rustls

Rustls — это современная библиотека TLS, написанная на Rust. Статус Rustls используется в продакшене во многих организациях и проектах. Мы стремимся поддерживать разумную стабильность поверхности API, но API может развиваться по мере внесения изменений для поддержки новых функций или улучшений...

macsurf

Le web moderne, sur un Mac de 25 ans. Un navigateur natif pour l'ère Carbon, de Mac OS 8.6 à Mac OS X 10.6 : vrai CSS, JavaScript moderne et HTTPS sur le Mac lui-même. Pas de proxy, pas de seconde machine. MacSurf 2.0.5 sur un Power Mac G3 iMac, affichanthackaday.com en pleine largeur de bureau v...

cve-2022-25640-exploit

Эксплуатация CVE-2022-25640 с помощью scapy См. CVE-2022-25640.ipynb. CVE-2022-25640 — это уязвимость в wolfSSL до версии 5.2. Она позволяет клиенту обойти взаимную аутентификацию в соединениях TLS 1.3...

ssh3

!NOTE SSH3 va probablement changer de nom. Il s'agit toujours du protocole de connexion SSH RFC4254 fonctionnant sur HTTP/3 Extended Connect, mais les modifications nécessaires sont lourdes et trop éloignées de la philosophie des implémentations SSH populaires pour être envisagées en vue d'une...

challenge_CVE-2020-13777

Задача CVE-2020-13777 Попробуйте доказать, возможен ли MITM для TLS 1.3 и расшифровать ранние данные 0-RTT в pcap здесь Сервер: 192.168.100.23:5556. Подробности см. на https://jovi0608.hatenablog.com/entry/2020/06/13/104905 и CVE-2020-13777...

CVE-2020-1967

CVE-2020-1967 Эксплойт для проверки концепции уязвимости OpenSSL signaturealgorithmscert DoS CVE-2020-1967. Автор первоначального обнаружения — Бернд Эдлингер, дополнительный анализ — Мэтт Кэсвелл и Бенджамин Кадук, данная демонстрация — Имре Рад. Предварительные требования Серверные или клиентск...

camel-pqc-tls

Постквантовый TLS с Apache Camel Этот репозиторий содержит три примера, демонстрирующих постквантовые PQC рукопожатия TLS 1.3 с Apache Camel, использующие гибридный обмен ключами X25519MLKEM768. X25519MLKEM768 сочетает классический X25519 эллиптическая кривая Диффи-Хеллмана с ML-KEM-768 —...

Rocky Linux 10.1 [CIQ] Security Update: openssl / openssl-debuginfo / openssl-debugsource / openssl-devel / etc Multiple Vulnerabilities (crlsa-2026_1472)

The Rocky Linux 10.1 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20261472 advisory. openssl: OpenSSL: Arbitrary code execution or denial of service through crafted PKCS12 file CVE-2025-11187 openssl: OpenSSL: Remote code execution or...

Rocky Linux 8 [CIQ] Security Update: nspr / nspr-debuginfo / nspr-debugsource / nspr-devel / nss / etc (crlsa-2021_3572)

The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20213572 advisory. nss: TLS 1.3 CCS flood remote DoS Attack CVE-2020-25648 Tenable has extracted the preceding description block directly from the CIQ security advisory. Note that...

Rocky Linux 9.6 [TuxCare] Security Update: buildah / buildah-tests (ALMALINUX9.6:CLSA-2026:1779182426)

The Rocky Linux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1779182426 advisory. - If one side of the TLS connection sends multiple key update messages post-handshake in a single record, the connection can deadlock,...

AlmaLinux 9.6 [TuxCare] Security Update: git-lfs Multiple Vulnerabilities (ALMALINUX9.6:CLSA-2026:1779120418)

The AlmaLinux 9.6 host has a package installed that is affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1779120418 advisory. - During chain building, the amount of work that is done is not correctly limited when a large number of intermediate certificates a...

Rocky Linux 10.2 [CIQ] Security Update: golang-github-openprinting-ipp-usb-debugsource / ipp-usb / etc Multiple Vulnerabilities (crlsa-2026_19144)

The Rocky Linux 10.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202619144 advisory. crypto/x509: golang: Go crypto/x509: Certificate validation bypass due to incorrect DNS constraint application CVE-2026-33810 golang:...

AlmaLinux 9.6 [TuxCare] Security Update: containernetworking-plugins Multiple Vulnerabilities (ALMALINUX9.6:CLSA-2026:1782832840)

The AlmaLinux 9.6 host has a package installed that is affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1782832840 advisory. - During chain building, the amount of work that is done is not correctly limited when a large number of intermediate certificates a...

Rocky Linux 9 [CIQ] Security Update: httpd / httpd-core / httpd-core-debuginfo / httpd-debuginfo / etc Multiple Vulnerabilities (crlsa-2025_15023)

The Rocky Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202515023 advisory. httpd: insufficient escaping of user-supplied data in modssl CVE-2024-47252 httpd: modssl: access control bypass by trusted clients is possible using TLS...

Rocky Linux 9.6 [TuxCare] Security Update: go-toolset / golang / golang-bin / golang-docs / golang-misc / etc Multiple Vulnerabilities (ALMALINUX9.6:CLSA-2026:1779153000)

The Rocky Linux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1779153000 advisory. - During chain building, the amount of work that is done is not correctly limited when a large number of intermediate certificates...

Rocky Linux 9 [CIQ] Security Update: skopeo / skopeo-debuginfo / skopeo-debugsource / skopeo-tests Multiple Vulnerabilities (crlsa-2026_28074)

The Rocky Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202628074 advisory. crypto/x509: golang: Go crypto/x509: Denial of Service via inefficient certificate chain validation CVE-2026-32281 crypto/tls: golang: Go crypto/tls: Deni...

AlmaLinux 9.6 [TuxCare] Security Update: podman / podman-docker / podman-plugins / podman-remote / etc Multiple Vulnerabilities (ALMALINUX9.6:CLSA-2026:1779701895)

The AlmaLinux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1779701895 advisory. - During chain building, the amount of work that is done is not correctly limited when a large number of intermediate certificates a...

Rocky Linux 10.1 [CIQ] Security Update: grafana-pcp / grafana-pcp-debuginfo / grafana-pcp-debugsource (crlsa-2026_11881)

The Rocky Linux 10.1 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202611881 advisory. crypto/tls: golang: Go crypto/tls: Denial of Service via multiple TLS 1.3 key update messages CVE-2026-32283 Tenable has extracted the preceding description blo...

Rocky Linux 10.0 [CIQ] Security Update: httpd / httpd-core / httpd-core-debuginfo / httpd-debuginfo / etc Multiple Vulnerabilities (crlsa-2025_15095)

The Rocky Linux 10.0 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202515095 advisory. httpd: insufficient escaping of user-supplied data in modssl CVE-2024-47252 httpd: modssl: access control bypass by trusted clients is possible using T...

Rocky Linux 9.6 [TuxCare] Security Update: git-lfs Multiple Vulnerabilities (ALMALINUX9.6:CLSA-2026:1779120418)

The Rocky Linux 9.6 host has a package installed that is affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1779120418 advisory. - During chain building, the amount of work that is done is not correctly limited when a large number of intermediate certificates...