CVE-2026-86131

A code injection vulnerability exists in the WatchGuard Fireware OS during the handling of BOVPN Over TLS client configurations. This flaw allows an attacker who controls a remote VPN server to execute arbitrary commands with root privileges on the connecting Firebox . No specific patch versions ...

CVE-2022-3602

Detección para CVE-2022-3602 - OpenSSL RCE/DOC v3.0.0 - v3.0.6 Detecta cuando la cabecera HTTP Server indica que la versión de OpenSSL es vulnerable a CVE-2022-3602 es decir, v3.0.0 a v3.0.6 inclusive. Detecta intentos de explotación en TLS v1.2. Referencias:...

sslx

sslx openssl，但你无需去搜索标志参数。 一个单一二进制文件，处理证书、TLS连接以及所有通常需要三次不同openssl调用才能搞定的事情。基于Rust和rustls构建，无需系统OpenSSL。 安装 cargo install sslx 预构建二进制文件见发布页面。 Homebrew: brew install glincker/tap/sslx 或直接下载： macOS Apple Silicon curl -fsSL https://github.com/glincker/sslx/releases/latest/download/sslx-macos-aarch64 ...

EUVD-2026-71494

undici vulnerable to TLS certificate validation bypass via dropped connect options in BalancedPool...

undici vulnerable to TLS certificate validation bypass via dropped connect options in BalancedPool

Impact undici's BalancedPool passes its constructor options through a JSON-based deep clone JSON.parseJSON.stringify... before forwarding them to each per-upstream Pool. JSON cannot represent functions, so a caller-supplied connect or tls option containing a checkServerIdentity callback or a cust...

NPM: undici vulnerable to TLS certificate validation bypass via dropped connect options in BalancedPool

NPM: undici vulnerable to TLS certificate validation bypass via dropped connect options in BalancedPool vulnerability discovered by ? in WordPress Npm undici versions = 7.24.1, 7.29.1...

CVE-2026-102759

NetX Secure TLS accepts an empty application-data record without verifying its message authentication code. In nxsecureverifymac, a decrypted application record whose length equals the negotiated MAC size is treated as valid and returns success after advancing the receive sequence number. The...

CVE-2026-102758

The nxsecurex509asn1tlvblockparse function parses ASN.1 TLV tag-length-value blocks out of DER-encoded data. It is the primitive underneath all X.509 certificate parsing in NetX Secure, and therefore runs on certificates supplied by a remote peer during the TLS handshake. The function reads the...

CVE-2026-102728

Two client-side TLS/DTLS handshake parsers in NetX Secure read fields from a server-supplied message before validating that the message is long enough to contain them. Both are bounded out-of-bounds reads on a remotely reachable path, both are reached from a TLS or DTLS client connecting to a...

CVE-2018-6789

CVE-2018-6789 环境搭建 安装依赖 apt-get install gcc net-tools vim gdb python wget git make procps libpcre3-dev libdb-dev libxt-dev libxaw7-dev 下载旧版本的exim wget ftp://mirror.easyname.at/exim-ftp/exim/exim4/old/exim-4.89.tar.gz tar -xvzf ./exim-4.89.tar.gz cd ./exim-4.89 cp src/EDITME Local/Makefile cp...

cve-2009-3555-test-server

¿Qué es esto? Esto es un servidor TLS que utiliza un fork integrado del stack TLS de Go que tiene la extensión de indicación de renegociación forzosamente deshabilitada, lo que activará las mitigaciones de CVE-2009-3555 en OpenSSL 3.0+. Tenga en cuenta que no es realmente vulnerable a CVE-2009-35...

zclaw

zclaw 适用于 ESP32 的最小 AI 个人助手。 zclaw 使用 C 语言编写，运行在 ESP32 开发板上，默认构建的固件总大小严格限制在 = 888 KiB。它支持定时任务、GPIO 控制、持久化内存以及通过自然语言组合自定义工具。 888 KiB 上限是固件总大小，不仅仅是应用代码。它包括 zclaw 逻辑以及 ESP-IDF/FreeRTOS 运行时、Wi-Fi/网络、TLS/加密和证书包开销。 使用有趣，破解也有趣。 完整文档 使用文档站点获取完整指南和参考。 完整文档 本地管理控制台 使用场景：有用 + 有趣 变更日志（网页版） 完整 README（原文） 快速开始...

OpenSSL-1_0_1g_CVE-2016-0702

OpenSSL 1.0.1g 7 Abr 2014 Copyright c 1998-2011 The OpenSSL Project Copyright c 1995-1998 Eric A. Young, Tim J. Hudson Todos los derechos reservados. DESCRIPCIÓN El Proyecto OpenSSL es un esfuerzo colaborativo para desarrollar un conjunto de herramientas robusto, de grado comercial, completo y de...

CVE-2026-102728

Two client-side TLS/DTLS handshake parsers in NetX Secure are vulnerable to bounded out-of-bounds reads . The root cause is a logic flaw where the software reads fields from a server-supplied message before validating that the message is sufficiently long. Although bounds checks exist and return ...

EUVD-2026-89195

Two client-side TLS/DTLS handshake parsers in NetX Secure read fields from a server-supplied message before validating that the message is long enough to contain them. Both are bounded out-of-bounds reads on a remotely reachable path, both are reached from a TLS or DTLS client connecting to a...

ssrf-sheriff

SSRF Sheriff This is an SSRF testing sheriff written in Go. It was originally created for the Uber H1-4420 2019 London Live Hacking Event, but it is now being open-sourced for other organizations to implement and contribute back to. Features Respond to any HTTP method GET, POST, PUT, DELETE, etc...

game-of-kingshot-re

got-re — 逆向工程：权力与纷争（Android） 教育性质项目。 目标是理解一款现代 Unity/IL2CPP Android 游戏如何通信，其原生保护 SDK 如何工作，以及如何对真实 APK 应用静态 + 动态分析技术。 这是什么 本仓库记录了对 com.run.tower.defense （权力与纷争）进行的持续逆向工程研究。这是一款采用 IL2CPP 运行时、集成多种原生保护 SDK 并使用自定义二进制网关协议的 Unity 游戏。 不涉及作弊、利用漏洞或修改游戏实时数据。重点纯粹在于理解内部架构。 已发现内容 领域| 状态| 关键发现 ---|---|--- 网关协议（...

macsurf

现代网络，运行在 25 年前的 Mac 上。 一款面向 Carbon 时代的原生浏览器，支持 Mac OS 8.6 至 Mac OS X 10.6：真正的 CSS、现代 JavaScript，以及直接在 Mac 本机上运行的 HTTPS。无需代理，无需第二台机器。 MacSurf 2.0.5 在 Power Mac G3 iMac 上，通过原生 HTTPS 以完整桌面宽度渲染hackaday.com。 🆓 每月免费稳定版 在 macsurf.org 上发布的经过测试的构建版本，对所有人免费，背后有真实的硬件测试。 最新稳定版：MacSurf 2.3 "OPEN TABS" | ⭐...

pgbackrest

pgBackRest Copia de seguridad y restauración confiable de PostgreSQL Introducción pgBackRest es una solución confiable de copia de seguridad y restauración para PostgreSQL que escala sin problemas hasta las bases de datos y cargas de trabajo más grandes. pgBackRest v2.59.2 es la versión estable...

CVE-2026-35189

A flaw was found in OpenSSL. A remote attacker can cause a Denial of Service DoS by presenting a specially crafted certificate during a Transport Layer Security TLS handshake. When OpenSSL processes and caches certificate extensions containing numerous Certificate Revocation List CRL distribution...