CVE-2026-12665

IBM MQ could allow a remote attacker to execute arbitrary code due to a stack buffer overflow when processing TLS certificates with malformed distinguished names during channel connection establishment...

CVE-2026-12665 IBM MQ Buffer Overflow

IBM MQ could allow a remote attacker to execute arbitrary code due to a stack buffer overflow when processing TLS certificates with malformed distinguished names during channel connection establishment...

CVE-2026-12665

The IBM MQ software is susceptible to a stack buffer overflow (CWE-121) during the channel connection establishment phase. A remote attacker can exploit this vulnerability by providing TLS certificates containing malformed distinguished names , potentially leading to arbitrary code execution . Ex...

EUVD-2026-104465

IBM MQ could allow a remote attacker to execute arbitrary code due to a stack buffer overflow when processing TLS certificates with malformed distinguished names during channel connection establishment...

trufflehog

TruffleHog Find leaked credentials. 🔎 Now Scanning ...and more To learn more about TruffleHog and its features and capabilities, visit our product page. 🌐 TruffleHog Enterprise Are you interested in continuously monitoring Git, Jira, Slack, Confluence, Microsoft Teams, Sharepoint and more for...

shodan

Shodan Dorks by twitter.com/lothos612 Feel free to make suggestions Shodan Dorks Basic Shodan Filters city: Find devices in a particular city. city:"Bangalore" country: Find devices in a particular country. country:"IN" geo: Find devices by giving geographical coordinates...

lumina_server

About POC of an offline server for IDA Lumina feature. More details on https://www.synacktiv.com/publications/investigating-ida-lumina-feature.html Instalation Python package installation Download project and run python lumina/setup.py or pip install .. Server can also be used as a standalone...

CVE-2026-103502

The hex_core library (versions 0.1.0 before 0.20.0 ) contains an Improper Certificate Validation vulnerability. When using the default HTTP adapter on Erlang/OTP 24 or OTP 25 (specifically when CA certificates cannot be loaded), the library fails to verify server certificates for HTTPS requests. ...

phishing_catcher

Phishing Catcher Capture posibles dominios de phishing en tiempo casi real al buscar emisiones sospechosas de certificados TLS reportadas al Registro de Transparencia de Certificados CTL a través de la API CertStream. Las emisiones "sospechosas" son aquellas cuyo nombre de dominio supera un ciert...

Astra Linux – Vulnerability in nss, Thunderbird

Versions of NSS Network Security Services prior to 3.73 or 3.68.1 ESR are vulnerable to a heap overflow when handling DER-encoded DSA or RSA-PSS signatures. Applications that use NSS to handle signatures encoded within CMS, S/MIME, PKCS \7, or PKCS \12 are likely to be affected. Applications that...

Astra Linux – Vulnerability in Twisted

In words.protocols.jabber.xmlstream in Twisted through version 19.2.1, XMPP support did not verify certificates when used with TLS, allowing an attacker to intercept connections...

censys-enumeration

Enumerazione Censys Uno script per estrarre sottodomini/email per un dato dominio utilizzando il dataset dei certificati SSL/TLS su Censys L'output è in formato JSON Demo Schermate Modalità non verbosa Modalità verbosa Esempio di output JSON Dipendenza da pacchetti di terze parti censys click...

CVE-2026-102668

The Joyland AI app accepts any TLS certificates from any server without validation...

CVE-2026-102668

The Joyland AI app is vulnerable to improper certificate validation because it accepts any TLS certificates from any server without validation. This flaw can allow attackers to intercept or manipulate communications. No specific remediation, exploit details, or affected versions were provided in ...

CVE-2026-102668 Joyland AI accepts TLS certificates without validation

The Joyland AI app accepts any TLS certificates from any server without validation...

PT-2026-103983

Name of the Vulnerable Software and Affected Versions Joyland AI affected versions not specified Description The application fails to validate TLS certificates from servers, allowing it to accept any certificate regardless of its authenticity. This lack of validation can enable man-in-the-middle...

Rocky Linux 8 [CIQ] Security Update: perl-CPAN (crlsa-2024_3094)

The Rocky Linux 8 host has a package installed that is affected by a vulnerability as referenced in the CIQ crlsa-20243094 advisory. perl: CPAN.pm does not verify TLS certificates when downloading distributions over HTTPS CVE-2023-31484 Tenable has extracted the preceding description block direct...

Rocky Linux 9 [CIQ] Security Update: perl-CPAN (crlsa-2023_6539)

The Rocky Linux 9 host has a package installed that is affected by a vulnerability as referenced in the CIQ crlsa-20236539 advisory. perl: CPAN.pm does not verify TLS certificates when downloading distributions over HTTPS CVE-2023-31484 Tenable has extracted the preceding description block direct...

AZL-103098 CVE-2026-91992 affecting package python-tornado 6.3.3-11

Tornado before 6.5.7 contains a credential leak vulnerability in CurlAsyncHTTPClient where pycurl handles are reused across requests without proper state clearing. Attackers can obtain sensitive credentials by issuing requests through the same client instance, allowing TLS certificates or proxy...

CVE-2026-91992

A flaw was found in Tornado's CurlAsyncHTTPClient. This vulnerability occurs because pycurl handles are reused across requests without proper state clearing. A remote attacker can exploit this by issuing requests through the same client instance, leading to the unintended persistence of sensitive...