CVE-2014-0160

💔 CVE-2014-0160 — "Heartbleed" 📖 Inhaltsverzeichnis Übersicht Technischer Hintergrund Ursache Auswirkungen Betroffene Versionen Überblick zur Ausnutzung Abhilfe & Patch Zeitleiste Erkenntnisse Zusammenfassung 🔎 Übersicht Heartbleed ist der Spitzname für CVE-2014-0160 , eine schwerwiegende...

CVE-2026-0073-Android-client-TLS-auth-bypass

CVE‑2026‑0073 ist ein Logikfehler im ADB-Daemon adbd von Android, der es einem Angreifer ermöglicht, die gegenseitige TLS-Authentifizierung zu umgehen und eine Remote-Shell auf einem Gerät zu öffnen, auf dem drahtloses Debugging aktiviert ist und das mindestens einmal mit einem beliebigen Compute...

Heartbleed

Heartbleed-POC Dieses Repository dient als gültiger Proof-of-Concept für die Heartbleed CVE und enthält Anleitungen zum Einrichten Ihrer eigenen Heartbleed-Herausforderung ohne Verwendung eines vorgefertigten Dockerfiles. So bauen Sie das Labor 1. Navigieren Sie zum Quell-/Service-Verzeichnis mit...

minion-ticket-bleed-plugin

Plugin Minion Ticketbleed Este é um plugin para o Minion que executa uma verificação da vulnerabilidade Ticketbleed CVE-2016-9244 na camada TLS do F5. O teste pode ser executado como um script Go ou como um binário Linux. O script é uma versão melhorada de https://filippo.io/Ticketbleed/ Instalaç...

external_boringssl_openssl_1.1.0g_CVE-2021-23841

OpenSSL 1.1.0g 2. November 2017 Copyright c 1998-2016 Das OpenSSL-Projekt Copyright c 1995-1998 Eric A. Young, Tim J. Hudson Alle Rechte vorbehalten. BESCHREIBUNG Das OpenSSL-Projekt ist eine gemeinschaftliche Initiative zur Entwicklung eines robusten, kommerziell nutzbaren, voll funktionsfähigen...

Openssl_1.1.1g_CVE-2023-0464

OpenSSL 1.1.1g 21 Apr 2020 कॉपीराइट c 1998-2020 द ओपनएसएसएल प्रोजेक्ट कॉपीराइट c 1995-1998 एरिक ए. यंग, टिम जे. हडसन सर्वाधिकार सुरक्षित। विवरण ओपनएसएसएल प्रोजेक्ट एक सहयोगात्मक प्रयास है जो ट्रांसपोर्ट लेयर सिक्योरिटी TLS प्रोटोकॉल SSLv3 सहित को लागू करने वाली एक मजबूत, व्यावसायिक-ग्रेड, पूर्ण...

RustTLSX

RustTLSX 🦀 . Ein fortschrittlicher Stealth-HTTP-Client für Rust. Entwickelt für datenschutzbewusste Entwickler, die volle Kontrolle über ihren Netzwerk-Fingerprint benötigen. Sieht aus wie ein Browser. Verhält sich wie ein Browser. Geschrieben in Rust. Credits & Grundlage Basiert...

CVE-2025-23419

🔐 TLS Session Reuse Exploit Tester $ BY XIT Ein Python-basiertes Tool zum Testen potenzieller TLS-Sitzungswiederverwendungsschwachstellen, die eine Authentifizierungsumgehung in falsch konfigurierten Servern ermöglichen können. ⚠️ Haftungsausschluss Dieses Tool ist ausschließlich für Bildungszweck...

ecapture — Updated!

eCapture 旁观者 Capture SSL/TLS plaintext with eBPF—no MITM proxy or custom CA installation. English · 汉字 !IMPORTANT Supports Linux and Android on x8664 kernel 4.18+ and aarch64 kernel 5.5+. The kernel requirement applies per CPU architecture for both Linux and Android. Requires root privileges or...

PT-2026-104647

Name of the Vulnerable Software and Affected Versions gopay versions prior to 1.5.119 Description The software disables TLS certificate verification within the defaultClient function located in pkg/xhttp/client.go. This flaw allows man-in-the-middle attackers to impersonate payment provider APIs ...

PT-2026-104646

Name of the Vulnerable Software and Affected Versions Cockpit CMS versions 2.12.0 through 2.14.0 Description The software disables TLS certificate verification during the web worker restart request. This allows a man-in-the-middle attacker on the outbound path to the site url to present any...

PT-2026-104656

The alexpechkarev/google-maps Laravel package through 12.16 disables TLS certificate verification by default because the bundled config sets ssl verify peer to FALSE, which is passed to CURLOPT SSL VERIFYPEER. On-path attackers can present any certificate to intercept Google Maps web-service...

openSUSE 16 Security Update : distribution (openSUSE-SU-2026:22010-1)

The remote openSUSE 16 host has a package installed that is affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:22010-1 advisory. - CVE-2026-81871: go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploggrpc: OpenTelemetry-Go: TLS certificate bypass allows log telemetry...

caddy v2.11.7

a project Every site on HTTPS Caddy is an extensible server platform that uses TLS by default. Releases · Documentation · Get Help Powered by Special thanks to: Warp, built for coding with multiple AI agents Available for MacOS, Linux, & Windows Menu Features Install Build from source For...

AlmaLinux 9.6 [TuxCare] Security Update: rsync / rsync-daemon / rsync-rrsync Multiple Vulnerabilities (ALMALINUX9.6:CLSA-2026:1790971363)

The AlmaLinux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1790971363 advisory. - rsync before 3.5.0 contains a newline injection vulnerability in the name-converter uid/gid mapping interface that allows local...

Rocky Linux 9.6 [TuxCare] Security Update: rsync / rsync-daemon / rsync-rrsync Multiple Vulnerabilities (ALMALINUX9.6:CLSA-2026:1790971363)

The Rocky Linux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1790971363 advisory. - rsync before 3.5.0 contains a newline injection vulnerability in the name-converter uid/gid mapping interface that allows local...

SUSE SLED15 / SLES15 Security Update : python-anyio (SUSE-SU-2026:4416-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:4416-1 advisory. - CVE-2026-63374: : TLSStream IDNA 2003 host name encoding enables potential TLS certificate spoofing...

Security Bulletin: IBM Turbonomic kubeturbo agent used by IBM Turbonomic Application Resource Management is affected by a vulnerability (CVE-2026-14435)

Summary IBM Turbonomic Kubeturbo is an agent that integrates IBM Turbonomic with Kubernetes environments, including Red Hat OpenShift. The agent collects performance and configuration data and when deployed with sufficient privileges, enables IBM Turbonomic to make configuration changes that...

CVE-2026-85088

A flaw was found in Apache Thrift. During Transport Layer Security TLS certificate validation, the client libraries improperly evaluate the certificate's Common Name CN when subject alternative name SAN entries do not match the target host. A network-positioned attacker possessing a trusted...

CVE-2026-93393

A flaw was found in mongo-c-driver. A heap-based buffer overflow exists in the Transport Layer Security TLS transport layer when compiled with the Windows platform TLS backend. A remote server can exploit this flaw by sending crafted encrypted traffic after the TLS handshake completes, causing th...