cve-2021-34558

POC для CVE-2021-34558 root@kitploit: Run the malicious TLS server go run main.go -mode server Run a normal http.Get client call against the server which panics go run main.go -mode client В ./vendor/github.com/refraction-networking/utls/handshakeserver.go внесена небольшая модификация, позволяющ...

CVE-2014-3466_PoC

Доказательство концепции для CVE-2014-3466 GnuTLS переполнение буфера: проверка длины идентификатора сессии Информация См.: https://bugzilla.redhat.com/showbug.cgi?id=1101932 Это не боевой эксплойт. будьте предупреждены: этот python код уродлив, я в значительной степени вручную создал ServerHello...

explain-my-curl

explain-my-curl explain-my-curl은 cURL 명령어가 DNS, TLS, HTTP에서 수행하는 작업을 이해할 수 있도록 도와주는 로컬 우선 CLI 도구입니다. 이 저장소는 현재 다음을 포함합니다: cURL 입력을 파싱하고 설명하는 CLI 명령어 대화형 탐색을 위한 스타터 TUI DNS, TCP 연결, TLS 핸드셰이크, 최초 응답 시간Time-to-first-byte에 대한 실행 텔레메트리 명령어 표시 및 오류 문자열에 대한 비밀 정보 삭제Secret redaction 프로토콜 투명성을 지원하는 증거 레이...

secret_handshake

Secret Handshake - mTLS를 통한 x509 인증서를 사용하는 악성코드 C2 채널 동기 먼저, 왜 이것을 오픈소스로 공개하는가? MITRE ATT&CK는 탈취되거나 자체 서명된 인증서에 대해서만 다루며, NDR네트워크 탐지 및 대응은 내가 아는 한 x509 인증서의 내용에 대해 발급 CA가 누구인지 외에는 거의 주의를 기울이지 않는다. 일반적으로 x509 인증서는 신뢰되며 우리 방화벽을 아무런 제재 없이 통과하도록 허용된다. 그러나 본질적으로 인증서는 다른 파일과 마찬가지로 악성 페이로드를 쉽게 포함할 수 있는...

CVE-2026-57163

PJSIP , a multimedia communication library written in C, contains a stack buffer overflow in its GnuTLS backend (tls_cert_get_info() in ssl_sock_gtls.c) triggered when parsing the Subject Alternative Name extension of a peer certificate. An incorrect buffer-size value causes an oversized entry to...

CVE-2026-84964

CVE-2026-84964 is a double free vulnerability in the MongoDB C Driver , specifically in its OpenSSL-based TLS certificate revocation checking path . During a TLS handshake, specially formed certificate data from a crafted multi-URL certificate can cause the same heap object to be released twice. ...

POC-CVE-2026-0073

POC-CVE-2026-0073 ADB 인증 우회 — 개념 증명PoC naheeju 의 보안 연구 PoC 보안 공지: CVE-2026-0073은 2026-05-01 기준으로 패치되었습니다. 본 PoC는 보안 연구, 취약점 분석 및 승인된 시스템 테스트 목적으로만 제공됩니다. 목차 면책 조항 개요 이 PoC가 입증하는 것 안전 경계 요구 사항 저장소 구조 사용 방법 빌드 출력 예시 검증 실패 기술적 세부 사항 인증서 처리 보안 고려 사항 책임 있는 공개 연구 철학 저자 ⚠️ 면책 조항 이 저장소에는 보안 연구, 취약점 분석, 승인...

CVE-2026-8932

🚨 CVE-2026-8932 - Самая старая проблема безопасности libcurl Неполное сопоставление конфигурации mTLS в libcurl Самая старая уязвимость, когда-либо исправленная в libcurl — остававшаяся незамеченной более 25 лет. 📖 Обзор CVE-2026-8932 — это уязвимость в libcurl , при которой библиотека может...

Amazon Linux 2 : golang, --advisory ALAS2-2026-3893 (ALAS-2026-3893)

The version of golang installed on the remote host is prior to 1.26.7-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2026-3893 advisory. Enforce a recursion limit in Unmarshal to prevent stack exhaustion when parsing deeply-nested, recursive structures...

CVE-2021-27876

CVE-2021-27876 Exploit RCE non autenticato per Veritas Backup Exec Agent CVE-2021-27876/77/78 — bypass dell'autenticazione SHA verso SYSTEM tramite NDMP CVE CVE| Descrizione| CVSS 3.1 ---|---|--- CVE-2021-27876| Bypass dell'autenticazione tramite manipolazione dell'hash SHA nel protocollo NDMP| 9...

EUVD-2026-67934

When mongosqld is configured with a client certificate authority file, the listener requests a client certificate during the TLS handshake but does not require one, so a client that presents no certificate is still accepted. In deployments that rely on client certificates as the sole means of...

Insufficiently Protected Credentials

Overview Affected versions of this package are vulnerable to Insufficiently Protected Credentials in the initial-handshake process. An attacker can intercept and obtain database credentials by performing a man-in-the-middle attack during the authentication exchange when the connection is...

CVE-2026-81518 BI Connector Optional Client Certificate Verification Allows Unauthenticated Connections

When mongosqld is configured with a client certificate authority file, the listener requests a client certificate during the TLS handshake but does not require one, so a client that presents no certificate is still accepted. In deployments that rely on client certificates as the sole means of...

BI Connector Optional Client Certificate Verification Allows Unauthenticated Connections

When mongosqld is configured with a client certificate authority file, the listener requests a client certificate during the TLS handshake but does not require one, so a client that presents no certificate is still accepted. In deployments that rely on client certificates as the sole means of...

CVE-2026-81518

mongosqld in the MongoDB BI Connector contains a TLS misconfiguration: when a client certificate authority file is configured, the listener requests a client certificate during the TLS handshake but does not require it. In deployments where client certificates serve as the sole authentication mec...

EUVD-2026-67309

ASE2000 2.35 through 2.37 is vulnerable to an improper certificate validation vulnerability, which may allow an attacker to impersonate the trusted peer, complete the TLS handshake, and read or modify protected communications...

CVE-2026-18717

ASE2000 2.35 through 2.37 is vulnerable to an improper certificate validation vulnerability, which may allow an attacker to impersonate the trusted peer, complete the TLS handshake, and read or modify protected communications...

PT-2026-83237

Name of the Vulnerable Software and Affected Versions MariaDB Connector/Node.js versions prior to 3.2.4 MariaDB Connector/Node.js versions 3.3.0 through 3.3.2 MariaDB Connector/Node.js versions 3.4.0 through 3.4.5 MariaDB Connector/Node.js versions 3.5.0 through 3.5.2 Description When SSL is...

CVE-2026-18717 Improper Certificate Validation in ASE 2000

ASE2000 2.35 through 2.37 is vulnerable to an improper certificate validation vulnerability, which may allow an attacker to impersonate the trusted peer, complete the TLS handshake, and read or modify protected communications...

CVE-2026-18717

ASE2000 versions 2.35 through 2.37 (by ASE Systems) contain an improper certificate validation vulnerability in the TLS implementation. An attacker with network access may impersonate a trusted peer, complete the TLS handshake, and read or modify protected communications. The CISA ICS advisory ra...