276 matches found
c0ntextomy
c0ntextomy 引用元から切り離された文脈で提示され、本来の意味を歪める非形式的誤謬および誤った帰属の一種。 Wikipedia - コンテキストミー Contextomy デバッグセッションのハイジャック、リモートコード実行、機密データの流出を伴う脆弱性を示す概念実証。 アドバイザリ macOS/XcodeのMobileDevice.frameworkおよびiOS/iPadOS/tvOS向け開発ツールにおける設計上の欠陥により、サービス接続のセットアップで実際にSSLハンドシェイクが行われているにもかかわらず、ネットワーク上で平文通信が行われます。...
bladelogic_bmc-cve-2016-1542
bladelogicbmc-cve-2016-1542 insinuator.netによるCVE-2016-1542およびCVE-2016-1543向けエクスプロイトの再構築版です https://insinuator.net/2016/03/bmc-bladelogic-cve-2016-1542-and-cve-2016-1543/ 最近のペネトレーションテストでこのCVEに対して脆弱なシステムに遭遇し、insinuatorによるエクスプロイトを見つけました。しかし、不明な理由（新しいバージョンのPython...
CVE-2026-55856
A flaw was found in MariaDB Connector/J. An active man-in-the-middle MITM attacker or hostile server can exploit a vulnerability during the initial connection handshake. When a Java application connects using specific SSL modes without proper certificate configuration, the connector may accept an...
CVE-2026-13588
A vulnerability was determined in seladb PcapPlusPlus 25.05. The impacted element is the function pcpp::SSLClientHelloMessage::getHandshakeVersion of the file Packet++/src/SSLHandshake.cpp of the component TLS Hello Handler. Executing a manipulation of the argument handshakeVersion can lead to...
CVE-2026-13588
A vulnerability was determined in seladb PcapPlusPlus 25.05. The impacted element is the function pcpp::SSLClientHelloMessage::getHandshakeVersion of the file Packet++/src/SSLHandshake.cpp of the component TLS Hello Handler. Executing a manipulation of the argument handshakeVersion can lead to...
Security Bulletin: IBM DevOps Release addresses multiple vulnerabilities related to Apache Tomcat.
Summary IBM DevOps Release 7.0.0.6 addresses multiple vulnerabilities related to Apache Tomcat. Vulnerability Details CVEID:CVE-2025-12383 DESCRIPTION: In Eclipse Jersey versions 2.45, 3.0.16, 3.1.9 a race condition can cause ignoring of critical SSL configurations - such as mutual authentication...
Multiple Cisco Products Snort 3 DoS Vulnerabilities (cisco-sa-snort3-multi-dos-XFWkWSwz_CVE-2026-20005)
According to its self-reported version, Cisco ASA Software is affected by a vulnerability. - Multiple Cisco products are affected by a vulnerability in the Snort 3 Detection Engine that could allow an unauthenticated, remote attacker to cause the Snort 3 Detection Engine to restart, resulting in ...
CVE-2026-20005
Multiple Cisco products are affected by a vulnerability in the Snort 3 Detection Engine that could allow an unauthenticated, remote attacker to cause the Snort 3 Detection Engine to restart, resulting in an interruption of packet inspection. This vulnerability is due to incomplete parsing of the...
CVE-2009-4912
Cisco Adaptive Security Appliances ASA 5580 series devices with software before 8.12 complete an SSL handshake with an HTTPS client even if this client is unauthorized, which might allow remote attackers to bypass intended access restrictions via an HTTPS session, aka Bug ID CSCso10876...
CVE-1999-0751
Buffer overflow in Accept command in Netscape Enterprise Server 3.6 with the SSL Handshake Patch...
CVE-1999-0752
Denial of service in Netscape Enterprise Server via a buffer overflow in the SSL handshake...
PT-2025-47323
Name of the Vulnerable Software and Affected Versions Eclipse Jersey versions 2.45, 3.0.16, 3.1.9 Description A race condition in Eclipse Jersey’s SSL configuration processing can lead to the ignoring of critical SSL configurations, including mutual authentication and custom key/trust stores. Thi...
EUVD-2014-3549
Malware in sbrugna...
EUVD-2015-7005
Malware in sbrugna...
EUVD-1999-0733
Malware in sbrugna...
EUVD-2009-2057
Malware in sbrugna...
EUVD-2013-4409
Malware in sbrugna...
EUVD-2009-2058
Malware in sbrugna...