CVE-2026-59825 Mastodon: Unwanted deactivation of SSL/TLS certificate verification

Mastodon is a free, open-source social network server based on ActivityPub. Prior to 4.4.19 and from 4.5.0 until 4.5.12, Mastodon's app/models/concerns/user/ldapauthenticable.rb mutates OpenSSL::SSL::SSLContext::DEFAULTPARAMS when LDAP authentication uses LDAPTLSNOVERIFY=true, disabling SSL and T...

CVE-2026-48248

Open ISES Tickets before 3.44.2 disables TLS certificate verification in incs/login.inc.php by setting CURLOPTSSLVERIFYPEER to false and not setting CURLOPTSSLVERIFYHOST when issuing outbound HTTPS requests issued during the login/authentication flow. An attacker positioned on the network path...

EUVD-2014-5439

Malware in sbrugna...

EUVD-2014-6888

Malware in sbrugna...

EUVD-2014-7485

Malware in sbrugna...

EUVD-2014-7409

Malware in sbrugna...

EUVD-2014-5501

Malware in sbrugna...

EUVD-2014-5579

Malware in sbrugna...

EUVD-2014-6568

Malware in sbrugna...

EUVD-2014-5554

Malware in sbrugna...

EUVD-2014-5870

Malware in sbrugna...

EUVD-2014-7014

Malware in sbrugna...

EUVD-2014-5522

Malware in sbrugna...

EUVD-2014-5596

Malware in sbrugna...

EUVD-2014-5693

Malware in sbrugna...

EUVD-2014-6982

Malware in sbrugna...

EUVD-2014-6826

Malware in sbrugna...

EUVD-2014-7364

Malware in sbrugna...

EUVD-2014-5662

Malware in sbrugna...

EUVD-2014-7628

Malware in sbrugna...