OpenSSL_1_0_1g_CVE-2015-1788

OpenSSL 1.0.1g 7. April 2014 Copyright c 1998-2011 The OpenSSL Project Copyright c 1995-1998 Eric A. Young, Tim J. Hudson Alle Rechte vorbehalten. BESCHREIBUNG Das OpenSSL-Projekt ist eine gemeinschaftliche Anstrengung, ein robustes, kommerzielles, voll ausgestattetes Open-Source-Toolkit zu...

OpenSSL-1_0_1g_CVE-2015-3194

OpenSSL 1.0.1g 7 Apr 2014 कॉपीराइट c 1998-2011 The OpenSSL Project कॉपीराइट c 1995-1998 Eric A. Young, Tim J. Hudson सर्वाधिकार सुरक्षित। विवरण OpenSSL प्रोजेक्ट एक सहयोगात्मक प्रयास है जो एक मजबूत, व्यावसायिक-ग्रेड, पूर्ण-विशेषताओं वाला और ओपन सोर्स टूलकिट विकसित करने के लिए है जो सिक्योर सॉकेट...

openSSL_1.0.1g_CVE-2014-3507

OpenSSL 1.0.1g 7 Apr 2014 Copyright c 1998-2011 The OpenSSL Project Copyright c 1995-1998 Eric A. Young, Tim J. Hudson All rights reserved. DESCRIÇÃO O Projeto OpenSSL é um esforço colaborativo para desenvolver um kit de ferramentas robusto, de nível comercial, completo e de código aberto que...

sslsplit

SSLsplit - intercepção transparente de SSL/TLS https://www.roe.ch/SSLsplit Visão Geral O SSLsplit é uma ferramenta para ataques de intermediário man-in-the-middle contra conexões de rede criptografadas com SSL/TLS. Ele foi projetado para ser útil em análises forenses de rede, análise de segurança...

sslyze

SSLyze SSLyze è uno strumento di scansione SSL/TLS rapido e potente, nonché una libreria Python. SSLyze può analizzare la configurazione SSL/TLS di un server connettendosi ad esso, per garantire che utilizzi impostazioni di crittografia robuste certificato, suite di cifratura, curve ellittiche,...

badssl.com

Visita badssl.com per un elenco di sottodomini di test, tra cui: self-signed.badssl.com expired.badssl.com mixed.badssl.com rc4.badssl.com hsts.badssl.com Configurazione del server VM Ubuntu standard, record DNS A per badssl.com. e puntano alla VM...

nuclei-templates

Nuclei Templates Community curated list of templates for the nuclei engine to find security vulnerabilities in applications. Documentation • Contributions • Discussion • Community • FAQs • Join Discord Templates are the core of the which powers the actual scanning engine. This repository stores a...

SSLPatch

SSL पैच CVE-2014-1266 कॉपीराइट c 2014 लिनस यांग परिचय CVE-2014-1266 , जिसे "goto fail SSL सत्यापन शोषण" के नाम से जाना जाता है, iOS और OS X की एक बहुत गंभीर SSL/TLS कमजोरी है। Apple ने इस समस्या को ठीक करने के लिए iOS 6.1.6 और 7.0.6 जारी किए, लेकिन कुछ उपयोगकर्ताओं को अनदेखा कर दिया जो अपने सिस्ट...

OpenSSL-1_0_1g_CVE-2015-1791

OpenSSL 1.0.1g 7 Apr 2014 Copyright c 1998-2011 The OpenSSL Project Copyright c 1995-1998 Eric A. Young, Tim J. Hudson Tutti i diritti riservati. DESCRIZIONE Il progetto OpenSSL è uno sforzo collaborativo per sviluppare un toolkit robusto, di livello commerciale, completo e open source che...

