Lucene search
+L

1242 matches found

Kitploit
Kitploit
added 2026/09/05 2:21 p.m.8 views

CVE-2021-27876

CVE-2021-27876 استغلال تنفيذ أوامر عن بُعد غير مصادق عليه لوكيل Veritas Backup Exec CVE-2021-27876/77/78 — تجاوز مصادقة SHA إلى SYSTEM عبر NDMP الثغرات CVE| الوصف| CVSS 3.1 ---|---|--- CVE-2021-27876| تجاوز المصادقة عبر التلاعب بتجزئة SHA في بروتوكول NDMP| 9.8 حرجة CVE-2021-27877| قراءة ملفات...

9.8CVSS7.3AI score0.6491EPSS
SaveExploits7References1
Kitploit
Kitploit
added 2026/09/05 11:58 a.m.3 views

explain-my-curl

explain-my-curl explain-my-curl هي أداة CLI محلية أولاً لفهم ما يفعله أمر curl عبر DNS وTLS وHTTP. يتضمن هذا المستودع حاليًا: أمر CLI لتحليل وشرح إدخال curl TUI ابتدائية للاستكشاف التفاعلي قياس عن بعد للتنفيذ لـ DNS واتصال TCP ومصافحة TLS والوقت حتى أول بايت تنقية الأسرار لعرض الأوامر وسلاسل...

5.4AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/05 8:39 a.m.3 views

cve-2021-34558

POC pour CVE-2021-34558 root@kitploit: Run the malicious TLS server go run main.go -mode server Run a normal http.Get client call against the server which panics go run main.go -mode client Une modification mineure a été apportée à ./vendor/github.com/refraction-networking/utls/handshakeserver.go...

6.5CVSS6.2AI score0.06975EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/05 4:51 a.m.4 views

CVE-2014-3466_PoC

Preuve de concept pour CVE-2014-3466 dépassement de tampon GnuTLS : vérification de la longueur de l'identifiant de session Informations Voir : https://bugzilla.redhat.com/showbug.cgi?id=1101932 Ceci n'est pas un exploit militarisé. Attention : ce code python est moche, j'ai pour ainsi dire...

6.8CVSS8.7AI score0.11221EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/04 11:48 p.m.6 views

secret_handshake

Secret Handshake - قناة C2 للبرمجيات الخبيثة تستخدم شهادات x509 عبر mTLS الدافع أولًا، لماذا سأجعل هذا المشروع مفتوح المصدر؟ لا يتحدث MITRE ATT&CK إلا عن الشهادات المسروقة أو الموقعة ذاتيًا، وتمنح أنظمة كشف الشبكة والاستجابة NDRs على حد علمي اهتمامًا ضئيلًا جدًا بمحتوى شهادات x509 بخلاف الجهة...

5.3AI score
SaveExploits0
CVE
CVE
added 2026/09/04 5:11 p.m.10 views

CVE-2026-57163

PJSIP , a multimedia communication library written in C, contains a stack buffer overflow in its GnuTLS backend (tls_cert_get_info() in ssl_sock_gtls.c) triggered when parsing the Subject Alternative Name extension of a peer certificate. An incorrect buffer-size value causes an oversized entry to...

8.8CVSS5.6AI score
SaveExploits0References2
CVE
CVE
added 2026/09/03 3:02 p.m.7 views

CVE-2026-84964

CVE-2026-84964 is a double free vulnerability in the MongoDB C Driver , specifically in its OpenSSL-based TLS certificate revocation checking path . During a TLS handshake, specially formed certificate data from a crafted multi-URL certificate can cause the same heap object to be released twice. ...

8.2CVSS5.9AI score0.00147EPSS
SaveExploits0References1
Kitploit
Kitploit
added 2026/08/31 11:32 p.m.6 views

POC-CVE-2026-0073

POC-CVE-2026-0073 تجاوز مصادقة ADB — إثبات المفهوم إثبات مفهوم لأبحاث أمنية بواسطة naheeju إشعار أمني: تم تصحيح CVE-2026-0073 اعتبارًا من 2026-05-01. يتم توفير إثبات المفهوم هذا حصريًا لأغراض البحث الأمني، وتحليل الثغرات، والاختبار المصرح به للأنظمة المتأثرة. جدول المحتويات إخلاء المسؤولية نظرة...

8.8CVSS8.1AI score0.00541EPSS
SaveExploits13
Kitploit
Kitploit
added 2026/08/31 4:29 a.m.3 views

CVE-2026-8932

🚨 CVE-2026-8932 - أقدم ثغرة أمنية في libcurl عدم تطابق تكوين mTLS غير كامل في libcurl أقدم ثغرة أمنية تم إصلاحها على الإطلاق في libcurl—ظلت دون ملاحظة لأكثر من 25 عامًا. 📖 نظرة عامة CVE-2026-8932 هو ثغرة أمنية في libcurl حيث قد تعيد المكتبة استخدام اتصال TLS موجود بشكل غير صحيح بعد تغيير إعدادات...

