CVE-2024-41958-PoC

CVE-2024-41958-PoC This is a small proof of concept for CVE-2024-41958. It is possible to bypass the TFA authentication on the admin panel. Affected versions: 2024-07 Prerequisites needed for the CVE to function: Password and username for an account without TFA. Password and username for an accou...

CVE-2026-123877

A certificate validation bypass in Node.js https.Agent lets a cached TLS session authenticated under one CA policy be reused by a later request with a stricter policy. https.Agent.prototype.getName assigns the same Agent and session-cache key to a request that omits ca and one that explicitly...

fortinet-cve-2024-50562

Fortinet SSL-VPN Session Reuse Vulnerability CVE-2024-50562 Professional, permission-only scanner that proves whether a FortiGate invalidates session cookies after logout. A positive finding confirms CVE-2024-50562 — an Insufficient Session Expiration flaw CWE-613 that lets an attacker replay a...

CVE-2026-123877

A flaw was found in Node.js. When managing outbound HTTPS connections, the client connection agent generates identical session-cache keys for requests with differing Certificate Authority CA trust configurations. Consequently, an existing Transport Layer Security TLS session established under a...

CVE-2026-123877

A certificate validation bypass exists in the Node.js https.Agent component affecting versions 26.x , 24.x , and 22.x . The vulnerability arises because https.Agent.prototype.getName() assigns the same session-cache key to requests that omit the ca property and those that explicitly provide ca: [...

CVE-2026-123877 Node.js is vulnerable to a certificate validation bypass in https.Agent via cross-policy TLS session reuse

A certificate validation bypass in Node.js https.Agent lets a cached TLS session authenticated under one CA policy be reused by a later request with a stricter policy. https.Agent.prototype.getName assigns the same Agent and session-cache key to a request that omits ca and one that explicitly...

nodejs: HTTPS Agent TLS session reuse skips hostname verification

A flaw was found in Node.js. An incomplete fix for a previous vulnerability allows the HTTPS Agent to reuse Transport Layer Security TLS sessions, bypassing hostname verification across different identity policies. This could enable an attacker to impersonate a legitimate server, leading to...

CVE-2025-23419

🔐 TLS Session Reuse Exploit Tester $ BY XIT A Python-based tool to test potential TLS session reuse vulnerabilities that may allow authentication bypass in misconfigured servers. ⚠️ Disclaimer This tool is for educational and authorized security testing purposes only. Do NOT use it on systems...

Node.js < 22.23.5, < 24.22.3, < 26.13.1 - Improper Certificate Validation via an https.Agent Session Cache Key Collision Between Omitted and Empty ca leading to Cross-Policy Session Reuse

Improper Certificate Validation via an https.Agent Session Cache Key Collision Between Omitted and Empty ca leading to Cross-Policy Session Reuse vulnerability discovered by ? in WordPress npm Node.js versions 26.13.1...

nodejs: HTTPS Agent TLS session reuse skips hostname verification

A flaw was found in Node.js. An incomplete fix for a previous vulnerability allows the HTTPS Agent to reuse Transport Layer Security TLS sessions, bypassing hostname verification across different identity policies. This could enable an attacker to impersonate a legitimate server, leading to...

CVE-2026-41940-Detection

CVE-2026-41940 Detection Detection rules and log schemas for the cPanel/WHM authentication bypass CVE-2026-41940, by Unfold Security. Blog post: cPanel Exploit — CVE-2026-41940 Structure ├── cpanelcve202641940malget.yml SIGMA rule — detects the CRLF injection request ├──...

CVE-2026-117549 @fastify/secure-session vulnerable to signature verification bypass via cookie signature removal

@fastify/secure-session is a session plugin for Fastify that stores an encrypted session in a cookie. In versions 7.5.0 through 8.4.1, when the plugin is configured with the signed cookie option, it calls the cookie unsign routine but, when the signature check reports the value as invalid, still...

CLEANSTART-2025-AA04470 TLS session reuse can lead to host certificate verification bypass in node version < 12

CVE-2020-8172 affects multiple packages. TLS session reuse can lead to host certificate verification bypass in node version 12. See references for individual vulnerability details...

PT-2026-133716

SecureDrop is an open-source whistleblower submission system that media organizations can use to securely accept documents from, and communicate with anonymous sources. From 2.5.0 until 2.16.0, the Journalist Interface can accept an API session token against the web UI because its SessionInterfac...

Node.js 26.5.0 HTTPS Agent Session Reuse Verification Bypass

Node.js versions before 22.23.2, 24.18.1, and 26.5.1 contain an HTTPS Agent TLS session reuse flaw that can skip hostname verification across identity policies. This offline checker assesses supplied version evidence and does not test exploitability. https://packetstorm.news/download/237495...

Node.js 26.5.0 HTTPS Agent TLS Session Reuse Hostname Verification Bypass

Node.js versions 22.x, 24.x, and 26.x prior to 22.23.2, 24.18.1, and 26.5.1 respectively contain an HTTPS Agent TLS session reuse issue that can skip hostname verification across identity policies. This advisory provides research and an implementation checklist; it contains no checker...

CVE-2026-99059

In the Linux kernel, the following vulnerability has been resolved: wireguard: noise: reject response consumption after intermediate initiation Two threads begin processing the identical response message, received twice. The first thread, A, runs. While it's running, the second one, B, gets partw...

EUVD-2026-108725

In the Linux kernel, the following vulnerability has been resolved: wireguard: noise: reject response consumption after intermediate initiation Two threads begin processing the identical response message, received twice. The first thread, A, runs. While it's running, the second one, B, gets partw...

CVE-2026-99059

The Linux kernel contains a vulnerability in the WireGuard noise protocol where two threads may process the same response message simultaneously. A race condition occurs because while thread B is performing a slow calculation, thread A completes and a third thread C initiates a new handshake, res...

CVE-2026-99059 wireguard: noise: reject response consumption after intermediate initiation

In the Linux kernel, the following vulnerability has been resolved: wireguard: noise: reject response consumption after intermediate initiation Two threads begin processing the identical response message, received twice. The first thread, A, runs. While it's running, the second one, B, gets partw...