openssl-1.1.1g_CVE-2022-0778

OpenSSL 1.1.1g 2020년 4월 21일 Copyright c 1998-2020 The OpenSSL Project Copyright c 1995-1998 Eric A. Young, Tim J. Hudson All rights reserved. 설명 OpenSSL 프로젝트는 Transport Layer SecurityTLS 프로토콜SSLv3 포함을 구현하는 강력하고 상용 수준이며 완전한 기능을 갖춘 오픈 소스 툴킷 및 완전한 강도의 범용 암호화 라이브러리를 개발하기 위한 협력적인 노력입니다. OpenSSL은 Eric ...

openssl-1.1.1g_CVE-2021-23840

OpenSSL 1.1.1g 21 Apr 2020 Copyright c 1998-2020 The OpenSSL Project Copyright c 1995-1998 Eric A. Young, Tim J. Hudson 판권 소유. 설명 OpenSSL 프로젝트는 TLSTransport Layer Security 프로토콜SSLv3 포함과 강력한 범용 암호화 라이브러리를 구현하는 견고하고 상용 수준이며 완전한 기능을 갖춘 오픈 소스 툴킷을 개발하기 위한 공동 노력입니다. OpenSSL은 Eric A. Young과 Tim J. Hudso...

openssl

Добро пожаловать в проект OpenSSL !openssl logowww.openssl.org !github actions ci badgegithub actions ci OpenSSL — это надёжный, промышленного уровня, полнофункциональный набор инструментов с открытым исходным кодом для протоколов Transport Layer Security TLS, ранее SSL, Datagram TLS DTLS и QUIC...

openssl_g2.5_CVE-2014-3566

OpenSSL 1.0.1g 7 Apr 2014 Copyright c 1998-2011 The OpenSSL Project Copyright c 1995-1998 Eric A. Young, Tim J. Hudson All rights reserved. DESCRIPTION OpenSSL 프로젝트는 SSLSecure Sockets Layer, SSL v2/v3 및 TLSTransport Layer Security, TLS v1 프로토콜과 완전한 강도의 범용 암호화 라이브러리를 구현하는 견고하고 상용 수준의 완전한 기능을 갖춘 오픈...

sslscan

SSLScan SSLScan은 HTTPS와 같은 SSL 서비스를 질의하여 지원되는 암호를 확인합니다. SSLScan은 쉽고, 가볍고, 빠르게 설계되었습니다. 출력에는 SSL 서비스의 선호 암호, 인증서가 포함되며 텍스트 및 XML 형식으로 제공됩니다. 기능 SSL 서비스 질의 지원되는 암호화 프로토콜: SSLv2, SSLv3, TLS 1.0, TLS 1.1, TLS 1.2 사용된 OpenSSL 라이브러리에 따라 다름 FTP, IMAP, POP3, SMTP 및 XMPP를 통한 STARTTLS 지원 HTTP 연결 수행 IPv4 및...

TLS-Attacker

TLS-Attacker TLS-Attacker — это Java-фреймворк для анализа TLS-библиотек. Он позволяет отправлять произвольные протокольные сообщения в произвольном порядке TLS-пиру и определять их модификации с помощью предоставляемого интерфейса. Это даёт разработчику возможность легко настроить собственный...

OpenSSL-CCS-Inject-Test

OpenSSL CCS Inject Test 이 스크립트는 다양한 설정 환경에서 취약한 서버CVE-2014-0224를 탐지하기 위해 설계되었습니다. 영향을 받는 각 프로토콜 버전SSLv3, TLSv1, TLSv1.1 및 TLSv1.2으로 협상을 시도하며, 포괄적인 암호화 제품군을 제공합니다. 변경 사항: v0.1 - 더 긴 인증서 메시지를 처리하기 위해 수신 버퍼 크기 업데이트 v0.2 - 다른 TLS 레코드와 동일한 세그먼트에 포함된 종료 경보를 인식하도록 레코드 처리 업데이트 v0.3 - 도구 출력을 명확히 하기 위해 문구 ...

