803 matches found
CVE-2025-23419
🔐 TLS Session Reuse Exploit Tester $ BY XIT A Python-based tool to test potential TLS session reuse vulnerabilities that may allow authentication bypass in misconfigured servers. ⚠️ Disclaimer This tool is for educational and authorized security testing purposes only. Do NOT use it on systems...
CVE-2024-36401
CVE-2024-36401 Remix of Chokapikk's CVE-2024-36401 to allow webshell-like behaviour on limited environments. Also allows for self-signed TLS sessions as HTTP sessions are a bit... Usage: git clone https://github.com/keelanbrady1011/CVE-2024-36401 && cd CVE-2024-36401 pip install -r requirements.t...
details-for-CVE-2022-46505
details-for-CVE-2022-46505 MatrixSSL session resume bug 1. Description of bug An issue in MatrixSSL 4.5.1-open and earlier leads to failure to securely check the SessionID field, resulting in the misuse of an all-zero MasterSecret that can decrypt secret data. 2. Affected version MatrixSSL...
nginx-cve-2026-97629
CVE-2026-97629 — nginx TLS session-ticket forgery client-certificate bypass One line of C. One forged TLS session. Found, proved end to end, and coordinated to a fix by PhiNode Labs. A proof-of-concept exploit, the root-cause analysis, the one-line patch and the reproduction evidence for...
node-cve-2026-58040-check
Tests node-cve-2026-58040-check Offline evidence checker for CVE-2026-58040 — Node.js: HTTPS Agent TLS session identity-policy bypass. It compares operator-reported Node.js runtime versions with the fixed releases named in the vendor advisory and writes a CSV, JSON or script-free HTML triage...
CVE-2026-123877
A certificate validation bypass in Node.js https.Agent lets a cached TLS session authenticated under one CA policy be reused by a later request with a stricter policy. https.Agent.prototype.getName assigns the same Agent and session-cache key to a request that omits ca and one that explicitly...
Linux Distros Unpatched Vulnerability : CVE-2026-123877
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A certificate validation bypass in Node.js https.Agent lets a cached TLS session authenticated under one CA policy be reused by a later request with a stricter...
CVE-2026-123877
A certificate validation bypass in Node.js https.Agent lets a cached TLS session authenticated under one CA policy be reused by a later request with a stricter policy. https.Agent.prototype.getName assigns the same Agent and session-cache key to a request that omits ca and one that explicitly...
UBUNTU-CVE-2026-123877
A certificate validation bypass in Node.js https.Agent lets a cached TLS session authenticated under one CA policy be reused by a later request with a stricter policy. https.Agent.prototype.getName assigns the same Agent and session-cache key to a request that omits ca and one that explicitly...
nodejs: nodejs: Certificate validation bypass via TLS session cache reuse
A flaw was found in Node.js. When managing outbound HTTPS connections, the client connection agent generates identical session-cache keys for requests with differing Certificate Authority CA trust configurations. Consequently, an existing Transport Layer Security TLS session established under a...
nodejs: nodejs: Certificate validation bypass via TLS session cache reuse
A flaw was found in Node.js. When managing outbound HTTPS connections, the client connection agent generates identical session-cache keys for requests with differing Certificate Authority CA trust configurations. Consequently, an existing Transport Layer Security TLS session established under a...
nodejs: nodejs: Certificate validation bypass via TLS session cache reuse
A flaw was found in Node.js. When managing outbound HTTPS connections, the client connection agent generates identical session-cache keys for requests with differing Certificate Authority CA trust configurations. Consequently, an existing Transport Layer Security TLS session established under a...
CVE-2026-123877
A flaw was found in Node.js. When managing outbound HTTPS connections, the client connection agent generates identical session-cache keys for requests with differing Certificate Authority CA trust configurations. Consequently, an existing Transport Layer Security TLS session established under a...
DEBIAN-CVE-2026-123877
A certificate validation bypass in Node.js https.Agent lets a cached TLS session authenticated under one CA policy be reused by a later request with a stricter policy. https.Agent.prototype.getName assigns the same Agent and session-cache key to a request that omits ca and one that explicitly...
CVE-2026-123877
A certificate validation bypass in Node.js https.Agent lets a cached TLS session authenticated under one CA policy be reused by a later request with a stricter policy. https.Agent.prototype.getName assigns the same Agent and session-cache key to a request that omits ca and one that explicitly...
ALPINE-CVE-2026-123877
A certificate validation bypass in Node.js https.Agent lets a cached TLS session authenticated under one CA policy be reused by a later request with a stricter policy. https.Agent.prototype.getName assigns the same Agent and session-cache key to a request that omits ca and one that explicitly...
CVE-2026-123877
A certificate validation bypass exists in the Node.js https.Agent component affecting versions 26.x , 24.x , and 22.x . The vulnerability arises because https.Agent.prototype.getName() assigns the same session-cache key to requests that omit the ca property and those that explicitly provide ca: [...
CVE-2026-123877
A certificate validation bypass in Node.js https.Agent lets a cached TLS session authenticated under one CA policy be reused by a later request with a stricter policy. https.Agent.prototype.getName assigns the same Agent and session-cache key to a request that omits ca and one that explicitly...
EUVD-2026-123696
A certificate validation bypass in Node.js https.Agent lets a cached TLS session authenticated under one CA policy be reused by a later request with a stricter policy. https.Agent.prototype.getName assigns the same Agent and session-cache key to a request that omits ca and one that explicitly...
CVE-2026-123877 Node.js is vulnerable to a certificate validation bypass in https.Agent via cross-policy TLS session reuse
A certificate validation bypass in Node.js https.Agent lets a cached TLS session authenticated under one CA policy be reused by a later request with a stricter policy. https.Agent.prototype.getName assigns the same Agent and session-cache key to a request that omits ca and one that explicitly...