openssl

Welcome to the OpenSSL Project !openssl logowww.openssl.org !github actions ci badgegithub actions ci OpenSSL is a robust, commercial-grade, full-featured Open Source Toolkit for the Transport Layer Security TLS, formerly SSL, Datagram TLS DTLS, and QUIC protocols. The protocol implementations ar...

BEAST-PoC

BEAST-PoC chosen-plaintext attack This proof of concept is focused on the cryptography behind the BEAST Browser Exploit Against SSL/TLS attack presented by Thai Duong and Juliano Rizzo on September 23, 2011. This a chosen-plaintext attack and this allow you to retrieve sensitives informations if...

a2sv

1. A2SV? Auto Scanning to SSL Vulnerability. HeartBleed, CCS Injection, SSLv3 POODLE, FREAK... etc A. Support Vulnerability - CVE-2007-1858 Anonymous Cipher - CVE-2012-4929 CRIMESPDY - CVE-2014-0160 CCS Injection - CVE-2014-0224 HeartBleed - CVE-2014-3566 SSLv3 POODLE - CVE-2015-0204 FREAK Attack...

poodle-PoC

Poodle PoC 🐩 🐩 🐩 Poodle攻撃（Padding Oracle On Downgraded Legacy Encryption）の概念実装: SSL 3.0へのフォールバックを利用する、インターネットおよびセキュリティソフトウェアのクライアントに対する中間者攻撃 Poodle攻撃は、使用されているTransport Layer SecurityがSSLv3の場合に、クライアントからサーバーに送信された暗号化データを取得することを可能にします。リクエストの暗号化に使用された秘密鍵を取得することはできません。 1. 🐩 攻撃の概念 🐩 SSLv3とCBC暗号モード...

OpenSSL-CCS-Inject-Test

Prueba de Inyección CCS de OpenSSL Este script está diseñado para la detección de servidores vulnerables CVE-2014-0224 en una amplia gama de configuraciones. Intenta negociar usando cada versión de protocolo afectada SSLv3, TLSv1, TLSv1.1 y TLSv1.2 anunciando un conjunto completo de cifrados...

Openssl_V.1.1.1g

OpenSSL 1.1.1g 21 Apr 2020 Copyright c 1998-2020 The OpenSSL Project Copyright c 1995-1998 Eric A. Young, Tim J. Hudson 不許複製・無断転載を禁じます。 説明 OpenSSL Project は、堅牢で商用グレード、 完全な機能を備えたオープンソースツールキットと、 Transport Layer Security TLS プロトコル SSLv3 を含む を実装する 本格的な汎用暗号ライブラリを開発するための共同プロジェクトです。 OpenSSL は、Eric A...

mangy-beast

Mangy Beast CloudPassage Halo policy for detecting vulnerability to CVE-2014-3566 AKA POODLE for Red Hat hosts running Apache and modssl or modnss and Windows Server 2008 and 2012 server processes only We're not going to rehash the minute details of CVE-2014-3566, otherwise known as POODLE. If...

wget security, bug fix, and enhancement update

1.19.5-16.0.1 - SSLv3 support dropped from openssl, v3 test certificates need to be replaced Orabug: 29613455 1.19.5-16 - Resolves: RHEL-145875 - async unsafe code in signal handler context 1.19.5-15 - Fix CVE-2026-58469: buffer underflow in cleanmetalinkstring - Resolves: RHEL-212496 1.19.5-14 -...

Security Bulletin: Vulnerability in SSLv3 affects IBM System Storage Tape Controller 3592 Model C07 (CVE-2014-3566)

Summary SSLv3 contains a vulnerability that has been referred to as the Padding Oracle On Downgraded Legacy Encryption POODLE attack. SSLv3 is enabled in IBM System Storage Tape Controller 3592 Model C07. Vulnerability Details CVE ID: CVE-2014-3566 DESCRIPTION: Product could allow a remote attack...

Security Bulletin: Vulnerability in SSLv3 affects TS3100/TS3200 (CVE-2014-3566)

Summary SSLv3 contains a vulnerability that has been referred to as the Padding Oracle On Downgraded Legacy Encryption POODLE attack. SSLv3 is enabled in TS3100/TS3200. Vulnerability Details CVE-ID : CVE-2014-3566 DESCRIPTION : Product could allow a remote attacker to obtain sensitive information...

MiracleLinux 4 : curl-7.19.7-46.AXS4 (AXSA:2015-432:02)

The remote MiracleLinux 4 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2015-432:02 advisory. cURL is a tool for getting files from HTTP, FTP, FILE, LDAP, LDAPS, DICT, TELNET and TFTP servers, using any of the supported protocols. cURL is...

EUVD-2016-4752

Malware in sbrugna...

EUVD-2019-6636

Malware in sbrugna...

EUVD-2015-4104

Malware in sbrugna...

EUVD-2013-6505

Malware in sbrugna...

EUVD-2014-6062

Malware in sbrugna...

wget security update

1.19.5-12.0.1 - SSLv3 support dropped from openssl, v3 test certificates need to be replaced Orabug: 29613455 1.19.5-12 - Resolves: RHEL-43559 - Misinterpretation of input may lead to improper behavior...

Oracle Linux 8 : wget (ELSA-2024-5299)

The remote Oracle Linux 8 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2024-5299 advisory. 1.19.5-12.0.1 - SSLv3 support dropped from openssl, v3 test certificates need to be replaced Orabug: 29613455 1.19.5-12 - Resolves: RHEL-43559 - Misinterpretati...

CVE-2024-0323

The FTP server used on the B&R Automation Runtime supports unsecure encryption mechanisms, such as SSLv3, TLSv1.0 and TLS1.1. An network-based attacker can exploit the flaws to conduct man-in-the-middle attacks or to decrypt communications between the affected product clients...

Design/Logic Flaw

Use of a Broken or Risky Cryptographic Algorithm vulnerability in B&R Industrial Automation Automation Runtime SDM modules. The FTP server used on the B&R Automation Runtime supports unsecure encryption mechanisms, such as SSLv3, TLSv1.0 and TLS1.1. An network-based attacker can exploit the flaws...