Project-Field-Analysis-and-Memory-Leak-Demonstration

Цель Целью этого проекта была оценка удаленного хоста на уязвимость Heartbleed CVE-2014-0160, проверка её наличия и эксплуатация для извлечения потенциально чувствительной информации из памяти сервера через протокол TLS. Выполнение 1. Определение открытых сервисов Nmap nmap -sC -sV 52.215.184.158...

peetch

peetch peetch is a collection of tools aimed at experimenting with different aspects of eBPF to bypass TLS protocol protections. Currently, peetch includes three subcommands. The first called dump aims to sniff network traffic by associating information about the source process with each packet...

filebuster

Filebuster An extremely fast and flexible web fuzzer What is it? Filebuster is a HTTP fuzzer / content discovery script with loads of features and built to be easy to use and fast! It uses one of the fastest HTTP classes in the world of PERL - Furl::HTTP. Also the thread modelling is optimized to...

openssl_G2.5_CVE-2014-3570

OpenSSL 1.0.1g 7 Apr 2014 Copyright c 1998-2011 The OpenSSL Project Copyright c 1995-1998 Eric A. Young, Tim J. Hudson All rights reserved. 설명 OpenSSL 프로젝트는 보안 소켓 계층SSL v2/v3 및 전송 계층 보안TLS v1 프로토콜과 완전한 기능의 범용 암호화 라이브러리를 구현하는, 강력하고 상용 등급의 완전한 기능을 갖춘 오픈 소스 툴킷을 개발하기 위한 공동 노력입니다. 이 프로젝트는 인터넷을 통해 의사소통...

Rocky Linux 10.0 [CIQ] Security Update: java-21-openjdk / java-21-openjdk-debuginfo / etc Multiple Vulnerabilities (crlsa-2025_10873)

The Rocky Linux 10.0 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202510873 advisory. JDK: Better Glyph drawing CVE-2025-30749 JDK: Enhance TLS protocol support CVE-2025-30754 JDK: Improve HTTP client header handling CVE-2025-50059 JDK:...

Astra Linux - Vulnerability in Golang-1.19

Large handshake records can cause panics in the crypto/TLS context. Both clients and servers may send large TLS handshake records, which can cause both servers and clients to panic when attempting to construct responses. This issue affects all TLS 1.3 clients, TLS 1.2 clients that explicitly enab...

Astra Linux – Vulnerability in Wireshark

The TLS protocol dissector heap overflow in Wireshark versions 4.6.0 to 4.6.4 allows for denial of service attacks, and may lead to code execution...

Linux Kernel TLS Protocol Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows local attackers to disclose sensitive information on affected installations of Linux Kernel. An attacker must first obtain the ability to execute high-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the...

The vulnerability of the tls_push_record() function in the net/tls/tls_sw.c module of the Linux operating system’s TLS protocol implementation allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the tlspushrecord function in the net/tls/tlssw.c module of the Linux operating system’s TLS implementation is related to a single-shift error. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protect...

Security update for java-17-openjdk

This update for java-17-openjdk fixes the following issues: Upgrade to upstream tag jdk-17.0.20.1+1 August 2026 CSPU. CVE-2026-60589: unauthenticated attacker with network access via multiple protocols can gain unauthorized read access to a subset of accessible data bsc1275777. CVE-2026-61308:...

SUSE-SU-2026:4002-1 Security update for java-17-openjdk

This update for java-17-openjdk fixes the following issues: Upgrade to upstream tag jdk-17.0.20.1+1 August 2026 CSPU. - CVE-2026-60589: unauthenticated attacker with network access via multiple protocols can gain unauthorized read access to a subset of accessible data bsc1275777. - CVE-2026-61308...

SUSE-SU-2026:3998-1 Security update for java-1_8_0-openjdk

This update for java-180-openjdk fixes the following issues: Update to version jdk8u504 icedtea 3.40.1. - CVE-2026-60589: unauthenticated attacker with network access via multiple protocols can gain unauthorized read access to sensitive data bsc1275777. - CVE-2026-61308: unauthenticated attacker...

PT-2026-77448

Name of the Vulnerable Software and Affected Versions Oracle Fusion Middleware Oracle Identity Manager Connector version 12.2.1.4.0 Oracle Fusion Middleware Oracle Identity Manager Connector version 14.1.2.1.0 Description A flaw in the Core component of the Oracle Identity Manager Connector allow...