CVE-2026-25961-SumatraPDF-3.5.0---3.5.2-RCE

SumatraPDF 不安全更新 PoC CVE-2026-25961 – 通过恶意更新服务器实现远程代码执行 作者： Mohammed Idrees Banyamer 日期： 2026 年 2 月 CVE： CVE-2026-25961 GHSA： GHSA-xpm2-rr5m-x96q CVSS v3.1： 7.5 高危 AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H 受影响版本： SumatraPDF 3.5.0 – 3.5.2 测试环境： Windows 10 / Windows 11 漏洞描述 SumatraPDF 3.5.0 至 3.5.2...

knockpy

🔍 Knockpy サブドメインスキャン v9.0 ✅ 高速 & 非同期 • 🔐 リコン + ブルートフォース • 🔧 拡張容易 KnockPy は、パッシブリコンネサンスとブルートフォースによりサブドメインを列挙するモジュール式のPython 3ツールです。async/await対応 、パフォーマンス向上、最新のHTTP/TLS処理を備えています。 🚀 機能 v9 ✅ 非同期スキャン （httpx と DNS 解決を使用） ✅ モジュール式: 新しいパッシブソースを簡単に追加可能 🔍 パッシブリコンネサンス 、ブルートフォース 、または両方をサポート 🎨 Rich...

CVE-2022-21668-Pipenv-RCE-vulnerability

CVE-2022-21668-Pipenv-RCE-漏洞 1. 引言 在本文档中，将详细讨论 Pipenv 漏洞（CVE-2022-21668）。以下章节介绍了 pipenv/utils.py 文件中的缺陷代码，该缺陷为各种 RCE 攻击打开了大门，并介绍了最近的修复，该修复验证了 SSL/TLS 连接，并将主机名与受信任主机列表进行核对。 1.1. 列表项 Pipenv 是一种工具，可自动为你的项目创建并管理 virtualenv，并在你安装/卸载软件包时向 Pipfile 添加/删除软件包。 更多信息 点击这里 1.2 requirements.txt...

CVE-2025-32407

CVE-2025-32407 CVE-2025-32407 の概念実証：Samsung Galaxy Watch 向けアプリ「Samsung Internet for Galaxy Watch」バージョン 5.0.9 における TLS 証明書検証の設定ミス。 説明 Galaxy Watch アプリ「Samsung Internet for Galaxy Watch」バージョン 5.0.9（Samsung Galaxy Watch 3 まで利用可能）は、TLS 証明書を適切に検証しないため、攻撃者がユーザーが訪問するすべての Web...

CVE-2026-86474

The lack of TLS certificate validation when downloading firmware updates in VEO and VEO-XS Wi-Fi monitors, in versions prior to 01.48.001, allows an attacker to perform man-in-the-middle attacks on the update channel...

CVE-2024-40898-SSL-Bypass-Detection

CVE-2024-40898 SSL 证书验证绕过扫描器 本仓库包含一个基于 Python 的概念验证 PoC 脚本，用于检测 CVE-2024-40898——Apache HTTP Server 中允许攻击者绕过 SSL 证书验证的漏洞。 概述 CVE-2024-40898 是 Apache HTTP Server 中的一个安全问题，在特定条件下允许客户端绕过证书验证。这可能会在 TLS 上造成中间人 MitM 攻击。 此脚本的功能 • 从 ssl-ports.txt 读取 host:port 对列表。 • 对于每个条目： • 使用禁用证书验证的自定义 SSL 上下文建立 TLS 连接...

ssl-kill-switch2

SSL Kill Switch 2 黑盒工具，用于在 iOS 和 macOS 应用程序中禁用 SSL/TLS 证书验证（包括证书固定）。这是 https://github.com/iSECPartners/ios-ssl-kill-switch 的第二代版本。 描述 一旦加载到 iOS 或 macOS 应用程序中，SSL Kill Switch 2 将修补负责处理 SSL/TLS 连接的底层函数，以覆盖并禁用系统的默认证书验证，以及任何类型的自定义证书验证（例如证书固定）。 它已成功针对各种实现证书固定的应用程序进行了测试，包括 Apple App Store。SSL Kill Swit...

