CVE-2014-1266-poc

OS X/iOS SSL 취약점 POC 개요 이 저장소는 iOS와 OS X에서 최근 발견된 SSL 확인 취약점을 시연하는 몇 가지 Go 코드를 포함하고 있습니다. Apple 업데이트 공지 Adam Langley의 글 사용법 $ git clone https://github.com/gabrielg/CVE-2014-1266-poc.git $ cd CVE-2014-1266-poc $ go build main.go $ ./main In another terminal $ cd CVE-2014-1266-poc $ go run...

CVE-2026-60137-With-Skip-SSL

CVE-2026-60137-With-Skip-SSL SSL을 건너뛰도록 --insecure 추가 SSL 건너뛰기 없는 원본 : https://github.com/ZephrFish/wp2shell-scanner...

Amazon Linux 2023 : curl, curl-minimal, libcurl (ALAS2023-2026-3128)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2026-3128 advisory. When CURLOPTPINNEDPUBLICKEY is configured alongside options that disable standard peer verification CURLOPTSSLVERIFYPEER = 0 and CURLOPTSSLVERIFYHOST = 0, libcurl fails to enforce public key pinning on...

ALPINE-CVE-2026-80230

When CURLOPTPINNEDPUBLICKEY is configured alongside options that disable standard peer verification CURLOPTSSLVERIFYPEER = 0 and CURLOPTSSLVERIFYHOST = 0, libcurl fails to enforce public key pinning on connections established without a presented server certificate. Bypassing the pinning check und...

AZL-99770 CVE-2026-80230 affecting package curl 8.11.1-11

When CURLOPTPINNEDPUBLICKEY is configured alongside options that disable standard peer verification CURLOPTSSLVERIFYPEER = 0 and CURLOPTSSLVERIFYHOST = 0, libcurl fails to enforce public key pinning on connections established without a presented server certificate. Bypassing the pinning check und...

AZL-99846 CVE-2026-80230 affecting package rust 1.90.0-10

When CURLOPTPINNEDPUBLICKEY is configured alongside options that disable standard peer verification CURLOPTSSLVERIFYPEER = 0 and CURLOPTSSLVERIFYHOST = 0, libcurl fails to enforce public key pinning on connections established without a presented server certificate. Bypassing the pinning check und...

AZL-99789 CVE-2026-80230 affecting package mysql 8.0.46-1

When CURLOPTPINNEDPUBLICKEY is configured alongside options that disable standard peer verification CURLOPTSSLVERIFYPEER = 0 and CURLOPTSSLVERIFYHOST = 0, libcurl fails to enforce public key pinning on connections established without a presented server certificate. Bypassing the pinning check und...

AZL-99816 CVE-2026-80230 affecting package rust 1.75.0-30

When CURLOPTPINNEDPUBLICKEY is configured alongside options that disable standard peer verification CURLOPTSSLVERIFYPEER = 0 and CURLOPTSSLVERIFYHOST = 0, libcurl fails to enforce public key pinning on connections established without a presented server certificate. Bypassing the pinning check und...

CVE-2026-80230

When CURLOPTPINNEDPUBLICKEY is configured alongside options that disable standard peer verification CURLOPTSSLVERIFYPEER = 0 and CURLOPTSSLVERIFYHOST = 0, libcurl fails to enforce public key pinning on connections established without a presented server certificate. Bypassing the pinning check und...

CVE-2026-80230

The libcurl library contains a vulnerability where it fails to enforce public key pinning when CURLOPT_PINNEDPUBLICKEY is used in conjunction with options that disable standard peer verification (CURLOPT_SSL_VERIFYPEER = 0 and CURLOPT_SSL_VERIFYHOST = 0). Under these specific conditions, libcurl ...

EUVD-2026-72168

When CURLOPTPINNEDPUBLICKEY is configured alongside options that disable standard peer verification CURLOPTSSLVERIFYPEER = 0 and CURLOPTSSLVERIFYHOST = 0, libcurl fails to enforce public key pinning on connections established without a presented server certificate. Bypassing the pinning check und...

OpenSSL pinning bypass

When CURLOPTPINNEDPUBLICKEY is configured alongside options that disable standard peer verification CURLOPTSSLVERIFYPEER = 0 and CURLOPTSSLVERIFYHOST = 0, libcurl fails to enforce public key pinning on connections established without a presented server certificate. Bypassing the pinning check und...

PT-2026-84655

Name of the Vulnerable Software and Affected Versions curl affected versions not specified Description An issue exists where libcurl fails to enforce public key pinning when CURLOPT PINNEDPUBLICKEY is used in conjunction with options that disable standard peer verification, specifically CURLOPT S...

Security Bulletin: IBM Integrated Analytics System (IIAS) is affected by a vulnerability due to Apache Commons HttpClient

Summary Apache Commons HttpClient is used by IBM Integrated Analytics System as an HTTP client library. CVE-2012-6153 affects Apache HttpComponents due to an incomplete fix related to SSL certificate hostname verification. The library fails to verify that the server hostname matches the domain na...

CVE-2026-54481 Internal API HTTP client hardcodes InsecureSkipVerify:true with no config override (CWE-295)

Internal API HTTP client hardcodes InsecureSkipVerify:true with no config override CWE-295...

PYSEC-2026-1886 SageMaker Python SDK has Insecure TLS Configuration

Summary SageMaker Python SDK is an open source library for training and deploying machine learning models on Amazon SageMaker. An issue where SSL certificate verification was globally disabled in the Triton Python backend has been found. Impact Arbitrary Code Execution: Disabling SSL verification...

PYSEC-2026-1452 Home Assistant does not correctly validate SSL for outgoing requests in core and used libs

Summary Problem: Potential man-in-the-middle attacks due to missing SSL certificate verification in the project codebase and used third-party libraries. Details In the past, aiohttp-session/request had the parameter verifyssl to control SSL certificate verification. This was a boolean value. In...

Home Assistant does not correctly validate SSL for outgoing requests in core and used libs

SummaryProblem: Potential man-in-the-middle attacks due to missing SSL certificate verification in the project codebase and used third-party libraries. DetailsIn the past, aiohttp-session/request had the parameter verifyssl to control SSL certificate verification. This was a boolean value. In...

Fedora 43 : librabbitmq (2026-436ef78874)

The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-436ef78874 advisory. Version 0.17.0 - 2026-07-01 Security - Fix sizet overflow in amqpdecodebytes bounds check leading to out-of-bounds read GHSA- jgjf-7fwf-f3c7, 888 - Fix heap...

CVE-2026-42312

pyLoad is a free and open-source download manager written in Python. Prior to 0.5.0b3.dev100, the setconfigvalue API method @permissionPerms.SETTINGS in src/pyload/core/api/init.py gates security-sensitive options behind a hand-maintained allowlist ADMINONLYCOREOPTIONS. The option "general",...