AcrStealer-Custom-Protocol-Credential-Theft-Payload-Extraction-Analysis

1. Connessioni di rete e configurazione SSL/TLS L'analisi della memoria di Process Hacker rivela che AcrStealer stabilisce connessioni di rete utilizzando SSL/TLS per la comunicazione sicura con il suo server C2. Osservazioni chiave: SslClientCert – Usa certificati client per l'autenticazione...

certdepot

Certificate Depot Uno strumento online gratuito per generare certificati SSL/TLS autofirmati in pochi secondi. Nessuna registrazione richiesta. Sito web: cert-depot.com Caratteristiche Genera certificati autofirmati con chiavi RSA 2048/4096 o ECDSA P-256/P-384 Scarica come ZIP chiave PEM +...

sslsplit

SSLsplit - transparent SSL/TLS interception https://www.roe.ch/SSLsplit Overview SSLsplit is a tool for man-in-the-middle attacks against SSL/TLS encrypted network connections. It is intended to be useful for network forensics, application security analysis and penetration testing. SSLsplit is...

CVE-2026-14456 vulnerabilities

Vulnerabilities for packages: openssl...

DEBIAN-CVE-2026-63336

The RabbitMQ Java client library allows Java and JVM-based applications to connect to and interact with RabbitMQ nodes. Prior to 5.33.0, com.rabbitmq.client.ConnectionFactory.useSslProtocol and ConnectionFactory.useSslProtocolString configure com.rabbitmq.client.TrustEverythingTrustManager and...

CVE-2026-63336 RabbitMQ Java client: TrustEverythingTrustManager used by default in useSslProtocol() enables MITM

The RabbitMQ Java client library allows Java and JVM-based applications to connect to and interact with RabbitMQ nodes. Prior to 5.33.0, com.rabbitmq.client.ConnectionFactory.useSslProtocol and ConnectionFactory.useSslProtocolString configure com.rabbitmq.client.TrustEverythingTrustManager and...

CVE-2026-59825

When LDAP auth uses LDAP_TLS_NO_VERIFY=true, app/models/concerns/user/ldap_authenticable.rb mutates OpenSSL::SSL::SSLContext::DEFAULT_PARAMS, disabling SSL/TLS verification globally for puma web processes. This enables MITM attacks against all puma-originated HTTPS requests. Fixed in Mastodon 4.4...

EUVD-2026-60953

Mastodon is a free, open-source social network server based on ActivityPub. Prior to 4.4.19 and from 4.5.0 until 4.5.12, Mastodon's app/models/concerns/user/ldapauthenticable.rb mutates OpenSSL::SSL::SSLContext::DEFAULTPARAMS when LDAP authentication uses LDAPTLSNOVERIFY=true, disabling SSL and T...

CVE-2026-59825 Mastodon: Unwanted deactivation of SSL/TLS certificate verification

Mastodon is a free, open-source social network server based on ActivityPub. Prior to 4.4.19 and from 4.5.0 until 4.5.12, Mastodon's app/models/concerns/user/ldapauthenticable.rb mutates OpenSSL::SSL::SSLContext::DEFAULTPARAMS when LDAP authentication uses LDAPTLSNOVERIFY=true, disabling SSL and T...

CVE-2026-59825 Mastodon: Unwanted deactivation of SSL/TLS certificate verification

Mastodon is a free, open-source social network server based on ActivityPub. Prior to 4.4.19 and from 4.5.0 until 4.5.12, Mastodon's app/models/concerns/user/ldapauthenticable.rb mutates OpenSSL::SSL::SSLContext::DEFAULTPARAMS when LDAP authentication uses LDAPTLSNOVERIFY=true, disabling SSL and T...

K000162943: Spring boot vulnerability CVE-2026-40992

Security Advisory Description Spring Boot's Mail auto-configuration does not enable hostname verification. Applications that set the relevant JavaMail property, such as spring.mail.properties.mail.smtp.ssl.checkserveridentity=true, are not affected. Affected versions: Spring Boot 4.0.0 through...