107 matches found
bmcweb
OpenBMC Webๆๅกๅจ ่ฏฅ็ปไปถๆจๅจๆไธบ OpenBMC ็โๅ จ่ฝๅโๅตๅ ฅๅผ Web ๆๅกๅจใ ็นๆง ่ฏฅ Web ๆๅกๅจๅฎ็ฐไบๅ ไธชไธๅ็ๆฅๅฃ๏ผ DBus ไบไปถ WebSocketใๅ ่ฎธๆณจๅๅฏน็นๅฎ dbus ่ทฏๅพๅๅฑๆง็ๅๆด๏ผ ๅฆๆ่ฟไบ่ฟๆปคๅจๅน้ ๏ผๅฐ้่ฟ WebSocket ๅ้ไบไปถใ OpenBMC DBus REST APIใๅ ่ฎธ็ดๆฅใไฝๅนฒๆฐใ้ซไฟ็ๅฐ่ฎฟ้ฎ dbus ๅๅ ถๆ่กจ็คบ็ๅฏน่ฑกใ ไธฒๅฃ๏ผSerial๏ผ๏ผ็จไบ้่ฟ WebSocket ไธไธปๆบไธฒๅฃๆงๅถๅฐไบคไบ็ไธฒๅฃ WebSocketใ Redfish๏ผไธไธช็ฌฆๅๅ่ฎฎ็ DBus ๅฐ Redfish ่ฝฌๆขๅจใ KVM๏ผๅบไบ...
CVE-2026-0073-Android-ADBD-bypass-POC_zh_CN
CVE-2026-0073 โ Android ADBD TLS ่บซไปฝ้ช่ฏ็ป่ฟ EVPPKEYcmp ็ฑปๅๆททๆท โ ๆช็ปๆๆ็ ADB shell ๐ฅ ๆฆ่ฟฐ Android ็ ADB ๅฎๆค็จๅบ adbd ไธญๅญๅจไธไธชๅ ณ้ฎ็่บซไปฝ้ช่ฏ็ป่ฟ ๆผๆด๏ผๅ ่ฎธๆฌๅฐ็ฝ็ปไธ็ไปปไฝๆปๅป่ ๅจ็ฎๆ ่ฎพๅคไธ่ทๅพๅฎๆด็ shell ๆ้๏ผ่ๆ ้็จๆทๆๆ ใ ่ฏฅๆผๆดๅญๅจไบ daemon/auth.cpp ๆไปถไธญ็ adbdtlsverifycert ๅฝๆฐไธญ๏ผๅ ถไธญ EVPPKEYcmp ่ขซ็จไฝๅธๅฐๅผใๅฝๅญๅจ็ๅฏ้ฅๆฏโโ RSA ๅฏ้ฅ๏ผ่ๆไพ็ TLS ๅฎขๆท็ซฏ่ฏไนฆๆบๅธฆ็ๆฏ ้ RSA ๅฏ้ฅ ๏ผEC P-256 ๆ...
adbHijacker
CVE-2026-0073 โ Android ADB TLS Authentication Bypass A proof-of-concept exploit and network scanner for CVE-2026-0073 , a critical zero-click, no-interaction remote code execution vulnerability in Android adbd's ADB-over-TCP authentication path. The vulnerability is a logic bug in...
CVE-2026-80904
CVE-2026-80904 is a Linux kernel vulnerability in the net/tls (TLS offload) subsystem. When an asynchronous TLS decryption fails, tls_sw_recvmsg() and tls_sw_read_sock() correctly check async_wait.err and abort the read, but tls_sw_splice_read() performs no such check. As a result, a splice opera...
PT-2026-80784
This update for redis fixes the following issues: Changes in redis: - Update to 8.10.1 Update urgency: SECURITY: There are security fixes in the release. - Security fixes - CVE-2026-62356 Miscalculated buffer size in CMSketch RDB loading may lead to heap OOB write - Out-of-bounds access in TopK...
