adbHijacker

CVE-2026-0073 — Contournement de l'authentification TLS ADB sur Android Une preuve de concept d'exploit et un scanner réseau pour CVE-2026-0073 , une vulnérabilité critique d'exécution de code à distance sans interaction ni clic dans le chemin d'authentification ADB-over-TCP d'adbd sur Android. L...

CVE-2026-0073-Android-ADBD-bypass-POC_zh_CN

CVE-2026-0073 — تجاوز مصادقة TLS في Android ADBD EVPPKEYcmp خلط الأنواع ← ADB shell غير مصرح به 🔥 نظرة عامة يوجد ثغرة تجاوز مصادقة حرجة في برنامج خادم ADB adbd في أندرويد، تسمح لأي مهاجم على الشبكة المحلية بالحصول على shell كامل على الجهاز المستهدف دون إذن المستخدم. توجد الثغرة في دالة...

Security Bulletin: IBM Documentation Offline may be vulnerable to TLS authentication bypass and authority rebinding due to Node.js (CVE-2026-48618, CVE-2026-48930)

Summary IBM Documentation Offline uses Node.js as its runtime environment. Node.js is affected by two vulnerabilities related to TLS hostname handling. CVE-2026-48618 involves improper handling of Unicode dot separators during TLS certificate verification, which could allow an attacker performing...

PT-2026-80784

Name of the Vulnerable Software and Affected Versions redis versions prior to 8.10.1-1.1 Description Multiple security issues affect the redis package, which is an open source, in-memory database that persists data on disk. Recommendations Update to version 8.10.1-1.1...

AZL-91224 CVE-2026-48618 affecting package nodejs for versions less than 24.17.0-1

A flaw in Node.js TLS hostname handling can cause Node.js unicode dot separator handling can lead to tls wildcard-depth authentication bypass due to resolver and verifier hostname normalization mismat. This can lead to confidentiality impact or bypass of the intended security boundary under...

Exploit for Incorrect Implementation of Authentication Algorithm in Google Android

ADB TLS Auth Bypass Exploit CVE-2026-0073 An automated netw...

CVE-2026-1709

A flaw was found in Keylime. The Keylime registrar, since version 7.12.0, does not enforce client-side Transport Layer Security TLS authentication. This authentication bypass vulnerability allows unauthenticated clients with network access to perform administrative operations, including listing...

CVE-2025-27810

Mbed TLS before 2.28.10 and 3.x before 3.6.3, in some cases of failed memory allocation or hardware errors, uses uninitialized stack memory to compose the TLS Finished message, potentially leading to authentication bypasses such as replays...

TLS Authentication Bypass

github.com/canonical/lxd is vulnerable to TLS Authentication Bypass. The vulnerability is due to improper certificate validation. LXD accepts non-CA signed certificates if they are present in the trust store, allowing unauthenticated clients to bypass the expected security checks...

CVE-2017-15896

Node.js was affected by OpenSSL vulnerability CVE-2017-3737 in regards to the use of SSLread due to TLS handshake failure. The result was that an active network attacker could send application data to Node.js using the TLS or HTTP2 modules in a way that bypassed TLS authentication and encryption...