CVE-2026-87872

A flaw was found in the OCAPI modules ocapicommand, ocapiinfo of the community.general Ansible collection. The shared OCAPI request helper disables TLS certificate validation on every request and the modules expose no parameter to re-enable it, while sending HTTP Basic-Auth credentials to an http...

DEBIAN-CVE-2026-87872

A flaw was found in the OCAPI modules ocapicommand, ocapiinfo of the community.general Ansible collection. The shared OCAPI request helper disables TLS certificate validation on every request and the modules expose no parameter to re-enable it, while sending HTTP Basic-Auth credentials to an http...

EUVD-2026-75086

A flaw was found in the OCAPI modules ocapicommand, ocapiinfo of the community.general Ansible collection. The shared OCAPI request helper disables TLS certificate validation on every request and the modules expose no parameter to re-enable it, while sending HTTP Basic-Auth credentials to an http...

CVE-2026-87872 Community.general: community.general: ocapi module_utils (ocapi_command, ocapi_info) hardcode validate_certs=false with no override, enabling tls man-in-the-middle and credential disclosure

A flaw was found in the OCAPI modules ocapicommand, ocapiinfo of the community.general Ansible collection. The shared OCAPI request helper disables TLS certificate validation on every request and the modules expose no parameter to re-enable it, while sending HTTP Basic-Auth credentials to an http...

CVE-2026-87872

A flaw in the OCAPI modules (ocapi_command, ocapi_info) of the community.general Ansible collection hardcodes validate_certs=false in the shared request helper with no parameter to re-enable it. Because the modules send HTTP Basic-Auth credentials over HTTPS, an attacker positioned on the network...

CVE-2026-87872

A flaw was found in the OCAPI modules ocapicommand, ocapiinfo of the community.general Ansible collection. The shared OCAPI request helper disables TLS certificate validation on every request and the modules expose no parameter to re-enable it, while sending HTTP Basic-Auth credentials to an http...

PT-2026-89097

A flaw was found in the OCAPI modules ocapi command, ocapi info of the community.general Ansible collection. The shared OCAPI request helper disables TLS certificate validation on every request and the modules expose no parameter to re-enable it, while sending HTTP Basic-Auth credentials to an...

Linux Distros Unpatched Vulnerability : CVE-2026-87872

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in the OCAPI modules ocapicommand, ocapiinfo of the community.general Ansible collection. The shared OCAPI request helper disables TLS...

CVE-2026-84197

In Eclipse Ditto's Node.js JavaScript client, all released versions of @eclipse-ditto/ditto-javascript-client-node from 2.0.0 to 3.9.0 and of its predecessor package @eclipse-ditto/ditto-javascript-client-node1.0 from 1.0.0 to 2.1.0, the WebSocket transport hard-codes rejectUnauthorized: false wh...

CVE-2026-84197

In Eclipse Ditto's Node.js JavaScript client, all released versions of @eclipse-ditto/ditto-javascript-client-node from 2.0.0 to 3.9.0 and of its predecessor package @eclipse-ditto/ditto-javascript-client-node1.0 from 1.0.0 to 2.1.0, the WebSocket transport hard-codes rejectUnauthorized: false wh...

EUVD-2026-74162

In Eclipse Ditto's Node.js JavaScript client, all released versions of @eclipse-ditto/ditto-javascript-client-node from 2.0.0 to 3.9.0 and of its predecessor package @eclipse-ditto/ditto-javascript-client-node1.0 from 1.0.0 to 2.1.0, the WebSocket transport hard-codes rejectUnauthorized: false wh...

CVE-2026-84197

Eclipse Ditto's Node.js JavaScript client hard-codes rejectUnauthorized: false in its WebSocket transport, disabling TLS certificate chain and hostname validation for every wss:// connection. All released versions of @eclipse-ditto/ditto-javascript-client-node (2.0.0–3.9.0) and its predecessor @e...

CVE-2026-84961

undici's BalancedPool constructor passes its entire options object through an internal deep-clone that serializes and reparses the value as JSON. Because JSON cannot represent functions, any function-valued TLS option, such as a caller-supplied checkServerIdentity callback or a custom connector...