Rustls: TLS 1.3 handshake messages incorrectly accepted across encryption level boundaries

Rustls accepted TLS 1.3 handshake messages sent at the wrong encryption level when they followed a key-changing message in the same record. The handshake transcript is still authenticated, so a network-position attacker cannot use this to alter or complete a handshake; the practical effect is tha...

GHSA-2MJX-QC3C-RQVC Rustls: TLS 1.3 handshake messages incorrectly accepted across encryption level boundaries

Rustls accepted TLS 1.3 handshake messages sent at the wrong encryption level when they followed a key-changing message in the same record. The handshake transcript is still authenticated, so a network-position attacker cannot use this to alter or complete a handshake; the practical effect is tha...

EUVD-2026-90922

GraphQL Tools: TLS Certificate Validation Disabled in Legacy GraphQL WebSocket Executor...

GHSA-6FW5-9HQ8-W87G GraphQL Tools: TLS Certificate Validation Disabled in Legacy GraphQL WebSocket Executor

Impact buildWSLegacyExecutor in @graphql-tools/executor-legacy-ws previously hardcoded rejectUnauthorized: false when creating WebSocket connections over WSS. This disabled TLS certificate validation, allowing a network-positioned attacker to perform a Man-in-the-Middle MITM attack against...

GraphQL Tools: TLS Certificate Validation Disabled in Legacy GraphQL WebSocket Executor

Impact buildWSLegacyExecutor in @graphql-tools/executor-legacy-ws previously hardcoded rejectUnauthorized: false when creating WebSocket connections over WSS. This disabled TLS certificate validation, allowing a network-positioned attacker to perform a Man-in-the-Middle MITM attack against...

impersonate-proxy

impersonate-proxy English | 日本語 | 简体中文 TLSフィンガープリントJA3/JA4、HTTP/2フィンガープリント、HTTPヘッダーの順序、User-Agent、送信元IPヘッダーを、単一のYAML設定ファイルから制御できるローカルMITMプロキシです。 プロキシを再起動せずにブラウザのツールバーから直接プロキシのON/OFF切り替えやフィンガープリントプロファイルの変更ができる Chrome拡張機能 も同梱しています。 WAFのボット検知システムに対する 許可されたセキュリティテスト...

CVE-2026-0073

ADB TLS 認証バイパス Exploit CVE-2026-0073 CVE-2026-0073 の自動ネットワークスキャナーおよびエクスプロイトツールです。これは Android Debug Bridge デーモン adbd の脆弱性であり、ワイヤレスデバッグ経由で認証なしのリモートコード実行 RCE と対話型シェルアクセスを許可します。 このツールは、最新の Android デバイス Android 13+ 向けに特別に最適化されており、ランダム化された ADB ポートを特定する mDNS 自動検出 と 完全対話型の raw PTY シェル を備えています。 🚨 脆弱性概要...

CVE-2026-105766 Chainguard Academy (edu) Nginx directory redirect downgrades HTTPS requests to HTTP

Use of the backend-facing $scheme variable in the trailing-slash directory redirect in nginx.conf of Chainguard Academy edu from commit 0b75ff98057f69b044a3e7194e428066ac5ad0d4 before commit 93dc0e50739c225f5aee2e803800a47fc0feb906 allows an on-path network attacker to read or modify documentatio...

CVE-2026-19445

A flaw was found in Python. A remote, unauthenticated TLS client can cause a use-after-free in a server that uses SSLContext.snicallback to assign a different SSLSocket.context when selecting a certificate per server name, if nothing else keeps the original SSLContext alive. This can crash the...

netty-handler: Netty: Denial of Service due to eager buffer allocation in TLS handshake

A flaw was found in Netty, a network application framework. A remote attacker can exploit this vulnerability by sending a crafted TLS Transport Layer Security ClientHello message. This can lead to an eager allocation of a large memory buffer, causing a Denial of Service DoS due to excessive memor...

SiYuan: TLS Private Keys Readable via getFile (Incomplete Blocklist)

Summary: IsForbiddenAbsPath only blocks conf/conf.json by exact match. The TLS private key conf/key.pem and CA private key conf/ca.key live in the same conf/ directory and are absent from the blocklist. Any authenticated user can retrieve them via POST /api/file/getFile. Root cause...

GHSA-4WWP-F6GW-6QM5 SiYuan: TLS Private Keys Readable via getFile (Incomplete Blocklist)

Summary: IsForbiddenAbsPath only blocks conf/conf.json by exact match. The TLS private key conf/key.pem and CA private key conf/ca.key live in the same conf/ directory and are absent from the blocklist. Any authenticated user can retrieve them via POST /api/file/getFile. Root cause...

