openSSL_1.0.1g_CVE-2014-3507

OpenSSL 1.0.1g 7 Apr 2014 Copyright c 1998-2011 The OpenSSL Project Copyright c 1995-1998 Eric A. Young, Tim J. Hudson All rights reserved. DESCRIPTION The OpenSSL Project is a collaborative effort to develop a robust, commercial-grade, fully featured, and Open Source toolkit implementing the...

CVE-2020-0601-spoofkey

CVE-2020-0601-spoofkey To see how to Make Spoofed Key and Signing the code REQ: openssl, main.rbwhich i uplaoded VISIT : https://twitter.com/exploitblizzard...

openssl_g2.5_CVE-2014-3566

OpenSSL 1.0.1g 7 Apr 2014 Copyright c 1998-2011 The OpenSSL Project Copyright c 1995-1998 Eric A. Young, Tim J. Hudson All rights reserved. DESCRIPTION The OpenSSL Project is a collaborative effort to develop a robust, commercial-grade, fully featured, and Open Source toolkit implementing the...

Openssl_G2.5_New

OpenSSL 1.0.1g 7 Apr 2014 Copyright c 1998-2011 The OpenSSL Project Copyright c 1995-1998 Eric A. Young, Tim J. Hudson All rights reserved. DESCRIPTION The OpenSSL Project is a collaborative effort to develop a robust, commercial-grade, fully featured, and Open Source toolkit implementing the...

Security Bulletin: DataStage on Cloud Pak for Data has several vulnerabilities

Summary DataStage on Cloud Pak for Data has several vulnerabilities Vulnerability Details CVEID:CVE-2026-59949 DESCRIPTION: yawkat LZ4 Java provides LZ4 compression for Java. Prior to 1.11.1, JNI-backed XXHash implementations fail to validate the byte array object and the off and len arguments in...

Security Bulletin: UPDATED bulletin for OpenSSL vulnerabilities impacting AIX. Updated On: Tue Oct 27 12:13:54 CDT 2026. Reason: Updated the iFix link, link was pointing to openssl_fix49.tar, instead of openssl_fix50.tar. And fixed typo in summary.

Summary Vulnerabilities in OpenSSL: CVE-2026-35189 - Memory exhaustion DoS, CVE-2026-54872 - ECDSA/SM2 timing side-channel, CVE-2026-77696 - SM2 timing side-channel,CVE-2026-84782 - Out-of-Bounds Read, CVE-2026-75805 - NULL pointer dereference DoS, CVE-2026-75806 - DTLS connection termination DoS...

GoAhead TLS Flaws Allow Revoked Client Certificates and Enable Session Decryption

The GoAhead embedded web server loaded a certificate revocation list into its default TLS backend but never turned revocation checking on, so a revoked client certificate could still pass login on affected setups. The flaw is in builds that use the OpenSSL backend with mutual-TLS, where the serve...

RTS VLink OpenSSL -engine UNC injection SYSTEM RCE

Authenticated POST /api/v1/ssl/generatetlsclientcertificate with PASSWORD argument injection; WebDAV on LHOST:LPORT serves PoC DLL evil64.dll.b64. """RTS Intercom VLink Virtual Matrix — OpenSSL Argument Injection → SYSTEM RCE""" from future import annotations from kittysploit import from...

Lantronix EDS3000PR SSL passin command injection

Authenticated POST /ssl with certpasswd/keypasswd injected into openssl -passin pass:%s system enables root command execution. !/usr/bin/env python3 -- coding: utf-8 -- """Lantronix EDS SSL -passin pass:%s command injection RCE.""" from future import annotations import re import time from...

RTS Intercom VLink Virtual Matrix — OpenSSL Argument Injection → SYSTEM RCE — Detect

Fingerprint / reachability check for RTS Intercom VLink Virtual Matrix — OpenSSL Argument Injection → SYSTEM RCE !/usr/bin/env python3 -- coding: utf-8 -- """Detection for RTS Intercom VLink Virtual Matrix — OpenSSL Argument Injection → SYSTEM RCE""" from kittysploit import from...

Critical: Red Hat Security Advisory: OpenShift Container Platform 4.19.53 bug fix and security update

Red Hat OpenShift Container Platform release 4.19.53 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.19. Red Hat Product Security has rated this update as having a...

Critical: Red Hat Security Advisory: OpenShift Container Platform 4.21.40 bug fix and security update

Red Hat OpenShift Container Platform release 4.21.40 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.21. Red Hat Product Security has rated this update as having a...

Critical: Red Hat Security Advisory: OpenShift Container Platform 4.20.44 bug fix and security update

Red Hat OpenShift Container Platform release 4.20.44 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.20. Red Hat Product Security has rated this update as having a...

Security Bulletin: Multiple security vulnerabilities have been found in Containerized version of IBM Guardium Key Lifecycle Manager

Summary Multiple security vulnerabilities have been addressed in Containerized version of IBM Guardium Key Lifecycle Manager. Vulnerability Details CVEID:CVE-2026-34481 DESCRIPTION: Apache Log4j's JsonTemplateLayout https://logging.apache.org/log4j/2.x/manual/json-template-layout.html , in versio...

golang-fips: Golang FIPS zeroed buffer

A vulnerability was found in Golang FIPS OpenSSL. This flaw allows a malicious user to randomly cause an uninitialized buffer length variable with a zeroed buffer to be returned in FIPS mode. It may also be possible to force a false positive match between non-equal hashes when comparing a trusted...

golang-fips: Golang FIPS zeroed buffer

A vulnerability was found in Golang FIPS OpenSSL. This flaw allows a malicious user to randomly cause an uninitialized buffer length variable with a zeroed buffer to be returned in FIPS mode. It may also be possible to force a false positive match between non-equal hashes when comparing a trusted...

Multiple vulnerabilities impact AIX due to OpenSSL

IBM SECURITY ADVISORY First Issued: Tue Oct 27 03:47:38 CDT 2026 The most recent version of this document is available here: https://aix.software.ibm.com/aix/efixes/security/openssladvisory50.asc Security Bulletin: Multiple vulnerabilities impact AIX due to OpenSSL...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: php (UTSA-2026-146121)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-146121 advisory. In PHP versions 8.2. before 8.2.32, 8.3. before 8.3.32, 8.4. before 8.4.23, 8.5. before 8.5.8, the AES-WRAP-PAD algorithm implementation in OpenSSL extension contain...

AlmaLinux 9.6 [TuxCare] Security Update: openssl / openssl-devel / openssl-libs / openssl-perl Multiple Vulnerabilities (ALMALINUX9.6:CLSA-2026:1793092125)

The AlmaLinux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1793092125 advisory. - Issue summary: A certificate with many nameRelativeToCRLIssuer CRL distribution points causes disproportionate heap growth when...

PT-2026-126664

A critical vulnerability in the GoAhead embedded web server causes revoked client certificates to remain valid on certain mutual TLS deployments. Tracked as CVE-2026-115881, the flaw carries a CVSS score of 9.1 and affects GoAhead versions 3.4.5 through 6.1.0. ⠀ GoAhead loads the configured...