CVE-2026-67294
FreeRDP before 3.29.0 improperly validates the Extended Key Usage EKU purpose of the peer certificate during client-side server TLS authentication. In x509utilsverify, when server-purpose X509PURPOSESSLSERVER verification fails, the code falls back to client-purpose and any-purpose verification, ...
CVE-2026-67293
FreeRDP before 3.29.0 affected versions = 3.28.0 contains an improper certificate hostname validation vulnerability. The TLS hostname matcher tlsmatchhostname in libfreerdp/crypto/tls.c treats a wildcard pattern such as .example.com as matching any hostname ending in .example.com, so it incorrect...
EUVD-2026-39185
When a provide-xfr is given with a tls-auth-name, a secondary requesting a transfer should provide a client certificate with that name. However, no client certificate is needed when the request comes in over TLS over the regular tls-port and not the tls-auth-port or over over TCP over the regular...
CVE-2026-12490
When a provide-xfr is given with a tls-auth-name, a secondary requesting a transfer should provide a client certificate with that name. However, no client certificate is needed when the request comes in over TLS over the regular tls-port and not the tls-auth-port or over over TCP over the regular...
CVE-2026-12490
When a provide-xfr is given with a tls-auth-name, a secondary requesting a transfer should provide a client certificate with that name. However, no client certificate is needed when the request comes in over TLS over the regular tls-port and not the tls-auth-port or over over TCP over the regular...
CVE-2026-8367
aria2c accepts a server certificate with incorrect Extended Key Usage EKU. If the attackers compromise a certificate with the associated private key issued for a different purpose, they may be able to reuse it for TLS server authentication...
Exploit for Incorrect Implementation of Authentication Algorithm in Google Android
ADB TLS Auth Bypass Exploit CVE-2026-0073 An automated netw...
CVE-2026-28387
CVE-2026-28387 is a vulnerability in the DANE client code of OpenSSL related to an uncommon TLSA record configuration that may cause a use-after-free or double-free on the client. Public advisories across multiple vendors confirm the issue and reference OpenSSL versions affected and available fix...
CVE-2026-33308
A flaw was found in modgnutls, a TLS module for Apache HTTPD. Prior to version 0.13.0, the module's client certificate verification process did not properly validate the key purpose specified in the Extended Key Usage EKU extension. This oversight could allow a remote attacker, possessing a valid...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: redis6 (UTSA-2026-006184)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-006184 advisory. Redis is an open source, in-memory database that persists on disk. In versions starting at 2.6 and prior to 7.4.3, An unauthenticated client can cause unlimited grow...
CVE-2026-27134 Strimzi: All CAs from a custom CA chain consisting of multiple CAs are trusted for mTLS user autentication
Strimzi provides a way to run an Apache Kafka cluster on Kubernetes or OpenShift in various deployment configurations. In versions 0.49.0 through 0.50.0, when using a custom Cluster or Clients CA with a multistage CA chain consisting of multiple CAs, Strimzi incorrectly configures the trusted...
RHEL 10 : keylime (RHSA-2026:2225)
The remote Redhat Enterprise Linux 10 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:2225 advisory. Keylime is a TPM based highly scalable remote boot attestation and runtime integrity measurement solution. Security Fixes: keylime: Keylime:...
CVE-2026-1709
A flaw was found in Keylime. The Keylime registrar, since version 7.12.0, does not enforce client-side Transport Layer Security TLS authentication. This authentication bypass vulnerability allows unauthenticated clients with network access to perform administrative operations, including listing...
CVE-2026-1709
CVE-2026-1709 concerns the Keylime registrar. Affected are 7.12.0 through 7.13.0, where the registrar does not enforce client TLS authentication, enabling unauthenticated network access to administrative endpoints (e.g., listing agents, retrieving public TPM data, deleting agents). Reported CVSS ...
CVE-2025-66220
A flaw was found in Envoy. This vulnerability allows mTLS mutual Transport Layer Security certificate validation bypass via a certificate containing an embedded null byte \0 inside an OTHERNAME SAN Subject Alternative Name value. Mitigation Mitigation for this issue is either not available or the...