CVE-2026-0257

使用 TLS 的公钥伪造 GlobalProtect 身份验证覆盖 Cookie CVE-2026-0257 一个概念验证脚本，用于测试目标 PAN-OS GlobalProtect 门户或网关是否存在 CVE-2026-0257。该脚本会遍历 HTTPS 服务使用的证书链，并针对链中的每个公钥伪造一个有效的身份验证覆盖 Cookie，然后对 GlobalProtect 目标进行测试，验证其是否有效。 成功伪造的 Cookie 将登录 GlobalProtect 目标并检索 VPN 连接信息（使用 --verbose 参数查看详细信息）。 使用方法 $ python...

CVE-2026-6789-Stack-Buffer-Overflow-in-Embedded-TLS-Certificate-Parser

9. CVE-2026-6789 – 임베디드 TLS 인증서 파서의 스택 버퍼 오버플로우 개요 널리 사용되는 경량 TLS 라이브러리시뮬레이션에는 조작된 길이 필드가 포함된 X.509 인증서 Subject Alternative Name 확장을 파싱할 때 스택 버퍼 오버플로우가 존재합니다. 심각도: Critical IoT/산업용 장치에서의 RCE 취약한 C 파서 및 익스플로잇 // tlsx509vuln.c include include include include // Vulnerable certificate parser struct...

PoC_TLS1_3_CVE-2020-13777

PoC TLS1.3 CVE-2020-13777 이 PoC의 목적 이 PoC와 관련 기사는 "Challenge CVE-2020-13777" 프로젝트에 지원하기 위해 작성되었습니다. CVE-2020-13777은 패치가 널리 배포된 GnuTLS 취약점입니다. 이 PoC는 정보통신 산업에 종사하는 사람들의 정보보안 리터러시 향상에 기여하는 것을 목표로 합니다. PoC와 기술 검증 결과를 널리 공개함으로써, 정보통신 산업에 종사하는 사람들이 이 취약점을 공개적으로 인지하기를 바랍니다. 이 PoC의 목적 관련 기사 및 기획...

Security update for java-11-openjdk

This update for java-11-openjdk fixes the following issues: CVE-2026-60589: improve resource resolving bsc1275777. CVE-2026-61308: enhance HTTP connections bsc1275778. CVE-2026-70907: enhance TLS server bsc1275764. Changes for java-11-openjdk: Upgrade to jdk-11.0.32.1+1 August 2026 CSPU Patch...

SUSE-SU-2026:4515-1 Security update for java-11-openjdk

This update for java-11-openjdk fixes the following issues: - CVE-2026-60589: improve resource resolving bsc1275777. - CVE-2026-61308: enhance HTTP connections bsc1275778. - CVE-2026-70907: enhance TLS server bsc1275764. Changes for java-11-openjdk: - Upgrade to jdk-11.0.32.1+1 August 2026 CSPU...

cve-2025-0282-ivanti_rce_reproduction

CVE-2025-0282 — Ivanti Connect Secure / Policy Secure / ZTA Gateways スタックベースのバッファオーバーフローによる RCE CVSS 9.0 — 重大 | 活発に悪用されているゼロデイ | 2025年1月に発見 概要 CVE-2025-0282 は、Ivanti Connect Secure ICS、Ivanti Policy Secure IPS、Ivanti ZTA Gateways の IFT/TLS 処理コンポーネントにおけるスタックベースのバッファオーバーフロー脆弱性 CWE-121 / CWE-787...

dtls-fuzzer

dtls-fuzzer 는 DTLS 서버의 프로토콜 상태 퍼징을 수행하는 Java 도구입니다. 구체적으로 다음과 같은 기능을 지원합니다: 1. 알파벳이 주어지면 로컬 DTLS 서버 구현의 모델을 자동으로 생성할 수 있습니다. 2. 테스트입력 시퀀스와 알파벳이 주어지면 DTLS 서버 구현에서 테스트를 실행할 수 있습니다. 3. 여러 학습 실행을 포함하는 배치 학습 작업을 실행할 수 있습니다. dtls-fuzzer 는 DTLS 메시지를 생성/구문 분석하고 상태를 유지하기 위해 TLS-Attackertlsattacker를 사용합니다...

POC-CVE-2026-0073

POC-CVE-2026-0073 ADB認証バイパス — 概念実証 naheeju によるセキュリティ研究PoC セキュリティ通知: CVE-2026-0073 は 2026-05-01 時点でパッチが適用されています。 このPoCは、セキュリティ研究、脆弱性分析、および影響を受けるシステムの認可されたテストのためにのみ提供されます。 目次 免責事項 概要 このPoCが実証する内容 安全境界 要件 リポジトリ構成 使用方法 ビルド 出力例 検証失敗 技術的詳細 証明書の取り扱い セキュリティ上の考慮事項 責任ある開示 研究理念 著者 ⚠️ 免責事項...