CVE-2024-40898-SSL-Bypass-Detection

CVE-2024-40898 SSL Certificate Validation Bypass Scanner This repository contains a Python-based proof-of-concept PoC script to detect CVE-2024-40898, a vulnerability in Apache HTTP Server that allows attackers to bypass SSL certificate verification. Overview CVE-2024-40898 is a security issue in...

CVE-2016-8610-PoC

CVE-2016-8610 PoC CVE-2016-8610 Alerta de Muerte SSL PoC Uso: python ssl-death-alert.py DOMINIO/IP PUERTO VERSIÓN-PROTOCOLOSSLv3, TLS1.0, TLS1.1, TLS1.2 NÚMERO-DE-ALERTAS1000 HILOS50 python ssl-death-alert.py test.tdl 443 TLS1.2 1000 50 Más información: http://security.360.cn/cve/CVE-2016-8610/...

cve-2022-0778

cve-2022-0778 bad server go run server/main.go --addr 127.0.0.1:12345 cd test && testserver.sh docker stat bad client cd test && testclient.sh go run client/main.go --network tcp --addr 127.0.0.1:12345 docker stat build docker build -t cve-2022-0778 . docker hub start vulned server docker pull...

heartbleed.js

heartbleed.js openssl Heartbleed bug check for Node.js check result "code":0,"data":"1803021003020ff0d8030253435b909d9b720bbc0cbc2b92a84897cfbd3904cc160a8503909..." code: 0 vulnerable. 存在漏洞 code: 1 not vulnerable. 不存在漏洞 Demo npm install heartbleed-check var heartbleed = require'heartbleed-check';...

openssl_G2.5_CVE-2014-3570

OpenSSL 1.0.1g 7 Apr 2014 Copyright c 1998-2011 The OpenSSL Project Copyright c 1995-1998 Eric A. Young, Tim J. Hudson All rights reserved. DESCRIPTION The OpenSSL Project is a collaborative effort to develop a robust, commercial-grade, fully featured, and Open Source toolkit implementing the...

CVE-2014-5139

OpenSSL 1.0.1g 7 Apr 2014 Copyright c 1998-2011 The OpenSSL Project Copyright c 1995-1998 Eric A. Young, Tim J. Hudson All rights reserved. DESCRIPTION The OpenSSL Project is a collaborative effort to develop a robust, commercial-grade, fully featured, and Open Source toolkit implementing the...

CVE-2025-65753

CVE-2025-65753 Proof of concept for CVE-2025-65753: Remote code execution on the Gryphon Guardian access point, firmware version 01.06.0006.22, through an improper TLS certificate validation. Description The Gryphon Guardian WiFi access point, with firmware version 01.06.0006.22, does not properl...

ssl-kill-switch2

SSL Kill Switch 2 Herramienta de caja negra para deshabilitar la validación de certificados SSL/TLS - incluido el anclaje de certificados certificate pinning - dentro de aplicaciones iOS y macOS. Segunda iteración de https://github.com/iSECPartners/ios-ssl-kill-switch . Descripción Una vez cargad...

CVE-2026-107574

Inefficient algorithmic complexity in the JSON reader of Progressive Robot hMailServer allows a remote unauthenticated attacker to make the mail services unavailable. Reading a JSON object kept the first of each duplicated member name by searching the members already read, so an object of N...

openssl-ccs-cve-2014-0224

Adam Langley's tool for testing for OpenSSL CVE-2014-0224, originally published here: https://www.imperialviolet.org/2014/06/05/earlyccs.html To build the tool: $ export GOPATH=$pwd $ go build openssl-ccs-cve-2014-0224.go Tested with go 1.2.2 and 1.3. The src/my-tls directory contains the patched...

gosign-desktop-exploit-poc

Multiple Vulnerabilities in GoSign Desktop leads to Remote Code Execution Name: TLS Verification Bypass and Insecure Update in GoSign Desktop CVEs: CVE-2025-34324, CVE-2025-34327 System Affected: GoSign Desktop = 2.4.0 Fix: FoSign Desktop 2.4.1 partially fixed Vendor: Tinexta InfoCert S.p.A...

heartbleed-poc

HeartBleed Tester & Exploit NB Nearly all the tools nmap, metasploit, nessus, even burp have the most up to date versions of their scanners. These tools were released at the early stages when tools were still being developed. Rather use those than these now. Tool Guide If you want to mass scan, t...

OpenSSL_1_0_1g_CVE-2015-0205

OpenSSL 1.0.1g 7 Apr 2014 Copyright c 1998-2011 The OpenSSL Project Copyright c 1995-1998 Eric A. Young, Tim J. Hudson All rights reserved. DESCRIPTION The OpenSSL Project is a collaborative effort to develop a robust, commercial-grade, fully featured, and Open Source toolkit implementing the...

CVE-2026-107574

Progressive Robot hMailServer is vulnerable to a Denial of Service (DoS) attack due to inefficient algorithmic complexity (O(N^2)) in its JSON reader. The component fails to efficiently handle duplicated member names, causing significant processing delays: a 4 MB object can take 300 seconds to pr...

EUVD-2026-94854

Inefficient algorithmic complexity in the JSON reader of Progressive Robot hMailServer allows a remote unauthenticated attacker to make the mail services unavailable. Reading a JSON object kept the first of each duplicated member name by searching the members already read, so an object of N...

CVE-2026-107574 Inefficient Algorithmic Complexity in hMailServer

Inefficient algorithmic complexity in the JSON reader of Progressive Robot hMailServer allows a remote unauthenticated attacker to make the mail services unavailable. Reading a JSON object kept the first of each duplicated member name by searching the members already read, so an object of N...

phishing_catcher

Phishing Catcher Capture posibles dominios de phishing en tiempo casi real al buscar emisiones sospechosas de certificados TLS reportadas al Registro de Transparencia de Certificados CTL a través de la API CertStream. Las emisiones "sospechosas" son aquellas cuyo nombre de dominio supera un ciert...

openSSL_1.0.1g_CVE-2014-3507

OpenSSL 1.0.1g 7 Apr 2014 Copyright c 1998-2011 The OpenSSL Project Copyright c 1995-1998 Eric A. Young, Tim J. Hudson All rights reserved. DESCRIPTION The OpenSSL Project is a collaborative effort to develop a robust, commercial-grade, fully featured, and Open Source toolkit implementing the...

OpenSSL-1_0_1g_CVE-2015-1792

OpenSSL 1.0.1g 7 Apr 2014 Copyright c 1998-2011 The OpenSSL Project Copyright c 1995-1998 Eric A. Young, Tim J. Hudson All rights reserved. DESCRIPTION The OpenSSL Project is a collaborative effort to develop a robust, commercial-grade, fully featured, and Open Source toolkit implementing the...

OpenSSL-1_0_1g_CVE-2015-1790

OpenSSL 1.0.1g 7 Apr 2014 Copyright c 1998-2011 The OpenSSL Project Copyright c 1995-1998 Eric A. Young, Tim J. Hudson All rights reserved. DESCRIPTION The OpenSSL Project is a collaborative effort to develop a robust, commercial-grade, fully featured, and Open Source toolkit implementing the...