-2026:1782137198)

The AlmaLinux 9.2 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1782137198 advisory. - Buffer Over-read vulnerability in Apache HTTP Server via outbound OCSP requests to an attacker controlled OCSP server This issue affects...

Rocky Linux 9.6 [TuxCare] Security Update: httpd / httpd-core / httpd-devel / httpd-filesystem / httpd-manual / etc Multiple Vulnerabilities (ALMALINUX9.6:CLSA-2026:1782224876)

The Rocky Linux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1782224876 advisory. - Buffer Over-read vulnerability in Apache HTTP Server via outbound OCSP requests to an attacker controlled OCSP server This issue...

Improper Certificate Validation

Snowflake drivers are vulnerable to Improper Certificate Validation. The vulnerability is due to improper validation of OCSP responses and treating definitive verification failures as transient, which allows a man-in-the-middle attacker with a revoked certificate and its private key to establish ...

CVE-2026-86248

A flaw was found in Apache Tomcat. When client certificate authentication is configured with strict certificate revocation checking, Online Certificate Status Protocol OCSP verification may improperly allow connections instead of failing as intended. A remote attacker presenting an invalid or...

CVE-2026-29145-Everything

CVE-2026-29145 모든 것 Apache Tomcat CLIENTCERT + OCSP soft-fail 우회 완전 재현 환경, 익스플로잇 트래픽 패킷, 그리고 Suricata 탐지 규칙 작성 자료입니다. 승인된 보안 연구 및 탐지 규칙 개발용으로만 사용하세요. 승인되지 않은 시스템에는 사용하지 마십시오. 취약점 요약 항목| 설명 ---|--- CVE| CVE-2026-29145 구성 요소| Apache Tomcat / Tomcat Native 유형| 인증 우회 mTLS / CLIENTCERT CVSS| 9.1 NVD /...

AlmaLinux 9.6 [TuxCare] Security Update: mod_md (ALMALINUX9.6:CLSA-2026:1782919559)

The AlmaLinux 9.6 host has a package installed that is affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1782919559 advisory. - Allocation of Resources Without Limits or Throttling vulnerability in Apache HTTP Server's modmd via OCSP response data. This issue affects...

AlmaLinux 9.2 [TuxCare] Security Update: mod_md (ALMALINUX9.2:CLSA-2026:1783351991)

The AlmaLinux 9.2 host has a package installed that is affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1783351991 advisory. - Allocation of Resources Without Limits or Throttling vulnerability in Apache HTTP Server's modmd via OCSP response data. This issue affects...

Security Bulletin: IBM DataPower Gateway affected by multiple CVEs in gnutls

Summary IBM DataPower Gateway has addressed multiple vulnerabilities in gnutls in version 11.0.0.3 Vulnerability Details CVEID:CVE-2026-3832 DESCRIPTION: A flaw was found in gnutls. A remote attacker could exploit this vulnerability by presenting a specially crafted Online Certificate Status...

Linux Distros Unpatched Vulnerability : CVE-2026-89102

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In wolfSSL versions 5.7.2 through 5.9.2 there is a client-side implementation flaw in RFC 6961, multiple OCSP response stapling, which can lead to certificate...