CVE-2020-1967

CVE-2020-1967 Prueba de concepto de exploit sobre la vulnerabilidad DoS de OpenSSL signaturealgorithmscert CVE-2020-1967. Créditos del hallazgo original a Bernd Edlinger, análisis adicional por Matt Caswell y Benjamin Kaduk, esta demo por Imre Rad. Requisito previo Aplicaciones de servidor o...

macsurf

Das moderne Web, auf einem 25 Jahre alten Mac. MacSurf ist ein Webbrowser für Classic Mac OS 9 PowerPC. CSS3, ES5-JavaScript und PNGs mit Alphakanal – lauffähig auf einem G3 iMac. MacSurf ist ein Vollzeitprojekt. Wenn es deinen alten Mac zurück ins Web gebracht hat, hilft jeder Dollar, die...

PoC_TLS1_3_CVE-2020-13777

PoC TLS1.3 CVE-2020-13777 الغرض من هذا الـ PoC تم إنشاء هذا الـ PoC والمقالة ذات الصلة للتقديم على مشروع «Challenge CVE-2020-13777». CVE-2020-13777 هو ثغرة أمنية في GnuTLS تم توزيع التصحيح الخاص بها على نطاق واسع. يهدف هذا الـ PoC إلى المساهمة في تحسين الثقافة الأمنية للمعلومات لدى الأشخاص العامل...

ssh3

!NOTE SSH3 wird wahrscheinlich seinen Namen ändern. Es ist immer noch das SSH-Verbindungsprotokoll RFC4254, das auf HTTP/3 Extended Connect läuft, aber die erforderlichen Änderungen sind umfangreich und zu weit entfernt von der Philosophie gängiger SSH-Implementierungen, um für eine Integration i...

crypto/tls: golang: Go crypto/tls: Denial of Service via multiple TLS 1.3 key update messages

A flaw was found in the crypto/tls package within the Go golang standard library, specifically affecting TLS 1.3 connections. A remote attacker can exploit this vulnerability by sending multiple key update messages in a single record after the handshake. This can cause the connection to deadlock,...

challenge_CVE-2020-13777

Sfida CVE-2020-13777 Prova a dimostrare se è possibile un MITM TLS 1.3 e decifrare i dati early data 0-RTT in pcap qui Server: 192.168.100.23:5556. Vedi https://jovi0608.hatenablog.com/entry/2020/06/13/104905 e CVE-2020-13777 per i dettagli...

cve-2022-25640-exploit

Ausnutzung von CVE-2022-25640 mit scapy Siehe CVE-2022-25640.ipynb. CVE-2022-25640 ist eine Schwachstelle in wolfSSL vor Version 5.2. Sie ermöglicht es einem Client, die mututation Authentifizierung in TLS 1.3-Verbindungen zu umgehen...

Security update for go1.25-openssl

This update for go1.25-openssl fixes the following issues: Update to version 1.25.14 cut from the go1.25-fips-release branch at the revision tagged go1.25.14-1-openssl-fips. Security issues fixed: CVE-2026-33818: encoding/asn1: stack exhaustion when parsing deeply-nested, recursive structures can...

Important: Red Hat Security Advisory: OpenShift Container Platform 4.21.30 security and extras update

Red Hat OpenShift Container Platform release 4.21.30 is now available with updates to packages and images that fix several bugs. This release includes a security update for Red Hat OpenShift Container Platform 4.21. Red Hat Product Security has rated this update as having a security impact of...

CVE-2026-74611

A flaw was found in the Linux kernel's Transport Layer Security TLS 1.3 implementation. When processing TLS 1.3 records with optimistic zero-copy enabled, the tlsdecryptsg function fails to properly restore the message iterator during a retry. A remote attacker, by sending a specially crafted TLS...

rustls

Rustls è una moderna libreria TLS scritta in Rust. Stato Rustls è usato in produzione in molte organizzazioni e progetti. Miriamo a mantenere una ragionevole stabilità della superficie API, ma l'API potrebbe evolversi man mano che apportiamo modifiche per introdurre nuove funzionalità o...

CVE-2025-23048-POC

CVE-2025-23048: Bypass del certificato client nella ripresa della sessione TLS 1.3 di Apache modssl Le versioni 2.4.35 – 2.4.62 di Apache HTTP Server sono vulnerabili a un bypass dell'autenticazione tramite certificato client quando la ripresa della sessione TLS 1.3 viene utilizzata tra virtual...

camel-pqc-tls

TLS Post-Quantum con Apache Camel Questa repository contiene tre esempi che dimostrano gli handshake TLS 1.3 con crittografia post-quantistica PQC con Apache Camel, utilizzando lo scambio di chiavi ibrido X25519MLKEM768. X25519MLKEM768 combina il classico X25519 Diffie-Hellman su curva ellittica...

SUSE CVE-2026-74611

In the Linux kernel, the following vulnerability has been resolved: tls: rx: restore msgiter before TLS 1.3 optimistic retry tlsdecryptsg advances msg-msgiter when it maps user pages for the optimistic TLS 1.3 zero-copy path. If the decrypted record turns out not to be unpadded application data,...

CVE-2026-74611

In the Linux kernel, the following vulnerability has been resolved: tls: rx: restore msgiter before TLS 1.3 optimistic retry tlsdecryptsg advances msg-msgiter when it maps user pages for the optimistic TLS 1.3 zero-copy path. If the decrypted record turns out not to be unpadded application data,...

CVE-2026-74611

CVE-2026-74611 affects the Linux kernel TLS 1.3 receive path. When optimistic zero-copy is enabled via TLS_RX_EXPECT_NO_PAD, tls_decrypt_sg() advances msg->msg_iter to map user pages. If the decrypted record is not unpadded application data (e.g., a TLS 1.3 control record), tls_decrypt_sw() re...

CVE-2026-74611 tls: rx: restore msg_iter before TLS 1.3 optimistic retry

In the Linux kernel, the following vulnerability has been resolved: tls: rx: restore msgiter before TLS 1.3 optimistic retry tlsdecryptsg advances msg-msgiter when it maps user pages for the optimistic TLS 1.3 zero-copy path. If the decrypted record turns out not to be unpadded application data,...

EUVD-2026-64548

In the Linux kernel, the following vulnerability has been resolved: tls: rx: restore msgiter before TLS 1.3 optimistic retry tlsdecryptsg advances msg-msgiter when it maps user pages for the optimistic TLS 1.3 zero-copy path. If the decrypted record turns out not to be unpadded application data,...

Linux Distros Unpatched Vulnerability : CVE-2026-74611

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - tls: rx: restore msgiter before TLS 1.3 optimistic retry tlsdecryptsg advances msg-msgiter when it maps user pages for the optimistic TLS 1.3 zero-copy path. If...

PT-2026-79616

In the Linux kernel, the following vulnerability has been resolved: tls: rx: restore msg iter before TLS 1.3 optimistic retry tls decrypt sg advances msg-msg iter when it maps user pages for the optimistic TLS 1.3 zero-copy path. If the decrypted record turns out not to be unpadded application...