BEAST-PoC

BEAST-PoC attacco a testo scelto Questa prova di concetto è incentrata sulla crittografia alla base dell'attacco BEAST Browser Exploit Against SSL/TLS presentato da Thai Duong e Juliano Rizzo il 23 settembre 2011. Si tratta di un attacco a testo scelto e consente di recuperare informazioni...

Openssl_V.1.1.1g

OpenSSL 1.1.1g 21 Apr 2020 Copyright c 1998-2020 The OpenSSL Project Copyright c 1995-1998 Eric A. Young, Tim J. Hudson All rights reserved. DESCRIÇÃO O Projeto OpenSSL é um esforço colaborativo para desenvolver um conjunto de ferramentas robusto, de nível comercial, completo e de código aberto q...

poodle-PoC

Poodle PoC 🐩 🐩 🐩 Ein Proof of Concept des Poodle-Angriffs Padding Oracle On Downgraded Legacy Encryption : ein Man-in-the-Middle-Exploit, der das Zurückfallen von Internet- und Sicherheitssoftware-Clients auf SSL 3.0 ausnutzt Der Poodle-Angriff ermöglicht es Ihnen, verschlüsselte Daten abzurufen,...

openssl

Welcome to the OpenSSL Project OpenSSL is a robust, commercial-grade, full-featured Open Source Toolkit for the Transport Layer Security TLS, formerly SSL, Datagram TLS DTLS, and QUIC protocols. The protocol implementations are based on a full-strength general purpose cryptographic library, which...

OpenSSL-CCS-Inject-Test

OpenSSL CCS Inject Test Questo script è progettato per il rilevamento di server vulnerabili CVE-2014-0224. in un'ampia gamma di configurazioni. Tenta di negoziare utilizzando ogni versione di protocollo interessata SSLv3, TLSv1, TLSv1.1 e TLSv1.2 pubblicizzando una serie completa di cipher...

a2sv

1. A2SV? Auto Scanning to SSL Vulnerability. HeartBleed, CCS Injection, SSLv3 POODLE, FREAK... etc A. Support Vulnerability root@kitploit: - CVE-2007-1858 Anonymous Cipher - CVE-2012-4929 CRIMESPDY - CVE-2014-0160 CCS Injection - CVE-2014-0224 HeartBleed - CVE-2014-3566 SSLv3 POODLE -...

mangy-beast

Mangy Beast Policy CloudPassage Halo per rilevare la vulnerabilità di CVE-2014-3566 nota anche come POODLE per host Red Hat che eseguono Apache e modssl o modnss e Windows Server 2008 e 2012 solo processi server Non abbiamo intenzione di riassumere i dettagli minuziosi della CVE-2014-3566,...

Security Bulletin: Vulnerability in SSLv3 affects IBM System Storage Tape Controller 3592 Model C07 (CVE-2014-3566)

Summary SSLv3 contains a vulnerability that has been referred to as the Padding Oracle On Downgraded Legacy Encryption POODLE attack. SSLv3 is enabled in IBM System Storage Tape Controller 3592 Model C07. Vulnerability Details CVE ID: CVE-2014-3566 DESCRIPTION: Product could allow a remote attack...

Security Bulletin: Vulnerability in SSLv3 affects TS3100/TS3200 (CVE-2014-3566)

Summary SSLv3 contains a vulnerability that has been referred to as the Padding Oracle On Downgraded Legacy Encryption POODLE attack. SSLv3 is enabled in TS3100/TS3200. Vulnerability Details CVE-ID : CVE-2014-3566 DESCRIPTION : Product could allow a remote attacker to obtain sensitive information...

MiracleLinux 4 : curl-7.19.7-46.AXS4 (AXSA:2015-432:02)

The remote MiracleLinux 4 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2015-432:02 advisory. cURL is a tool for getting files from HTTP, FTP, FILE, LDAP, LDAPS, DICT, TELNET and TFTP servers, using any of the supported protocols. cURL is...

EUVD-2016-4752

Malware in sbrugna...

EUVD-2019-6636

Malware in sbrugna...

EUVD-2013-6505

Malware in sbrugna...

EUVD-2015-4104

Malware in sbrugna...

EUVD-2014-6062

Malware in sbrugna...

wget security update

1.19.5-12.0.1 - SSLv3 support dropped from openssl, v3 test certificates need to be replaced Orabug: 29613455 1.19.5-12 - Resolves: RHEL-43559 - Misinterpretation of input may lead to improper behavior...

Oracle Linux 8 : wget (ELSA-2024-5299)

The remote Oracle Linux 8 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2024-5299 advisory. 1.19.5-12.0.1 - SSLv3 support dropped from openssl, v3 test certificates need to be replaced Orabug: 29613455 1.19.5-12 - Resolves: RHEL-43559 - Misinterpretati...

CVE-2024-0323

The FTP server used on the B&R Automation Runtime supports unsecure encryption mechanisms, such as SSLv3, TLSv1.0 and TLS1.1. An network-based attacker can exploit the flaws to conduct man-in-the-middle attacks or to decrypt communications between the affected product clients...

Design/Logic Flaw

Use of a Broken or Risky Cryptographic Algorithm vulnerability in B&R Industrial Automation Automation Runtime SDM modules. The FTP server used on the B&R Automation Runtime supports unsecure encryption mechanisms, such as SSLv3, TLSv1.0 and TLS1.1. An network-based attacker can exploit the flaws...

CVE-2024-0323 FTP uses unsecure encryption mechanisms

The FTP server used on the B&R Automation Runtime supports unsecure encryption mechanisms, such as SSLv3, TLSv1.0 and TLS1.1. An network-based attacker can exploit the flaws to conduct man-in-the-middle attacks or to decrypt communications between the affected product clients...