CVE-2022-0778-POC

一个针对 CVE-2022-0778 的简单远程触发 POC 为什么 在尝试验证我们这边的服务器实现是否受到 CVE-2022-0778 影响时，发现远程验证极其繁琐。虽然关于如何构造恶意证书来触发 BNnodsqrt 中的解析漏洞的教程早已存在，但主要问题在于大多数客户端实现会尝试解析客户端证书以便在 TLS 握手中使用它。这反过来意味着： 如果实现存在漏洞，该漏洞会被触发，客户端将占用 100% CPU 并停滞。 如果实现不存在漏洞，则无法解析证书，客户端会理所当然地退出。 是什么 实际需要的是能够在 TLS 握手中注入一条消息，从而替换客户端在响应 CertificateReque...

ligolo

Ligolo : 渗透测试者打造的简易反向隧道工具 目录 引言 使用场景 快速演示 性能 使用方法 设置/编译 如何使用？ 太长不看 选项 功能特点 待办事项 许可证 致谢 引言 Ligolo 是一款 简单 且 轻量 的工具，用于通过反向连接安全地建立 SOCKS5 或 TCP 隧道（使用椭圆曲线 TLS 证书）。 它类似于 Meterpreter 配合 Autoroute + Socks4a ，但更稳定、更快速。 使用场景 你在外部审计期间攻陷了一台 Windows / Linux / Mac 服务器。该服务器位于局域网内部，而你需要与该网络上的其他机器建立连接。 Ligolo...

rustbuster

rustbuster A Comprehensive Web Fuzzer and Content Discovery Tool Introduction Check the blog post: Introducing Rustbuster — A Comprehensive Web Fuzzer and Content Discovery Tool Download You can download prebuilt binaries from here. Installation installrustbuster echo "Installing latest version o...

AlmaLinux 9.6 [TuxCare] Security Update: rsync / rsync-daemon / rsync-rrsync Multiple Vulnerabilities (ALMALINUX9.6:CLSA-2026:1790971363)

The AlmaLinux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1790971363 advisory. - rsync before 3.5.0 contains a newline injection vulnerability in the name-converter uid/gid mapping interface that allows local...

Rocky Linux 9.6 [TuxCare] Security Update: rsync / rsync-daemon / rsync-rrsync Multiple Vulnerabilities (ALMALINUX9.6:CLSA-2026:1790971363)

The Rocky Linux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1790971363 advisory. - rsync before 3.5.0 contains a newline injection vulnerability in the name-converter uid/gid mapping interface that allows local...

SUSE SLED15 / SLES15 Security Update : python-anyio (SUSE-SU-2026:4416-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:4416-1 advisory. - CVE-2026-63374: : TLSStream IDNA 2003 host name encoding enables potential TLS certificate spoofing...

CVE-2026-85088

A flaw was found in Apache Thrift. During Transport Layer Security TLS certificate validation, the client libraries improperly evaluate the certificate's Common Name CN when subject alternative name SAN entries do not match the target host. A network-positioned attacker possessing a trusted...

go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploggrpc: OpenTelemetry-Go: TLS certificate bypass allows log telemetry interception and alteration

A flaw was found in OpenTelemetry-Go, specifically within its gRPC log exporter. This vulnerability allows a network attacker to bypass the intended private Certificate Authority CA pinning and mutual Transport Layer Security TLS configurations. The issue arises because the environment-only TLS...

Security update for python-anyio

This update for python-anyio fixes the following issues: CVE-2026-63374: : TLSStream IDNA 2003 host name encoding enables potential TLS certificate spoofing bsc1281476. CVE-2026-64847: AnyIO process-pool workers can block indefinitely on undrained stderr bsc1281475. Patch Instructions: To install...

SUSE-SU-2026:4416-1 Security update for python-anyio

This update for python-anyio fixes the following issues: - CVE-2026-63374: : TLSStream IDNA 2003 host name encoding enables potential TLS certificate spoofing bsc1281476. - CVE-2026-64847: AnyIO process-pool workers can block indefinitely on undrained stderr bsc1281475...

CVE-2026-80443 Insecure TLS Certificate Validation in API Tool Runner in HAVELSAN's Sef - AI Chatbot Platform

Improper certificate validation vulnerability in HAVELSAN Inc. Sef - AI Chatbot Platform allows Adversary in the Middle AiTM. This issue affects Sef - AI Chatbot Platform: before 2.1. NOTE: The vendor was contacted and it was learned that the product is not supported...

CVE-2026-80443 Insecure TLS Certificate Validation in API Tool Runner in HAVELSAN's Sef - AI Chatbot Platform

Improper certificate validation vulnerability in HAVELSAN Inc. Sef - AI Chatbot Platform allows Adversary in the Middle AiTM. This issue affects Sef - AI Chatbot Platform: before 2.1. NOTE: The vendor was contacted and it was learned that the product is not supported...

CVE-2026-0073

0-Click RCE en Android Vulnerabilidad crítica CVE‑2026‑0073 en el ADB de Android, un fallo de bypass de autenticación en la verificación del certificado TLS del daemon adbd, específicamente en la función adbdtlsverifycert la verificación del certificado TLS hace que la depuración inalámbrica...

CVE-2026-67598

CVE-2026-67598 Emlog Pro — Validación de certificados TLS deshabilitada en el asistente de IA MITM adyacente a la red → robo de clave de API del proveedor de LLM e inyección de respuestas de IA Resumen · Flujo del ataque · Código afectado · Prueba · Mitigación · Cronología · Referencias 📋 Resumen...

CVE-2026-15911

A flaw was found in confluent-kafka. The HashiCorp Vault Key Management Service KMS integration fails to properly validate Transport Layer Security TLS certificates by default. A remote attacker able to intercept network traffic could exploit this flaw to intercept and decrypt sensitive data or...

EUVD-2026-91026

The Joyland AI app accepts any TLS certificates from any server without validation...

CVE-2026-15911

Confluent Kafka Python client's HashiCorp Vault KMS integration could allow a remote attacker to obtain sensitive information due to improper TLS certificate validation...

EUVD-2026-91008

Confluent Kafka Python client's HashiCorp Vault KMS integration could allow a remote attacker to obtain sensitive information due to improper TLS certificate validation...

CVE-2026-15911

The Confluent Kafka Python client contains a vulnerability in its HashiCorp Vault KMS integration due to a failure to properly validate Transport Layer Security (TLS) certificates by default. A remote attacker capable of intercepting network traffic could exploit this flaw to intercept and decryp...

CVE-2026-103921

GraphQL Tools provides utilities for building, stitching, and mocking GraphQL schemas. Prior to 1.1.35, the executor-legacy-ws buildWSLegacyExecutor function hardcodes TLS certificate rejection off for Node.js connections to wss:// endpoints. Applications using the executor directly, or url-loade...