CVE-2026-115942

A flaw was found in Apache Qpid Proton. When processing a misconfigured wildcard TLS Transport Layer Security certificate that does not comply with standard specifications, the application triggers an out-of-bounds read on the stack. A remote attacker could exploit this vulnerability by presentin...

CVE-2026-8932

🚨 CVE-2026-8932 - The Oldest libcurl Security Bug Incomplete mTLS Configuration Matching in libcurl The oldest security vulnerability ever fixed in libcurl—remaining unnoticed for over 25 years. 📖 Overview CVE-2026-8932 is a security vulnerability in libcurl where the library may incorrectly reus...

explain-my-curl

explain-my-curl explain-my-curl is a local-first CLI for understanding what a curl command is doing across DNS, TLS, and HTTP. This repository currently includes: A CLI command to parse and explain a curl input A starter TUI for interactive exploration Execution telemetry for DNS, TCP connect, TL...

kernel: sunrpc: wait for in-flight TLS handshake callback when cancel loses race

A flaw was found in the kernel. A race condition exists in the sunrpc component during the Transport Layer Security TLS handshake cancellation process. This can lead to the corruption of an internal data structure, potentially causing system instability or a denial of service. Additionally, it ma...

kernel: sunrpc: pin svc_xprt across the asynchronous TLS handshake callback

A flaw was found in the Linux kernel's sunrpc component, which affects TLS-enabled Network File System NFS servers. A race condition exists during the asynchronous TLS handshake process. A remote attacker could exploit this by closing a connection at a specific time, leading to memory corruption...

kernel: sunrpc: wait for in-flight TLS handshake callback when cancel loses race

A flaw was found in the kernel. A race condition exists in the sunrpc component during the Transport Layer Security TLS handshake cancellation process. This can lead to the corruption of an internal data structure, potentially causing system instability or a denial of service. Additionally, it ma...

kernel: sunrpc: pin svc_xprt across the asynchronous TLS handshake callback

A flaw was found in the Linux kernel's sunrpc component, which affects TLS-enabled Network File System NFS servers. A race condition exists during the asynchronous TLS handshake process. A remote attacker could exploit this by closing a connection at a specific time, leading to memory corruption...

CVE-2026-116542

A flaw was found in netty-tcnative. A remote, unauthenticated attacker can exploit this issue by sending a specially crafted Server Name Indication SNI hostname with overlong character encodings during a Transport Layer Security TLS handshake. This causes the application to decode the hostname...

tomcat-native: Apache Tomcat Native: Denial of Service via buffer over-read during TLS handshake

A flaw was found in Apache Tomcat Native. A remote attacker can exploit a buffer over-read vulnerability during the Transport Layer Security TLS handshake. Successful exploitation causes the Java Virtual Machine JVM to crash, resulting in a denial of service DoS...

tomcat-native: Apache Tomcat Native: Denial of Service via buffer over-read during TLS handshake

A flaw was found in Apache Tomcat Native. A remote attacker can exploit a buffer over-read vulnerability during the Transport Layer Security TLS handshake. Successful exploitation causes the Java Virtual Machine JVM to crash, resulting in a denial of service DoS...

secret_handshake

Secret Handshake - A Malware C2 Channel Using x509 Certs Over mTLS Motivation First off, why would I open source this? MITRE ATT&CK only talks about stolen or self-signed certs, and NDRs as far as I can tell pay very little attention to the content of x509 certificates outside of who is the issui...

CVE-2014-3466_PoC

Proof of Concept for CVE-2014-3466 GnuTLS buffer overflow: session id length check Information See: https://bugzilla.redhat.com/showbug.cgi?id=1101932 This is not a weaponized exploit. be warned: this python code is ugly, I pretty much handcrafted the ServerHello and spent only about five fifteen...

cve-2021-34558

POC for CVE-2021-34558 Run the malicious TLS server go run main.go -mode server Run a normal http.Get client call against the server which panics go run main.go -mode client There is a minor modification to ./vendor/github.com/refraction-networking/utls/handshakeserver.go to enable the malicious...

CVE-2021-27876

CVE-2021-27876 Unauthenticated RCE exploit for Veritas Backup Exec Agent CVE-2021-27876/77/78 — SHA auth bypass to SYSTEM via NDMP CVEs CVE| Description| CVSS 3.1 ---|---|--- CVE-2021-27876| Authentication bypass via SHA hash manipulation in the NDMP protocol| 9.8 Critical CVE-2021-27877|...

POC-CVE-2026-0073

POC-CVE-2026-0073 ADB Authentication Bypass — Proof of Concept Security Research PoC by naheeju Security Notice: CVE-2026-0073 has been patched as of 2026-05-01. This PoC is provided strictly for security research, vulnerability analysis, and authorized testing of affected systems. Table of...

CLEANSTART-2026-FF89657 TCP client can perform a TLS handshake and present the server name extension with a server name that is accepted by a server wildcard name, e

Security vulnerability affects the druid-fips package. A TCP client can perform a TLS handshake and present the server name extension with a server name that is accepted by a server wildcard name, e...

midonescanner-android

MidONe Scanner اسکنر حرفه‌ای آی‌پی تمیز CDN · CLOUDFLARE · DNS ⬇️ دانلود APK · 🖥️ دانلود Windows · 📣 کانال تلگرام 🔍 چرا MidONe Scanner؟ بیشتر ابزارهای اسکن IP فقط یک ping ساده می‌زنند — عددی که هیچ ربطی به سرعت واقعی اتصال ندارد. MidONe Scanner متفاوت است: داده واقعی دانلود می‌کند. سرعتی که اپ نشان...

CLEANSTART-2026-RK54646 TCP client can perform a TLS handshake and present the server name extension with a server name that is accepted by a server wildcard name, e

Security vulnerability affects the strimzi-kafka-operator package. A TCP client can perform a TLS handshake and present the server name extension with a server name that is accepted by a server wildcard name, e...

Amazon Linux 2 : tomcat-native (ALAS-2026-4058)

The version of tomcat-native installed on the remote host is prior to 1.2.38-3. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2026-4058 advisory. Buffer over-read vulnerability in Apache Tomcat Native during the TLS handshake permits a malicious user to trigger a DoS vi...

Low: ecs-service-connect-agent

Issue Overview: Issue summary: A certificate with many nameRelativeToCRLIssuer CRL distribution points causes disproportionate heap growth when OpenSSL caches X.509 extensions. Impact summary: Receiving a crafted certificate from a malicious peer can lead to significant memory pressure and possib...