CVE-2014-8275_openssl_g2.5

OpenSSL 1.0.1g 7 апреля 2014 Copyright c 1998-2011 The OpenSSL Project Copyright c 1995-1998 Eric A. Young, Tim J. Hudson Все права защищены. ОПИСАНИЕ Проект OpenSSL — это совместная работа по созданию надёжного, коммерческого, полнофункционального набора инструментов с открытым исходным кодом,...

openssl_g2.5_CVE-2014-3566

OpenSSL 1.0.1g 7 Apr 2014 Copyright c 1998-2011 The OpenSSL Project Copyright c 1995-1998 Eric A. Young, Tim J. Hudson All rights reserved. ОПИСАНИЕ Проект OpenSSL — это совместная работа по разработке надёжного, коммерческого, полнофункционального набора инструментов с открытым исходным кодом,...

HeartbleedAttack

Атака Heartbleed: Демонстрация атаки на Java Обзор Этот репозиторий содержит Heartbleed.java — специальный эксплойт на Java, созданный для демонстрации уязвимости Heartbleed CVE-2014-0160 путём извлечения конфиденциальных данных с уязвимого сервера IP: 192.168.1.132, работающего под управлением...

[SECURITY] Fedora 44 Update: openssl-3.5.9-1.fc44

The OpenSSL toolkit provides support for secure communications between machines. OpenSSL includes a certificate management tool and shared libraries which provide various cryptographic algorithms and protocols...

Security Bulletin: Multiple vulnerabilities in IBM Cloud Pak System

Summary Multiple vulnerabilities were found in linux kernel, libssh expat, libssh, openSSL in Platform System Manager PSM OS Image for Red Hat Enterprise Linux v8 shipped with IBM Cloud Pak System. Those vulnerabilities were addressed in IBM Cloud Pak System version 2.3.6.2. Vulnerability Details...

SUSE SLES15 Security Update : openssl-3-livepatches (SUSE-SU-2026:4418-1)

The remote SUSE Linux SLES15 host has a package installed that is affected by a vulnerability as referenced in the SUSE- SU-2026:4418-1 advisory. This update for openssl-3-livepatches fixes the following issue: - CVE-2026-84782: DTLS Retransmits Handshake Messages From a Stale Buffer Offset...

Fedora 44 : openssl (2026-12f3f3d569)

The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-12f3f3d569 advisory. Rebase to OpenSSL 3.5.9 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested for...

SUSE SLES15 Security Update : openssl-3 (SUSE-SU-2026:4412-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:4412-1 advisory. - CVE-2026-35189: Excessive Memory Allocation in Relative CRLDP Processing bsc1280589. - CVE-2026-54872: Timing Side-Channel in...

aws-suture

Суть $ git clone [email protected]:pblittle/suture.git $ cd suture $ bundle install $ bundle exec ./bin/suture --help $ bundle exec ./bin/suture check Suture Suture — это инструмент для выполнения произвольных команд на ваших экземплярах AWS EC2. Вы можете запускать его как для отдельного...

Project-Field-Analysis-and-Memory-Leak-Demonstration

Цель Целью этого проекта была оценка удаленного хоста на уязвимость Heartbleed CVE-2014-0160, проверка её наличия и эксплуатация для извлечения потенциально чувствительной информации из памяти сервера через протокол TLS. Выполнение 1. Определение открытых сервисов Nmap nmap -sC -sV 52.215.184.158...

PoC-CVE-2025-69420

CVE-2025-69420 — PoC несоответствия типов в ответе TimeStamp от OpenSSL Лабораторный воспроизводитель, предназначенный только для аварийного завершения, для CVE-2025-69420 в OpenSSL. PoC загружает валидный ответ TimeStamp Response по RFC 3161, заменяет в памяти подписанный атрибут ESS с...

OPENSUSE-SU-2026:22016-1 Security update for rustup

This update for rustup fixes the following issues: - CVE-2024-12224: idna: idna accepts Punycode labels that do not produce any non-ASCII when decoded bsc1243862. - CVE-2025-58160: tracing-subscriber: Tracing log pollution bsc1249008. - CVE-2026-25541: bytes: integer overflow in 'BytesMut:reserve...

PoC-CVE-2025-69419

CVE-2025-69419 – OpenSSL 힙 버퍼 오버플로 재현기 개요 이 저장소는 OpenSSL의 취약한 버전에 영향을 미치는 CVE-2025-69419 를 위한 최소한의 개념 증명 재현기를 포함합니다. PoC는 특수하게 조작된 BMPString friendlyName을 처리할 때 PKCS12getfriendlyname에서 보고된 힙 범위를 벗어난 쓰기를 시연합니다. 이 프로젝트의 목표는 개발자와 보안 연구자에게 간단한 회귀 테스트를 제공하는 것입니다. 이 PoC는 악용 기술을 구현하지 않으며 AddressSanitize...

PoC-CVE-2025-69421

Воспроизводитель аварийного завершения CVE-2025-69421 Этот репозиторий содержит минимально повреждённый файл PKCS12, воспроизводящий CVE-2025-69421 в изолированной лабораторной среде. Сгенерированный PFX содержит EncryptedData, в котором EncryptedContentInfo опускает необязательное поле...

Security update for openssl-3

This update for openssl-3 fixes the following issues: CVE-2026-35189: Excessive Memory Allocation in Relative CRLDP Processing bsc1280589. CVE-2026-54872: Timing Side-Channel in Scalar Multiplication for Non-NIST EC Curves bsc1280591. CVE-2026-75805: NULL Pointer Dereference in CMP Client...

SUSE-SU-2026:4419-1 Security update for openssl-3

This update for openssl-3 fixes the following issues: - CVE-2026-35189: Excessive Memory Allocation in Relative CRLDP Processing bsc1280589. - CVE-2026-54872: Timing Side-Channel in Scalar Multiplication for Non-NIST EC Curves bsc1280591. - CVE-2026-75805: NULL Pointer Dereference in CMP Client...

Security update for openssl-3-livepatches

This update for openssl-3-livepatches fixes the following issue: CVE-2026-84782: DTLS Retransmits Handshake Messages From a Stale Buffer Offset bsc1280587. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch"...

SUSE-SU-2026:4418-1 Security update for openssl-3-livepatches

This update for openssl-3-livepatches fixes the following issue: - CVE-2026-84782: DTLS Retransmits Handshake Messages From a Stale Buffer Offset bsc1280587...

Security update for openssl-3

This update for openssl-3 fixes the following issues: CVE-2026-35189: Excessive Memory Allocation in Relative CRLDP Processing bsc1280589. CVE-2026-35191: QUIC Unvalidated Amplification Credit may be Over Accounted bsc1280590. CVE-2026-54872: Timing Side-Channel in Scalar Multiplication for...

Security update for openssl-3

This update for openssl-3 fixes the following issues: CVE-2026-35189: Excessive Memory Allocation in Relative CRLDP Processing bsc1280589. CVE-2026-54872: Timing Side-Channel in Scalar Multiplication for Non-NIST EC Curves bsc1280591. CVE-2026-75805: NULL Pointer Dereference in CMP Client...