OpenSSL-1_0_1g_CVE-2015-3197

OpenSSL 1.0.1g 7 Apr 2014 Copyright c 1998-2011 The OpenSSL Project Copyright c 1995-1998 Eric A. Young, Tim J. Hudson All rights reserved. DESCRIPTION The OpenSSL Project is a collaborative effort to develop a robust, commercial-grade, fully featured, and Open Source toolkit implementing the...

CitrixBleed-2-CVE-2025-5777

CitrixBleed-2-CVE-2025-5777 checker checker.py httphttpshost:port.txt result.txt 8 better you run OPENSSLCONF=./openssl.cnf checker.py httphttpshost:port.txt result.txt 8 poc this poc automatic exploit CVE-2025-5777 and check token exsist and after valid or not. poc.py -u https://target.example.c...

CVE-2014-2734

CVE-2014-2734 Ruby OpenSSL CA Private Key Spoofing ============= Ruby openssl has a vulnerability when a public key is a issued prior writing to private key and is reopened during a script it spoofs a CA private key. PoC script https://gist.github.com/10446549 Mitre:...

Heartbleed_Dockerfile_with_Nginx

Testing Heartbleed with Nginx Dockerfile This repository contains Dockerfile of Nginx with the vulnerable OpenSSL version 1.0.1f for testing CVE-2014-0160 Heartbleed Vulnerability. Base Docker Image debian:latest Installation 1. Install Docker Example with Debian: apt-get install -y docker 2...

cmty-ssl-heartbleed-CVE-2014-0160-HTTP-HTTPS

This check is for demostration only. cmty-ssl-heartbleed-CVE-2014-0160-HTTP-HTTPS Targets the OpenSSL product directly on discovered HTTP and HTTPS services. This does not check for OpenSSL 1.0.2-beta which is vulnerable. Also, OpenSSL is commonly packaged into other software and better targeted ...

OpenSSL-2022

2022 OpenSSL vulnerability - CVE-2022-3602/CVE-2022-3786 This repo contains operational information regarding CVE-2022-3602 and CVE-2022-3786, two vulnerabilities in OpenSSL 3.0.0-3.0.6. For more information see: OpenSSL Security Advisory OpenSSL Blogpost FAQ CERT-Bund advisory DE CISA advisory...

CVE-2014-0160.

CVE-2014-0160 Lab setup using Heartbleed to leak memory of webapps This repo focuses on building a container to create an environment to easily exploit nginx using the Heartbleed technique, focusing on: Setting up environment using Docker Server setup diagram Demo steps Server diagram The...

CVE-2025-23134_fixes_code

CVE-2026-34180 – Patch Changes The patch addresses an integer truncation issue in the OpenSSL ASN.1/DER decoding code. The following changes were made: 1. Updated the ASN.1 content length type Changed the len parameter of asn1exc2i from int to long. This allows the function to receive and handle...

openSUSE 16 Security Update : rustup (openSUSE-SU-2026:22016-1)

The remote openSUSE 16 host has a package installed that is affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:22016-1 advisory. - CVE-2024-12224: idna: idna accepts Punycode labels that do not produce any non-ASCII when decoded bsc1243862. - CVE-2025-58160:...

Openssl_G2.5_CVE-2014-3570_01

OpenSSL 1.0.1g 7 Apr 2014 Copyright c 1998-2011 The OpenSSL Project Copyright c 1995-1998 Eric A. Young, Tim J. Hudson All rights reserved. DESCRIPTION The OpenSSL Project is a collaborative effort to develop a robust, commercial-grade, fully featured, and Open Source toolkit implementing the...

CVE-2014-3570_G2.5_openssl_no_patch

This repository does not have a README...

cve-2014-0160-Yunfeng-Jiang

cve-2014-0160-Yunfeng-Jiang 1. The reading course report ReadingCourseReport.pdf 2. Detect tools 1. heartbleed.py https://gist.github.com/eelsivart/10174134 Usage: python heartbleed.py hostname 2. ssltest.py https://github.com/Lekensteyn/pacemaker/blob/master/ssltest.py Usage: python ssltest.py...

Openssl_G2.5_CVE-2014-8275

OpenSSL 1.0.1g 7 Apr 2014 Copyright c 1998-2011 The OpenSSL Project Copyright c 1995-1998 Eric A. Young, Tim J. Hudson All rights reserved. DESCRIPTION The OpenSSL Project is a collaborative effort to develop a robust, commercial-grade, fully featured, and Open Source toolkit implementing the...

cve-2020-0601-plugin

Zeek test script for CVE-2020-0601 This script can detect exploit attempts for CVE-2020-0601. It performs a check to see if a known curve is used in a certificate - if this is not the case a notice is raised. Example notice in notice.log: 1579043477.791522 CHhAvVGS1DHFjwGM9 192.241.209.49 46110...

CVE-2014-8275_openssl_g2.5

OpenSSL 1.0.1g 7 Apr 2014 Copyright c 1998-2011 The OpenSSL Project Copyright c 1995-1998 Eric A. Young, Tim J. Hudson All rights reserved. DESCRIPTION The OpenSSL Project is a collaborative effort to develop a robust, commercial-grade, fully featured, and Open Source toolkit implementing the...

openssl_g2.5_CVE-2014-3566

OpenSSL 1.0.1g 7 Apr 2014 Copyright c 1998-2011 The OpenSSL Project Copyright c 1995-1998 Eric A. Young, Tim J. Hudson All rights reserved. DESCRIPTION The OpenSSL Project is a collaborative effort to develop a robust, commercial-grade, fully featured, and Open Source toolkit implementing the...

HeartbleedAttack

Heartbleed Attack: Java-Based Attack Demo Overview This repository features Heartbleed.java, a custom Java-based exploit designed to demonstrate the Heartbleed vulnerability CVE-2014-0160 by extracting sensitive data from a vulnerable server IP: 192.168.1.132 running Apache port 443 and Postfix...

[SECURITY] Fedora 44 Update: openssl-3.5.9-1.fc44

The OpenSSL toolkit provides support for secure communications between machines. OpenSSL includes a certificate management tool and shared libraries which provide various cryptographic algorithms and protocols...

Security Bulletin: Multiple vulnerabilities in IBM Cloud Pak System

Summary Multiple vulnerabilities were found in linux kernel, libssh expat, libssh, openSSL in Platform System Manager PSM OS Image for Red Hat Enterprise Linux v8 shipped with IBM Cloud Pak System. Those vulnerabilities were addressed in IBM Cloud Pak System version 2.3.6.2. Vulnerability Details...

SUSE SLES15 Security Update : openssl-3 (SUSE-SU-2026:4412-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:4412-1 advisory. - CVE-2026-35189: Excessive Memory Allocation in Relative CRLDP Processing bsc1280589. - CVE-2026-54872: Timing Side-Channel in...