7.5CVSS5.2AI score0.00396EPSS
SaveExploits1
Tenable Nessus
Tenable Nessus
added 2026/08/31 12:00 a.m.7 views

Amazon Linux 2 : golang, --advisory ALAS2-2026-3893 (ALAS-2026-3893)

The version of golang installed on the remote host is prior to 1.26.7-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2026-3893 advisory. Enforce a recursion limit in Unmarshal to prevent stack exhaustion when parsing deeply-nested, recursive structures...

8.4CVSS6.2AI score0.00568EPSS
SaveExploits0References18
EUVD
EUVD
added 2026/08/29 12:31 a.m.12 views

EUVD-2026-67934

When mongosqld is configured with a client certificate authority file, the listener requests a client certificate during the TLS handshake but does not require one, so a client that presents no certificate is still accepted. In deployments that rely on client certificates as the sole means of...

8.7CVSS5.9AI score0.00155EPSS
SaveExploits0References2
Snyk
Snyk
added 2026/08/28 10:41 p.m.7 views

Insufficiently Protected Credentials

Overview Affected versions of this package are vulnerable to Insufficiently Protected Credentials in the initial-handshake process. An attacker can intercept and obtain database credentials by performing a man-in-the-middle attack during the authentication exchange when the connection is...

8.2CVSS5.9AI score0.00222EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2026/08/28 8:18 p.m.38 views

CVE-2026-81518 BI Connector Optional Client Certificate Verification Allows Unauthenticated Connections

When mongosqld is configured with a client certificate authority file, the listener requests a client certificate during the TLS handshake but does not require one, so a client that presents no certificate is still accepted. In deployments that rely on client certificates as the sole means of...

8.7CVSS0.00155EPSS
SaveExploits0References1
MongoDB
MongoDB
added 2026/08/28 8:18 p.m.11 views

BI Connector Optional Client Certificate Verification Allows Unauthenticated Connections

When mongosqld is configured with a client certificate authority file, the listener requests a client certificate during the TLS handshake but does not require one, so a client that presents no certificate is still accepted. In deployments that rely on client certificates as the sole means of...

8.7CVSS5.9AI score0.00155EPSS
SaveExploits0References1Affected Software1
CVE
CVE
added 2026/08/28 8:18 p.m.20 views

CVE-2026-81518

mongosqld in the MongoDB BI Connector contains a TLS misconfiguration: when a client certificate authority file is configured, the listener requests a client certificate during the TLS handshake but does not require it. In deployments where client certificates serve as the sole authentication mec...

8.7CVSS5.9AI score0.00155EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/08/28 12:31 a.m.44 views

EUVD-2026-67309

ASE2000 2.35 through 2.37 is vulnerable to an improper certificate validation vulnerability, which may allow an attacker to impersonate the trusted peer, complete the TLS handshake, and read or modify protected communications...

9.1CVSS5.3AI score0.00216EPSS
SaveExploits0References4
NVD
NVD
added 2026/08/28 12:16 a.m.5 views

CVE-2026-18717

ASE2000 2.35 through 2.37 is vulnerable to an improper certificate validation vulnerability, which may allow an attacker to impersonate the trusted peer, complete the TLS handshake, and read or modify protected communications...

9.1CVSS0.00216EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2026/08/28 12:00 a.m.13 views

PT-2026-83237

Name of the Vulnerable Software and Affected Versions MariaDB Connector/Node.js versions prior to 3.2.4 MariaDB Connector/Node.js versions 3.3.0 through 3.3.2 MariaDB Connector/Node.js versions 3.4.0 through 3.4.5 MariaDB Connector/Node.js versions 3.5.0 through 3.5.2 Description When SSL is...

7.5CVSS5.3AI score0.00422EPSS
SaveExploits0References18
Cvelist
Cvelist
added 2026/08/27 8:20 p.m.48 views

CVE-2026-18717 Improper Certificate Validation in ASE 2000

ASE2000 2.35 through 2.37 is vulnerable to an improper certificate validation vulnerability, which may allow an attacker to impersonate the trusted peer, complete the TLS handshake, and read or modify protected communications...

9.1CVSS0.00216EPSS
SaveExploits0References3
CVE
CVE
added 2026/08/27 8:20 p.m.15 views

CVE-2026-18717

ASE2000 versions 2.35 through 2.37 (by ASE Systems) contain an improper certificate validation vulnerability in the TLS implementation. An attacker with network access may impersonate a trusted peer, complete the TLS handshake, and read or modify protected communications. The CISA ICS advisory ra...

9.1CVSS5.3AI score0.00216EPSS
SaveExploits0References3
Rows per page
Query Builder